{"report_id":"ceb9b12e-5b8f-414e-b641-ef165c139f62","version":0,"status":"done","tags":[],"date":"2026-09-05T10:00:22Z","url":{"schema":"http","addr":"www.tryrovina.com/KIT53949","fqdn":"www.tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"title":"Rovina™ | Science-Backed Astaxanthin Supplement","dom":{"size":692815,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16059)","md5":"4bb6f56d4aadd7f85dd9a642ca290b07","sha1":"2256bd8043183724cd38d3fcd14f503f15e7fe93","sha256":"b2b4a72bd74c0e5430dfd2143d332539cbb5afd498aad42c07672a92359bca8d","sha512":"4a3cb7d29a332f11deeb63aa09b2834a1f078ae9243fd69e0e0cef81cf7b718b88a7c984f926ce19dc9e2a020d771d90f0a0d7ac433a3ea6400f49335f180114","ssdeep":"6144:BgwOryMx7tkzafDkPdZCWWNxoaKItGyE29KQiqG7wry:BBOryMx7RDkPdZCWWNxJgyE29KQvy","tlshash":"56e42a30e675613b451780faaab1ab0173a9f28fdb028d90f6dd83554f96de29d3320d","dom_hash":"domhash5949bc4abdcc2e94461cab927b800b9b","first_seen":"2026-09-05T10:01:03.154903Z","last_seen":"2026-09-05T10:01:03.154903Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.tryrovina.com/KIT53949","fqdn":"www.tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T10:00:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"js.shrinetheme.com/js/v2/main.js?version=1","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-08-31T00:27:10.021732Z","alert_count":0,"request_count":1,"received_data":88176,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdn.zigpoll.com","ip":{"addr":"172.66.42.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-23","domain_rank":422597,"first_seen":"2019-04-24T19:55:30Z","last_seen":"2026-09-02T20:07:25.091194Z","alert_count":0,"request_count":2,"received_data":15313,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"tryrovina.com","ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"2025-11-20","domain_rank":0,"first_seen":"2026-02-01T05:25:23.836025Z","last_seen":"2026-02-14T19:29:51.702718Z","alert_count":58,"request_count":58,"received_data":32558313,"sent_data":71790,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Klaviyo","description":"Klaviyo is an email and SMS marketing platform for online businesses.","website":"https://www.klaviyo.com/","common_platform_enumeration":"","icon":"Klaviyo.svg","categories":["Marketing automation"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.tryrovina.com","ip":{"addr":"23.227.38.74","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":5238,"sent_data":2422,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":1311,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":2,"received_data":163327,"sent_data":990,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"conf.config-security.com","ip":{"addr":"104.26.15.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-13","domain_rank":48967,"first_seen":"2022-12-30T01:05:31Z","last_seen":"2026-08-29T07:42:14.331837Z","alert_count":0,"request_count":1,"received_data":1051,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.zigpoll.com","ip":{"addr":"172.66.41.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-23","domain_rank":381127,"first_seen":"2019-05-13T11:06:33Z","last_seen":"2026-08-25T07:37:40.172845Z","alert_count":0,"request_count":1,"received_data":625,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-09-04T10:28:23.543571Z","alert_count":0,"request_count":237,"received_data":306637,"sent_data":126321,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.shopify.com","ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"2005-03-11","domain_rank":3587,"first_seen":"2012-06-22T18:37:14Z","last_seen":"2026-08-31T11:44:36.398282Z","alert_count":0,"request_count":31,"received_data":426336,"sent_data":17217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.trackcollect.com","ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-10","domain_rank":2084185,"first_seen":"2021-11-12T00:44:31Z","last_seen":"2026-09-01T15:58:41.920458Z","alert_count":0,"request_count":8,"received_data":346010,"sent_data":3888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":4,"received_data":1742823,"sent_data":1925,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dashboard.heatmap.com","ip":{"addr":"172.67.69.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-08-13","domain_rank":183636,"first_seen":"2023-01-27T00:05:50Z","last_seen":"2026-09-01T01:31:04.751093Z","alert_count":0,"request_count":1,"received_data":158007,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":1,"received_data":3970503,"sent_data":590,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shopify.jsdeliver.cloud","ip":{"addr":"104.26.8.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-11","domain_rank":166125,"first_seen":"2023-06-16T23:31:41Z","last_seen":"2026-09-02T16:36:01.593303Z","alert_count":0,"request_count":1,"received_data":3274,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pixel.trackcollect.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-11-10","domain_rank":0,"first_seen":"2025-09-08T20:32:36.458312Z","last_seen":"2026-07-16T07:42:50.931757Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":487,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-accessibility.avada.io","ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-11-13","domain_rank":0,"first_seen":"2025-10-10T06:59:37.499588Z","last_seen":"2026-08-23T21:35:43.70647Z","alert_count":0,"request_count":5,"received_data":338657,"sent_data":2613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-09-04T05:04:07.076563Z","alert_count":0,"request_count":2,"received_data":1914,"sent_data":992,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shop.app","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-05-01","domain_rank":3567,"first_seen":"2020-04-15T21:27:58Z","last_seen":"2026-08-31T14:54:37.388786Z","alert_count":0,"request_count":2,"received_data":727,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"otlp-http-production.shopifysvc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-09-29","domain_rank":28477,"first_seen":"2022-09-22T19:34:55Z","last_seen":"2026-09-02T18:58:13.948977Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1551,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-30T22:54:14.488664Z","alert_count":0,"request_count":2,"received_data":1084,"sent_data":2200,"comment":"","tags":null,"fingerprints":null},{"fqdn":"backend.shrinetheme.com","ip":{"addr":"104.26.1.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-11","domain_rank":248150,"first_seen":"2024-07-13T18:11:51Z","last_seen":"2026-09-04T08:38:57.011187Z","alert_count":0,"request_count":2,"received_data":1164,"sent_data":1120,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"js.shrinetheme.com","ip":{"addr":"104.26.0.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-11","domain_rank":217352,"first_seen":"2023-12-03T18:49:04Z","last_seen":"2026-09-04T08:38:57.00548Z","alert_count":1,"request_count":1,"received_data":215606,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"backend.alia-prod.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-27","domain_rank":4304195,"first_seen":"2024-12-06T16:45:57.680714Z","last_seen":"2026-09-04T21:42:52.706602Z","alert_count":0,"request_count":5,"received_data":41303,"sent_data":3537,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"static.klaviyo.com","ip":{"addr":"151.101.130.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-03-29","domain_rank":17868,"first_seen":"2018-04-18T09:49:37Z","last_seen":"2026-09-01T04:11:57.173451Z","alert_count":0,"request_count":1,"received_data":5509,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"pixel.tracking.vaudit.com","ip":{"addr":"34.36.32.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2022-12-23","domain_rank":1909233,"first_seen":"2025-07-31T21:54:01.863827Z","last_seen":"2026-08-29T03:23:39.705415Z","alert_count":0,"request_count":4,"received_data":1681,"sent_data":2096,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"api.config-security.com","ip":{"addr":"34.149.60.135","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2022-11-13","domain_rank":45847,"first_seen":"2023-02-27T06:58:44Z","last_seen":"2026-09-04T19:39:01.903292Z","alert_count":0,"request_count":2,"received_data":156175,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"pixel.vaudit.com","ip":{"addr":"3.164.230.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-12-23","domain_rank":0,"first_seen":"2025-08-17T20:12:21.161942Z","last_seen":"2026-07-15T09:55:24.919105Z","alert_count":0,"request_count":1,"received_data":19130,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/t/27/compiled_assets/scripts.js?v=179266921911920200511782994794","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"85d661039202a2a4ed91777968212dbe","sha1":"0415ba2955dedbc3076759812d3cf3fcab49d835","sha256":"ad3ad3454e11fda721373b21a055fb970d99a128add2d85bf3137c9bc474ee1d","sha512":"a453bf94495f7842d2bfa0007fe6003467df7cbeb79360fd8554dc9cec0da605884ade7f364073b35b57420730fe13c28d4ab65844bb719760cc2ebd2f10ffe0","ssdeep":"","tlshash":"38712f5462193eb545ef84b3d0460f8076a678956612842d3b3cecff8ae4c11e3233f9","size":3715,"data":"","first_seen":"2026-09-05T10:01:03.18972Z","last_seen":"2026-09-05T10:01:03.18972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/checkouts/internal/preloads.js?locale=en-NO\u0026default_configuration_id=3545039069","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9c086bbeb4518511115e03ec09300c","sha1":"bba8ed819765f6396dddedc0a8875dc9a05a1fab","sha256":"a4d19fa832e1d4f83aef819f0601bfd99baf087e11a4076cf90f7188ba676fb2","sha512":"bfa8b1107c5cda5f40152063ebb2e71a506f6ba9a848200eff5948cb7ddb030d7ca96192e5b01ee8c76dc6ac5c680828c7326c0647137058ce0e4d977765965c","ssdeep":"192:qh76o1UD9BpoSybsAS65SmcKIGcQfpI7+Ibk6xr:q4o1ipoSwSmcHGcgpvBW","tlshash":"22426600045b97ed2ca638346d7665c0a2604607af26caf973ee037c7b56b7a08dfd76","size":12701,"data":"","first_seen":"2026-09-05T10:01:03.25734Z","last_seen":"2026-09-05T10:01:03.25734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9af0e15d9821f4690b442882d7d0829d","sha1":"79c84e0cb4e09a0526930349e3ff2a0e661a553a","sha256":"598197d0a59dc835206bf1cd320cae6d323a29abc516541d5bfbcd478a072128","sha512":"b7406deed99ad1646a5d48280a0134159fc861530294961dd1f0d6ea406c151892367b1ff11015628c63abe46112f9c688d705472f475a25a2d3247b6aa104ed","ssdeep":"","tlshash":"135151f0cae642e8c2d6f1901fa37479be52344fa0d9ee57d481cc91f88a0d0b31e499","size":3098,"data":"","first_seen":"2026-09-04T12:20:05.711464Z","last_seen":"2026-09-05T10:01:03.181477Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-06T14:08:23.122264Z","times_seen":361953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/beacon.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50fd403df914b6cc430c52bc28c30089","sha1":"00a21c3c57a15caaf990f0a7db041518156f4ebf","sha256":"f408b36739114c344ee083ec218c41ac9436f3c8f3855f84512c246a7319abe4","sha512":"5387cdafcc9a7b344e82559be8f9c591622f81a5529a281fd0f8dde423407d4da20147a66e47af2e1b71be060d2d66bb5a73a5604e782571b6aea724b1bd17d3","ssdeep":"768:m2r8s1+J88//afQSCpSCGB00k7nf5Q4dNRri9KCboZqQSacrRRWv0z2vKkS9/yoC:f+hSFrAGIo1l6SJ9UINfwGc","tlshash":"b6e23e8277c1b88103978bb7372ab1d5e02e6de9f688085bf541bc90f8a9502f9ed574","size":32094,"data":"","first_seen":"2026-08-26T02:18:06.752611Z","last_seen":"2026-09-05T10:01:03.440029Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-06T13:51:21.647842Z","times_seen":753275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-06T13:22:14.872506Z","times_seen":193412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MSRSKVZB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7371dc3e21baab0d1f02d6c6bf33c01f","sha1":"545ca5b32c665bc7a68d8decabe20cc136c88122","sha256":"0bf263f0304287089aef34d2d35400908f010bfc716644a96ceb9a106abeaf27","sha512":"466239af546ba0ad415d222f225aebc0bce6f4d7cd771d4e5606fa78d057f94b602a077f88a88127030ade9862bbf284a55efb071d7c4867a860dcd4fed4494a","ssdeep":"6144:2H1l3Pzfo78xfPZyc3DR/dEpv3ygUpSxdIp:AzsCFpS2","tlshash":"9d6408ccb7d6b46283a3b574503f014bb23a7992b84cc894f286e9d42d74a5a5237f7c","size":331222,"data":"","first_seen":"2026-09-05T10:01:03.452995Z","last_seen":"2026-09-05T10:01:03.452995Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/pixelate.js?api=91b9cec4-5d97-48cb-bf9b-5c786bbab919\u0026config=3","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ffd90551c64d94adb7bde00d59f695a","sha1":"f57d22d18967c8d30c1639b5aac480ecfff8cea1","sha256":"60b542ac38b8335f46a07b15d49e0d847eef47a11170c64684047531b5b934cd","sha512":"3ffc51efc107654583dc64a17bac1c363ff29a569bfa43bb37058f13010fd6c5e18caf78067cc1237d65fcb83f636ab9145bb74141a10ca3bbc6ab16bc1c98fb","ssdeep":"192:A1O1OO7dqhYsxfdxjsse0f695l3gbPIUWXCfHLkRT/iKW73yf4hB1Kx3bjv68GZJ:Nt7Ays9dxjss3f695l3g7XWXCfHL0iKU","tlshash":"90424381bbc1b8816247d7777b3ba1e5f02e0dd536c8549be204bce4f9e8401f9a4a74","size":12077,"data":"","first_seen":"2026-08-23T04:28:54.651137Z","last_seen":"2026-09-05T10:01:03.182428Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-09-06T12:48:34.145114Z","times_seen":239079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.init_CBgoSaqI.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"498330ede3a0317f0fb9377c8aea0683","sha1":"ccc48b66c0ea96b2054d9e57508051f7b1580fe2","sha256":"d728ef0c2c30f54db128533597aa60e5cb140eaa96bc542b25e697caf8f09425","sha512":"545fa5da5e4ed17154b37cbccae19bbfbae83950f67853935ffb55d666a5eafa8e41a13db8aca07e10a36cf169e848ec79e25a76498ef2eeb229be97dab2d483","ssdeep":"","tlshash":"170144fef797ecf18ad29cb8c0270127103d3392758a411c52fd4d90182a25b552e92e","size":672,"data":"","first_seen":"2026-09-03T16:26:38.550575Z","last_seen":"2026-09-06T11:36:39.568723Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.casing_BkIPdPn9.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"56e07dac7b97272e7aac40a55062be25","sha1":"d6a442ed7d84973727c268b3e1890d02ea5d5280","sha256":"f9208c6b5e3f4b0c20d0bc7ff0a8d1a2873ca6accfcf67b2447ae370c2c102a2","sha512":"832e5541cf0fe10242b082d519f0d9db178cea5397e0a2f0099a9f6b0088487338a6df1c376d164dc83e166595c93727dd18491a0b7c46f3384354dc95428a92","ssdeep":"192:HfDdFqSRb9bxj1SRn4UZB1eAk5VpkmycvbeFSH/lmH8Z2UQ9Lw9R46Yqo5r119PV:/fqC9bdi1ZzeAC5v62Z2U9vX2V9j092","tlshash":"9332f9fc7c24f0205bfb216170bb1c17b378051ff98854a05608edfa2ab456d661bf9a","size":11648,"data":"","first_seen":"2026-08-27T13:15:35.416221Z","last_seen":"2026-09-06T11:36:39.600478Z","times_seen":1789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-runtime.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7277ebb0c308da19ad212b9f5040849c","sha1":"1c3747ce4a0180a5dc0f6fc1b26a646c48e0115d","sha256":"5066478b938a0be4881ae99f088c6f8917e796bca22a61b91cd84e75a81edfe5","sha512":"45dccbec0e33853890c5c1e2f4722e203689f75cb93b84ffccdb23ce24d9b3215e841e19aec43cbe9efd7565864c599d5eaac75c8c962b1a8cd19220b62b768a","ssdeep":"1536:A/Nuk9nwzO/z4OOy+6xf0NmpS977u/qFxN:A/NukKI7OicEpS9XfxN","tlshash":"ea43f8947696f06007f705f480bb1175f3386a16f449c090e25e9a863c5aa9fb3bbf2d","size":59959,"data":"","first_seen":"2026-09-05T10:01:03.356134Z","last_seen":"2026-09-05T10:01:03.356134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/019dbe41-333e-7edd-a4ce-2128c404ca9a/bucks-currency-converter-29/assets/widgetLoader.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"011a854ee9ac27baa586e43e38f88ec9","sha1":"88fd39ab80ff8381b2ca51d737be8fdde6ffc5ce","sha256":"4528c2131baec0af48ae034f8322ed4364240ce799555d2dd9259d76cedb7313","sha512":"fb4c04b88257496644ffea4e3fe6dd86f5abcbffe76bce42ab7b792e0f70fce1fd22a5fc42374cf2aeb2b6d82e70f4cde1f0f74ab3221d0101cd6481cdeb2a74","ssdeep":"","tlshash":"dff0241979b2c434a46aa6dbcb7bd26cb06800322186e092b4488c5d9860ea448f3cdc","size":523,"data":"","first_seen":"2026-03-13T01:20:50.674831Z","last_seen":"2026-09-06T11:13:50.193261Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.storage_BGV5Ustn.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"6bb2af0b10714bd6b955a82f2291c75c","sha1":"0d423cccb03de712d8dd055fa643975e541c93e4","sha256":"f0fa22cd1528db027ebd2d2e3cd2e097c3240f8f2a8149036cdb484f6f376b47","sha512":"bcb8bf2b823ff2727068cb0be2e14abc3c7385b5d76568ff8124e1701a7b9a03135d903270d46fcdcc6ca7013f64f1b5fb317669c5c8b3b92a4fc73a607c5f80","ssdeep":"","tlshash":"70f04c9d75e728f4139055bee06e2621c73c10c1729f018090759b853f6d9af87b68ce","size":570,"data":"","first_seen":"2026-05-22T13:32:45.379579Z","last_seen":"2026-09-06T11:36:39.35859Z","times_seen":55685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/td.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22dc7c9384ff96e6f36aa40353299281","sha1":"dc8e02a9a613cd1b551368c06b18e994e9eaff3e","sha256":"68f8c0759ea3c45f7ff42a8766acb14e1b875adef61da371d7ad7412610a792c","sha512":"fa776b4c23d88eb6fde458cb432e36ca201e40099463b3b210021daa4d3b00d87401ca40db7bde3e013449a3d842f09106e25b6a2ae62ee98bf103fbfff5ff3b","ssdeep":"768:HLo4wxEg05/WN6OpMqKtiIdFkABzZICFYaDFV6hwQMPpOqOPo+a1cAQUVKmqzUBd:HLexEzLDFdDHjgzPCmZ4CjdIZ","tlshash":"a653c6443ad02585238797bb772ba0c5e92b0e5e39858c4bf7147e50b59163bfbf2a30","size":62696,"data":"","first_seen":"2025-12-17T19:23:49.324882Z","last_seen":"2026-09-05T10:01:03.386029Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-accessibility.avada.io/scripttag/sea-accessibility-loader.min.js?v=1788602385283","fqdn":"cdn-accessibility.avada.io","domain":"avada.io","tld":"io"},"ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20b0546754abe6892ee67f212a81ebaf","sha1":"734fb71c4409f98afa1d6f095b99f4a51055a773","sha256":"aef2e8f62da369cef5df7984aa1c4a3a82b848cd78f3cf5aaa27da028a172498","sha512":"fe90c5d344e3fdd72ef550f1ab8d83289086fd1c7709cb7ca73f69fefb2754e262b778af1f8347cae6eb72f616604b0d01e072806cd67dd3dbdb83669f1ada6d","ssdeep":"768:IPC8gHq5PEjuzC5c6qdcmcKRPU/RS6pWw2w6n2Y3:x8gHq5cVc6fMPmHn6n2Y3","tlshash":"b2e23ae3b2c471f0524797bde13fa228b67f38393b0bc6008168ee9469b448a8557f5d","size":32207,"data":"","first_seen":"2026-08-23T21:35:53.725556Z","last_seen":"2026-09-05T10:01:03.411549Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vitals.html?hsj=1","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-09-06T12:48:34.145114Z","times_seen":239079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee3ce82b0a89f74a4c5fd37b6229abc6","sha1":"b232d39e19dc23ab76467b1e54beac4957afb17c","sha256":"93f4da54aea7ccbf18a0ac71927f56d476187d60c0fb7c3c01fb99abbdff303d","sha512":"be26428d90b06bec4d66e829e4b0b3ff9c7db596057a0557a297bcd61da3111debd906b5aa4b8969b0a2976745f41a459b0bfad5c0df73ba9b542fa6c3ff848f","ssdeep":"1536:/2ZHTk8ACTn8JXTTtNYRBNkUARogQ1kprxTN5oGIJOp77DwIznu4TJc+5lH9y59M:/2CTTG/RAAkprxZfhp77DwkkH5eeY4D0","tlshash":"29f3b585e2fa10365297a0394e2bf497b618641b268ddd087a8c53dc5f4d53883f2fee","size":160611,"data":"","first_seen":"2026-09-04T12:32:16.136104Z","last_seen":"2026-09-06T06:24:29.257807Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles-api.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"604cca67fafa011b59f557f8dba5b33f","sha1":"aacc2a79766a89eb246be03510fb0d79c5286f0a","sha256":"0a9fc57aa415d768186290362e3ee874fd723ed7aa9ab2450a3f0872604b63c8","sha512":"cfe13266deb1fd8fe508c47a4024fadbbb384119fe2b523f04082f03f31536aa73a6086e9b73120c2facf28c5aefa1e4fa0c77bf94fb7c41889112e01e860f71","ssdeep":"384:Z5HAk31y1EqnNhL6BHHUCSyudFqxAEZP9VLeBtIgq1hL3GbAFvpylL:vp1eHqHHUCSyBnSc1hL34Alp+L","tlshash":"9792a441a2f225385267e03e1e1ff85a732da84b268dec55ba9c52444f4d13dc6f2fca","size":20201,"data":"","first_seen":"2026-09-04T12:32:16.212686Z","last_seen":"2026-09-06T06:24:29.352762Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vitals.html?hsj=1","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-06T13:51:21.647842Z","times_seen":753275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"eventHandler","is_inline":false,"md5":"c7fd14f6e5d6b56e6faf815d71a78e89","sha1":"92bf06a740487f9f17571ef4180407c6a3a812e6","sha256":"08b531362bc356d8851516f193df8159ab368945ad801edd87d507e4371ca092","sha512":"a3fd6bcdc61f0eff1a992c8264cc3a5834dbcc9912abce057f663f4267ede65be3d582811d2407ea0e0a41d091f07df55f777389a41c01040275e97869bfff03","ssdeep":"","tlshash":"3f70000000000880008a00a82203200003a020832000800200800c28300222b08ab0a0","size":19,"data":"","first_seen":"2025-08-30T17:15:23.146869Z","last_seen":"2026-09-05T10:01:03.463327Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vamp.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"757cf4544efe7c590ef169d87dd4af2c","sha1":"3e20e059d98a4a9557a1a09677b68082817a82c9","sha256":"3b635f845fe5a87856264fd47b194b6fa1e6d1936eacf700ff1bbe40ba8d71d4","sha512":"a53056dd59251eaabf57adb929eab7c64a4493262b981176dc4f8579f43841a986734958d9e909ac9e0a7d2eadee86161505c185d0536d7ec6ad122f21e7a399","ssdeep":"3072:ydmK6NMmNcxM4K0D5hsoCknOZ9oRMfPH/gfsRvyxZ4I6K+q7xvf/rYlQ11ZPE:ydmK6NnNcxRK0D5hsoCknOZ9oR0PH/gi","tlshash":"d0d383c177c5b85123476b37731bb1e9e42a8ced7498449bf100bc98f5e9612fae0ab1","size":141571,"data":"","first_seen":"2026-08-26T02:18:06.822795Z","last_seen":"2026-09-05T10:01:03.277945Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shopify.jsdeliver.cloud/js/config.js","fqdn":"shopify.jsdeliver.cloud","domain":"jsdeliver.cloud","tld":"cloud"},"ip":{"addr":"104.26.8.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6db0b6212daf7db60ae1ad67dc05c1b8","sha1":"b187f592a050b06f2ad1d2ba20d6c6ddf75eda21","sha256":"9be6a9f19ef2805ae1055d811e09e1d1d7fc8231495bf1f8b2d18231ea04e746","sha512":"f2c25468704d2815f4b9200d0f0cfdd454062f2416b75c1571a4fc57a0cd3cfc5065b961689d94cfe91b97b729242d1cf1fb78d633e1be1f82350f253fb6d93a","ssdeep":"","tlshash":"fb51d6c528e0d1f8da0557780eb1169cfbbf34ade8a0a588ccc7583aa95cea90c4c00b","size":2453,"data":"","first_seen":"2023-11-05T12:04:27Z","last_seen":"2026-09-06T06:42:52.925289Z","times_seen":8018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/storefront/load_feature-1bd60354.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"6775622c397dcfa06f3eebf84d89f54a","sha1":"1f50d4ae8a7bc2d2751cdac88ce50d44df264ba7","sha256":"263a0fa7965f075b1202ce5241aa25d71d4682fbde33e060991cf20dec489c44","sha512":"1e384971032cb409dba16b3d7ca6a8850ef125b1b2a9e19388156d7ed397d6ea4a8493e42612e9c143237e24d37236c408de1bd0b45e714f417700dfe82b3dc7","ssdeep":"384:7zTyVf/v/+4trtuxc22/cj2sq0/nbjBXgrm65GcYCTJYt21b59:7zmVf/v/+4trt6cKj2sq0/nbVXgrm6cA","tlshash":"3e52775e5e13d57f8ee71af71ca741142fa81eef340cd00083ad5f8628d06da6a2ee65","size":13938,"data":"","first_seen":"2026-04-15T05:14:11.956412Z","last_seen":"2026-09-06T13:16:07.552175Z","times_seen":81448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.document_CC4DPZSc.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"d134ea68ae5524c53704c644179bc0fc","sha1":"b81b41ebc725fb869e21a6d33e39273fb97f6849","sha256":"18b1adf70472ce68ab4acb8fd8f654f2c527a0835befed8be0e43f6add6a8a77","sha512":"a8df99c2579e9105f7156465f5c73d8c8d933ba1c248732168fd75c78b88eed693a0334d7a996ce976d69cbc19d7182f2b54f259a30d5c3783588fc64167305c","ssdeep":"","tlshash":"4bf09ee12a74bdf808de56779114f1f99e8800dfb2b316e0e11d4f6c1870cb572040ba","size":537,"data":"","first_seen":"2026-06-04T14:11:03.257549Z","last_seen":"2026-09-06T11:36:39.569382Z","times_seen":47189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/client.init-shop-cart-sync_VQy1KpG_.en.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"68166aae86472cae62c9ed9821c85fd3","sha1":"a1fd9a1117abad8325af49819638112fa3e57e0f","sha256":"d21e4a92c10f1a6e99a073eeea6f7a0edf709904c99ef84c2e55ca12cb714c12","sha512":"e03c7dcd5a82190f80ba0c4bd7bf0acf8f410f55ebc2c2e0257f7cfdf119e545920adcec7d52f0e7e5343a05e430628646b951b49de1203099217d2b02b7ad58","ssdeep":"","tlshash":"3231cefed013b8a011d5dcf5d16252214572386ab7de4768d0ff0f9c0e1a06b8a3a96d","size":1700,"data":"","first_seen":"2026-09-03T16:26:38.574179Z","last_seen":"2026-09-06T11:36:39.548767Z","times_seen":375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.index_Jmvh7d10.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"4963f90c9c75ef084ac7c38c346a1131","sha1":"a63e014815bf34aaed228085d9afda7ca26c7d71","sha256":"eb6544e30996603840d99c7c994efb93101eeef5096c59025d5a41deb5576375","sha512":"d89b8235c56c9f2bfb25cb6dc1e0f9b5b2447d2efcc8837c8839253c8742dba9fc60b8d21f3152019ac4164ee3e987f88a014eb1158c439e0ec72afe7b88bdc1","ssdeep":"1536:sJs7ZRNT8P7UQoB/jUslW+6BC0jSnb5p1k9vO:Ks9RmHgW+6JjSnb5p1kM","tlshash":"e8735b54b371a03a1d9344f5817b6009f33a75c8bd2fc0e4fa5869d22de42da5ab7b2c","size":74031,"data":"","first_seen":"2026-09-03T16:26:38.553092Z","last_seen":"2026-09-06T11:36:39.276862Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zigpoll.com/static/js/main.js","fqdn":"cdn.zigpoll.com","domain":"zigpoll.com","tld":"com"},"ip":{"addr":"172.66.42.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"130454778b52a76852b2fb93139d5edb","sha1":"25c155fc075117bac9a09e6d1cc7ffa90ba76848","sha256":"8e11c5debc0ade0157bf0b590a2ad9a66141a35724f979c0dd07394f3b58066f","sha512":"b6613716a158a5c82762c5c38276b6ec673edbaafaefa94f0edfb206c99522043123bef93bb2fb0d003f7980127095fb2ec92ea9bfac3797b0fbeb76f54ba4dd","ssdeep":"96:l7JTz/az9S+91QRyz6dp89i5RbnOVg2rcnAks/4Zbjysq7cpBdLWM7pq7lwJgZxg:f4w+9Gj5DXZGspnFgHLF/AFjEgGi","tlshash":"6022529e30817ba123e2007e665f7702b3764656294c85815ab6d6c43d38e9bc3a2fda","size":10682,"data":"","first_seen":"2026-08-30T08:47:34.969908Z","last_seen":"2026-09-05T11:38:55.2522Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.alia-prod.com/public/launcher.js?shopifyUrl=igkqfc-ff.myshopify.com","fqdn":"backend.alia-prod.com","domain":"alia-prod.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"430e3486a40665a409c365ebcf42d025","sha1":"7fafccc14f20a179de6c39d4ca4dedbcad408628","sha256":"7f015353cd0c1a54b5c50ae6df747f41391c2ab30df9cc5f4a59e6099710f73f","sha512":"8c81970f12036dcd2aa5d028baeb899c7003be33692aad33b8c951c1f6738a65b43d042b82aef5d1b8486b3155fc792cfe261075bd0305ebcd3d9c755146d0b0","ssdeep":"768:G3cQsT1pA+xlDPBMb3McuwfUgY9R/SKy9yWPNBNjUvPW/NDU9tjrFdtUrqR71eeJ:G3aHwIDopCgNuz","tlshash":"f5f2d88db1fbb125a3e254f9507b0009b13c6e203849c480f0adad9e7a7ad5586b7f7d","size":35969,"data":"","first_seen":"2026-09-05T10:01:03.25956Z","last_seen":"2026-09-05T10:01:03.25956Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zigpoll.com/zigpoll-shopify-embed.js?shop=igkqfc-ff.myshopify.com","fqdn":"cdn.zigpoll.com","domain":"zigpoll.com","tld":"com"},"ip":{"addr":"172.66.42.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1291e4dea96ca8459987523032a8c0a0","sha1":"d5b30ee6e3e7c6efbc77f743e23054be5fbf7cdd","sha256":"30e28f6922196c251ba2193dadb232c990293ea5795ca9898f1dbc32e957c909","sha512":"a0b39cf8013f16dced4350f6e931b65f45d612c64f234e31fdba65e4069244765df9ee6cf63bd79c849fa0b0ebdb7358575f29361695921391696e40bb7018cc","ssdeep":"","tlshash":"f56165d65012fb7752e55868abcfa711b0f5762e3a20c443621ccb2d3428cbbf259dc1","size":3208,"data":"","first_seen":"2026-08-30T08:47:35.192391Z","last_seen":"2026-09-06T05:16:55.794921Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.authorize_BuQdLYn9.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"e8bada1a48b9fce6c9182be78ebd9398","sha1":"0f9c55cab57a03c69358b4942c8cf2fda122d687","sha256":"8c8ee15e9443da7d8524a5f1ec8b1978bc7c63a891cce985c3da33e84b2fa652","sha512":"89628dbf4593283265ae53b826272724ac364c6ee1b68bb33e592370960af4a61db43e5856bf9587b0c6c1c6327afe226368572a673574494af7b230b358b22d","ssdeep":"","tlshash":"1ef049fa969824b487b218ac9197f41792267e3d3bec45e0d3204e944c31eeba434c1d","size":639,"data":"","first_seen":"2026-07-31T17:05:34.173813Z","last_seen":"2026-09-06T11:36:39.54937Z","times_seen":8278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/client.shop-cart-sync_CjCQxSNu.en.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"d487bc8e76242d3195f74aa9d52cb7b1","sha1":"2e618a137c6ad15ecc4154c3358790646f7b7411","sha256":"fc3471608ce87c4eb5d33af942f06738b9fb64eb104e41bc21de626c295ce888","sha512":"c551b953fb2ad8278386594e7c713b59e9549611baa48b697084c025b2a8bc36c5bb5212235792bba92fc35c58dd6698e7ae99c412b6885b31dabc5bfb086fdb","ssdeep":"192:IVPETeH4pxeA5NjbgK1Yex1NocoOEGdIrJe9RSr:I1ETeOxeA5Njhiex1No0EeI9e98r","tlshash":"91e1d8aab581eab14643c9fd9072121461283e1478d6c0a0c3be8bd52e9b1cbe775f1d","size":7355,"data":"","first_seen":"2026-09-03T16:26:38.56399Z","last_seen":"2026-09-06T11:36:39.599007Z","times_seen":375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"30ffcc71ab21c649205f29ad3ae32ef1","sha1":"1c2f4469da18a424eb53ba21a153fddea572718d","sha256":"a72ba1be428bdc347d7ff2d6b2c34c5834d3baf85e7412791063bed141dd6d93","sha512":"11463885558541e28a7ac33ee61f999e6c82b0bb5c82269d7069c2f2a629b21a8bd6375b86b9500022d5769d178de6658ffd71c1fa4aa829d80d5dcd8819c0bc","ssdeep":"","tlshash":"630179fbc451eda640e0dda4d50197740cba220ba6ee933dc0ff4bac0e5542bce6900e","size":852,"data":"","first_seen":"2026-09-03T16:26:38.558996Z","last_seen":"2026-09-06T11:36:39.446585Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-engagement.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"05eaa896e3683993e7993be511abf329","sha1":"339639eeac593daa3c900dea7d2c5f4cd97a6224","sha256":"5d6b50a5ad290b4036c9c7d79f9e742b464912fd52639888835e2110a9102c2b","sha512":"13e755c23a7f830de3debd03153b7b1d84aa234ba4ad467450711849d418ec1d0de33536ca07b94a46338600e0239a8145dea1eeeec8629064fbdd26a360c774","ssdeep":"192:IkNRGU7w9e4rp/AYRp3pMMKk3KPdXohZseewMg50dODXOPJpi6:IkDGU794JAYREM3n1Mg50dKXOP3","tlshash":"27e1d6de3c81b0281af744a461376639e336568278c2c4a091f44e853e69e8f9332fdd","size":6829,"data":"","first_seen":"2026-09-05T10:01:03.364392Z","last_seen":"2026-09-05T10:01:03.364392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"eventHandler","is_inline":false,"md5":"88f227fdc564f3a5512c1cd6fb32be20","sha1":"3803102a0b773da67f1b404d7a506c8bf7aabd04","sha256":"b3730d0b59f8af0149690b9f6ae33b1438b87c8a2bfc04a9519068262f5fc638","sha512":"b540b6650e9abd382c31371c398f03efd712237b987c38160c06b03f53f18a3ed876f6d79e25f8b3b7e64dde5811fca17e0c0af687d2b1148af6694f3e7e9540","ssdeep":"","tlshash":"818000a0c0a28fa020faa830023022c008288cc200fec8b8802e238e023800030aa3bc","size":35,"data":"","first_seen":"2024-08-19T16:32:04.401773Z","last_seen":"2026-09-06T13:16:07.636061Z","times_seen":2128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.shrinetheme.com/js/v2/main.js?version=1","fqdn":"js.shrinetheme.com","domain":"shrinetheme.com","tld":"com"},"ip":{"addr":"104.26.0.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72a236ce592cb031c47608bb83a0d309","sha1":"b8f39fc3ed679e3b7640ca45c149ec6a9641aae3","sha256":"98e03c64a8b97e7a5857a5dfd645118276b7a3f17ac723378cc6d4b931e50a9f","sha512":"84790fa6703fa9e54f2185416cc15eec3ed0757ac9586bef2d040b11e7d775f23ba257d9c4dd0b7ad8c4de5334529bdb3b57ebc920b42d7ba32cc6f13c54b042","ssdeep":"6144:pMFfbzea7uTg1yeclohE8Z4RSG2PIr/0yomfL9wMHT7TkEsqq7:pMFfbzrseclohE8Z4RSG2PIr/omfL9Rg","tlshash":"df2471002bc059a8674adfbb7217b1e6d445189e354e888bf06c7e242adb713f9fd931","size":214937,"data":"","first_seen":"2026-08-08T08:25:36.113958Z","last_seen":"2026-09-05T12:01:53.699974Z","times_seen":41,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"js.shrinetheme.com/js/v2/main.js?version=1","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/t/27/assets/secondary.js?v=63522464628986351641782994699","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"95f46a6b4d5e1275368ed65fc54eff04","sha1":"b2745a5a7410270f48326719faddf0392b816af7","sha256":"bba17cd2705e6ab9dba221bdce6b2177e4974e537b307e82c8aeeb51c0e3dfc5","sha512":"497c985cec167c10c7072b0ddc1ee14e9b808b75388f3e6dc8eb37da054fe2a3814cc3b097d7d370104a143f70a73d9423b6363c16703aae6a79c3c03aee73d9","ssdeep":"1536:AkgQOgpe1J6yXqe42MBaUU5TsLRgrg2up/Kovat5ZavZD1goJb0Rs63wRyjZz7zA:gz6gTMBTww/pvSHKyjZz7zrzhpZJ9TOF","tlshash":"e293f9d5b210753502db92e7909f4582e3b530999406841cbdbcccee7d6cc9923ba7fa","size":96233,"data":"","first_seen":"2025-11-27T22:50:57.752758Z","last_seen":"2026-09-05T10:01:03.299065Z","times_seen":371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.vaudit.com/static/js/pixel.js","fqdn":"pixel.vaudit.com","domain":"vaudit.com","tld":"com"},"ip":{"addr":"3.164.230.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f96a81d155b0dd39ee46c84115bf2eaf","sha1":"2c6337f3f36e2f3f8c12c5693cc77660158434c7","sha256":"caa514b8a90bc9e2ea711a6f919d26444b2d206e7a528372916cb45f904d87de","sha512":"21c9f5bea0dbb810e62a31767635cb6c7f141fb58c86ec5bb22ca38e360dc65f62b19c743f92e93f1da3997e74d380ab8b05a73ff575ef8eed486f7834493857","ssdeep":"384:eS/v2quzOfwkF5vKSMuryKnVNs/IZ3YWxY4pGX:H2q+Ofwk/T8GxY4pGX","tlshash":"508232496af3143590b771bd8b2f51457236908b3a4adc543e4d9ac02f09b3ea2f5fe8","size":18559,"data":"","first_seen":"2026-08-29T03:23:42.601426Z","last_seen":"2026-09-05T10:01:03.275284Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.validators_Cj2qrO-d.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"42c2e1e914365614298490746e0fea42","sha1":"cb61514b807b9c60cceebc4c24a44ef3b181d946","sha256":"bed1ddf1165218aa77717abbf1ed160838193f7481a2cfa3c1b8cf8e3abfbfab","sha512":"3f238e51ad129c7f3889de3f6968959013ed7b2df9a990154b999f95698db458eb97414b32a398666f489413674d8bbca4be9e2a813165b947770a04cf07edcc","ssdeep":"","tlshash":"671120cc6eb332f26ab715ac00523404e3f909ac756e0562b8202850bf30c7b8f34e8c","size":1058,"data":"","first_seen":"2026-04-14T20:08:13.991508Z","last_seen":"2026-09-06T11:36:39.576545Z","times_seen":79999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.defineInitFunction_D4of-Jj4.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"cad4cf9dd8faeb0c636ce3a89223c89c","sha1":"a73ea807c90c169c5f9e25ec9d1c3c5334e66dd7","sha256":"2a2adb1f9ecb6695af9a056653b5b50fe7a77878b3751cb652ecfb6d5b1a4902","sha512":"7e025b6902843f7863de72cd27bc7914e79a7e633d68994470e607aad7f7b49653a6680e96fe2f227d5d1b8b4e89122e51af84a62cc75adbc4c5d596548dab88","ssdeep":"","tlshash":"dbd0cd5e13e7f4f2d0d3bd28510b2d0617fd101e9bf45780273c14284a255665e5cd0e","size":290,"data":"","first_seen":"2026-04-14T20:08:13.810485Z","last_seen":"2026-09-06T11:36:39.485614Z","times_seen":79910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/web-pixels@80079e4cw22952a98p55856082md4f1b6b4/app/web-pixel-2194800861@a3321ca85cf5aaf6b57585fcd8d67b3a~2/pixel.modern.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"52366b5c2b279dc971aed7fe5f0c4d38","sha1":"a8dc3afa596776c5404a299b5732860a7e22d8ea","sha256":"88f7c196f563b9a96c167a697712a79faf894f555edc53a5c244273de7df6e9c","sha512":"d4f8512c12f41845c3197bb33198e2b0058654db78d044770f5234b5f4237bc48ca1f2bc8b81a4e8a236933decd1b23aec5669b61f6788f19f3bc7d3ff5e0477","ssdeep":"192:FODduW0VNuQa9YDF8iwi2pZsvizOdGazmbmZaf61+Kli5uVxq8mvR5fv5eK/KQgb:FODfx+4PpcizczaLf3GyXRx/9SF","tlshash":"06820d4ce07c20a1328aee9ce8770b77926d71936155f8f4b1bb5f381394b4993e2936","size":18772,"data":"","first_seen":"2026-08-27T21:08:13.76091Z","last_seen":"2026-09-06T12:33:47.713346Z","times_seen":1072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/loader.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"46bec5fb246f58d44043ad0430b00480","sha1":"8459a2ed5a8dff84f85387f831f980dc1fac6ca2","sha256":"d989f7dd356fb66601fd58cca4957fdc564cd81b1b51b7bb9bf29c4604dd921c","sha512":"708d389d6f7904e1f616cfaebf76bf25ecfd00c0a6f47411fc13abaebe134208c722a03f057ce754de1ff58729632678c4ee4d228ad2e82f2b8075c4d6e49eed","ssdeep":"","tlshash":"0ac08c1d54ec3829609b795e223ab0f809bb0a463214cc52040dabd2cf1a3ad2fa2688","size":163,"data":"","first_seen":"2026-01-06T16:52:12.091972Z","last_seen":"2026-09-06T06:24:29.321594Z","times_seen":3229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/storefront/autosizes-84416378.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed2f7a7b244645365e62c61819da7fe5","sha1":"99b96dbe597d13578eb736b442c4da93bf095c76","sha256":"fef8d37c118bfbaa23610974bab09b53324ebdd63052b942cff178b861610c72","sha512":"30d2353c323ba91c054a1e13329e20d1f588d19ed3f9a9edea9446a0dcad1f5ae3c8a4a1c03edad2f3c9f7c7cbea75368624dcbf06bcb9019718c2da86c9a974","ssdeep":"","tlshash":"b06174b1009873b70e9127e6b5622181bfb061177e03a1bd8e9cc957217fe43067ab3d","size":3327,"data":"","first_seen":"2026-06-23T08:36:04.802465Z","last_seen":"2026-09-06T13:16:07.561433Z","times_seen":31940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.useUserRecognitionSignal_RxakwPio.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"9bb2b1add75087d2381ffb8a5340b624","sha1":"cbf46a6bdcf1bef2b299ef2cf1b328104e3c63cd","sha256":"bec2fe0c816367ac353b2ceb455e19eb9833f011d5948cff02df37e4d3a2c78c","sha512":"5ce99d5c093b5af62ae344b944e50118c5f1bbd53927458d69a1e5ea1d94f9d2c8d4bf0494f9a89e7b76ba0bbfdabbe0058fbcd2188c3526a983caa7260f2e73","ssdeep":"","tlshash":"7901415111fbb2f2c0b38c301443290651fc0abc56fc0388a76d8998595d2c7dd2ef85","size":786,"data":"","first_seen":"2026-09-03T16:26:38.548274Z","last_seen":"2026-09-06T11:36:39.326288Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/consent-tracking-api/v0.1/consent-tracking-api.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"53aa28e4925685a91377d8294b4ac1b3","sha1":"f95f9b06965aa299b4d56aec6ce3c3afb92ddca8","sha256":"ea9c2752def05f39afcca794de1cdf1bed29cbb3b892e62ded14403ac050b3c5","sha512":"d53004d27c48e585ced8c85c6d0184941a859b55653eeb152ae3a57b234514e6ba9d78541274333e59c6d03679afb15a7b19cec9ff0b6cfd2462efc35c9958bb","ssdeep":"384:3qjVYgbXl2FYi+rCK5fHgPOD5ioRd3xYL81CJ+qNASouItOwzUldlZ8Q3zhPyZLR:4YgbXl2ii+rh5fHgPbo7xYL8gJ+qNASu","tlshash":"51a208a976e2f4e407db143545bb9707f37d152a34acd040a3096ec23914a8b937bfad","size":22602,"data":"","first_seen":"2026-04-15T08:52:10.615143Z","last_seen":"2026-09-06T13:16:07.569425Z","times_seen":35435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.hooks_C3ligZlI.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"126341613693e75d3dbfd6e70737189e","sha1":"6f1432a01636cb47164b2d85a9c1c7c46b3f1dca","sha256":"e755f5d47d9df8ef9f70d2bd058edfec8588e3aa1cac147c4a6434d5123221f1","sha512":"fb535fc4265e1f3feefda07f0c7406e1c7a18fe40af79a7d0846f0bc8e4e23d746b3afa67e7756ef0161848ca342ca59584657dd95350c0a333e596a449ad21e","ssdeep":"","tlshash":"4fc02bfecc706cf1d4e01cf8431103264681218cf36e0558600c452802338830f1e824","size":143,"data":"","first_seen":"2026-09-03T16:26:38.545552Z","last_seen":"2026-09-06T11:36:39.501452Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vitals.html?hsj=1","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d357de43ab8dd34651bc1cf8f903cacf","sha1":"f3495b73ab19a12e71d4165f242fc57130c133da","sha256":"a03161f88131825410b031df3a397e0b20742aad9f3e00c6891257559c41ec24","sha512":"9cadb7ad1dd51787536582eb715ba67e4c39b139d9c8f43043aad39915586ab526d3dd707c590fe92c5f12d1219fd81454cb1b0585bec8e64541eed298ec4296","ssdeep":"","tlshash":"46f0e5581cf785608162248ba7b7c504722231177010e04e79cdc8886f45fce4d6be69","size":462,"data":"","first_seen":"2026-08-26T02:18:06.858606Z","last_seen":"2026-09-05T10:01:03.464701Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a0674f-e340-7c39-856d-a810d6687196/judgeme-739/assets/loader.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"10bfa12a69a36f0d08dc0235818d3b07","sha1":"3335b2c3b9d41f88da6fc7670e2c22c42b6ff43c","sha256":"298063ae70af67c3ead16a8ff7e90d2a85bca0b8159f32b7f3321ccea8d4f9b7","sha512":"ac94b09a8c72c410001e5ed2af1df43c53afdf30080917744acbcc30cb8dac96c849a7caef97839894f91ace7dbcadbbc430e8069971c481ba134fe38a2c99c1","ssdeep":"192:WYcJNcONEfEsPlZWpYCoZmwxjdvjb3yAP59D+rPFzQNEXfMYMAvJF4NHe9ARfyvh:jcJNnNEc/wriAW4qfMYMAvn4N+9ARfy5","tlshash":"fa12a480756482f303532afb69ffb20372d2248df691f808e879a8587975dc25563daf","size":9874,"data":"","first_seen":"2026-08-12T14:10:15.946217Z","last_seen":"2026-09-06T11:16:55.777863Z","times_seen":1188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.networkErrorMessages_DSiGJi0_.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"89b39b5893291c238c16bea982734fcf","sha1":"25d40b53f3e52737eff87795135307de1d3d0609","sha256":"b59745d4679e7423c72049ea0f558029bee7747e87ed5435c584c633a88d7498","sha512":"e5df6b5261675b8d762007e9267f59afabac4195ce633a2d911c4f789a0a429fb87b4f771b7415408b147425e77d981140dba18762776fac301e1e274a302724","ssdeep":"","tlshash":"fae0c0ebe874546d01272836600551724a10b01cf3e44099f1052ded003c4696b7ed06","size":350,"data":"","first_seen":"2026-09-02T10:24:14.297209Z","last_seen":"2026-09-06T11:36:39.410875Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vitals.js?hsj=1","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52be93018a39897ca218f0b4ea1514d2","sha1":"cca76e2d064a121f7b50809b682a866b2d09d7ea","sha256":"ce774decf6858d0001a049a1ce7955fbb7c9b02803cfcf43768c24936319ad31","sha512":"15c66c939a03cfd29bb5e09efcae11f20a268ab8df700e088008d54d8789ac308e5b0390fa6a503b73473df66c05143b883756977db808ee0911e6ccea4743c0","ssdeep":"768:zj/PI0uQ1oDNIJcyrCWzPevkm1G1KWmsBKY/PL9UJw7f+/292peZlyrM3H2/Hvtg:f4ECiCBNCmTvTyFI43","tlshash":"99e2518227c5bc01279b5b77b717a1e2f43a9de9b588089ef104bc64f9a4903fdd5a30","size":32965,"data":"","first_seen":"2026-08-26T02:18:06.738231Z","last_seen":"2026-09-05T10:01:03.434761Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/storefront/standard-actions.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dff74a50ff1fe8027bafac748d47b33b","sha1":"799ce13526065808719765c653b7fde13bce0557","sha256":"f726c36acddcd5ae627e5786f31e0cf3dca02c4b3c38ff0ceec3c1b32edb7eb5","sha512":"a2a6f8a617cb8aecf422af6af1f920c628c8cdf1e341069bb9b066025dcdb3462d3a55bd7d8e7c83b448c452fb78816e873052c405b4cfc4c5ecbe7528ebacd8","ssdeep":"192:vm+8XnNYlQeVV8wjdnHWY8NnHwGzBIWTXYeX0wHPw7AXBQmv:v5KNYlP8whnHW/x/M/wHQAXBQW","tlshash":"8032d9a07392b9724bfe5016b06612c0f67465869c1e1434e1a9ce5b27bd2c24ff1f7d","size":11267,"data":"","first_seen":"2026-08-07T00:20:59.638496Z","last_seen":"2026-09-06T13:16:07.532483Z","times_seen":6708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/visitor-label-script.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c9f1a0da3d433eca8741fece3eb36a4","sha1":"0f6edee84b6399954de2d383217bdb69976d5d8c","sha256":"9ccb91df361c27b5607ee773acf0d5ff255641697e04da6e2df52908716c5fa9","sha512":"a736480fe03582b5ef780dcd4fe0cea1b9e72f5f341bef933bd862832d4fcfdeec67fc6c1a2bf07785ab707876f3ea4af2216a41236c1fb4d0b44d55798334af","ssdeep":"","tlshash":"3bf0621e00996f809b6b14d8bd571108b323b1c3b4ad86993a0d97043b9262b43b1fdb","size":552,"data":"","first_seen":"2026-02-08T09:13:17.494373Z","last_seen":"2026-09-05T10:01:03.310165Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard.heatmap.com/preprocessor.min.js?sid=5686","fqdn":"dashboard.heatmap.com","domain":"heatmap.com","tld":"com"},"ip":{"addr":"172.67.69.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c837ae8ae1b2587fb46e9102096126a","sha1":"b91ffbf888a024ca7c2b3a292160b101edb850d6","sha256":"a6dd5e693d96d13644a2097bb25b6326c6d42bd8c912efc71d8c541702f31566","sha512":"fb138039297f03a5e93be87bf1c485b51ba2ad02939738d56dca618457b7de0bc00dbc81299072b73a4e68b27e087db28f5547fd449a3a4fa72238995a0f6f61","ssdeep":"1536:xGnETmfidxI4efya9hnjxWksjamZF4bouNZ6ZMPsqi5Tf5n+4DjIo5PDLamBY5Ks:DifidUIYou76T5+k2sYa2","tlshash":"5de317a17766a07203fa21ad73277304b379626d74088890721c5c953a6dd8bc3b7fee","size":157161,"data":"","first_seen":"2026-09-04T14:52:37.082768Z","last_seen":"2026-09-06T08:49:10.204828Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.tslib-es6_i06t5CRd.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"0dd575bf2038b89ca742101cce605348","sha1":"53129ce944bb3d7f3b2b4b635ebc76402b0cfa18","sha256":"afbd4104e598a8ad2d84ae95716448eb11ac5b2ca4f501c1e9851c56d773551a","sha512":"96abcde83dfb4eeac0f4eda9012138c2a5013625eabdbb1da226121dc4e8db99ef8b6a5316b885aea34dbbe6fb0d77ed53856659f650a0b316ca6c2db21ea438","ssdeep":"","tlshash":"eb2112ccf7a4f0b1a57b51a4801b140bb575c56a532869904b40f8b3247481edc5bf6e","size":1428,"data":"","first_seen":"2026-05-25T15:55:58.326081Z","last_seen":"2026-09-06T11:36:39.287239Z","times_seen":53916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/shopify_pay/storefront-bf1cdb70.js?v=20250812","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eb0aa63937b1b8a9c98866ae95139cd","sha1":"f1ff3c879afd749bbdec18894d7b8fdbeecda7b1","sha256":"980855df0a0679fedd1d8a28c511f1233a808b2458a039f0a78a3646a5cd46e3","sha512":"d6ce9eab122b5b66718e406dd285cd668c43ae1f235584d7379138505f64c61b18f8df4245bc8ea707e91fa6c0bc7e868dc17d08dee4bd18ffacc2f30fb82b93","ssdeep":"768:e9x/o1sX4MtMRORiysWDnnH2w1QaMdWZQfzc8MByf9a31BE8LOBphHPcPsJ+1m+k:e9x/o1Ec1WDnWg6MfE8ahi0WeS62h8","tlshash":"ff83fa8af3f4b562439eb4e8f42f48026e6be586c508d094d9acdfd0ace7411425bb7d","size":81128,"data":"","first_seen":"2026-04-20T19:16:12.255808Z","last_seen":"2026-09-06T13:27:55.62095Z","times_seen":50109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/shop_events_listener-4e26a9ce.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2939613881d210a8b3c176c6b97f4411","sha1":"c2538b6995c6f6b3ddb9dbdfa2bcdebe23741bbf","sha256":"1d3ecda47a1526c73eb21d5909875b2d7008eede49702d4dabcece4cfe3f1f6f","sha512":"cf9dcfa34d1cd962f48ee55f15fc01faea2e42834823b4ddbdca6dc47bcc343db5464db7425efafa310c78aa3f890a5fff621b385541b0d20541ce62495ce6c4","ssdeep":"384:oKUp7BDNsMhxfoh/sMSRGDRU7DF9QvGdinn42aSjE8UdgGJGEZrgXgCiXgCZIKz:oKUp7Bxthxfoh/tSRGO7DF6vGdi42aSi","tlshash":"6752e881f2b0853346e816f95c8667a5fa1c2314ba51d0e0e71c5fe42e73943a277ebb","size":13482,"data":"","first_seen":"2026-05-26T08:19:57.283832Z","last_seen":"2026-09-06T13:16:07.539481Z","times_seen":51926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-accessibility.avada.io/scripttag/sea-accessibility.min.js?v=1788602386854","fqdn":"cdn-accessibility.avada.io","domain":"avada.io","tld":"io"},"ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"017026fe9dcabf36c3ecefabbb34bfc0","sha1":"3f33389d8218341cf0b0785fc9a847550572ad32","sha256":"e8375c9984876787c2a505b15e1b6d8fdf2fbcbd5a22d12dc75a18c9fcd871e3","sha512":"1776951312231cb45dbef967b62b6dc4726a95eb23efef237f5d3e2412465294b234aae22f6f1718a56ff77d1273bfc330120007ad9bcccc78222c1fea00de8b","ssdeep":"1536:WJihLerVoZDfRv9ZLboI5IAs+29Y2JU8BJsB1/O/4x3E8rBLozehk:WJihLerVaR9hLyAs+2C2UY2/mM3E8rS","tlshash":"83044d1bf9ee391503d7a376f48d723542384a69f5a0c0f1ad28c86b25ddf92422af35","size":178060,"data":"","first_seen":"2026-09-05T10:01:03.245429Z","last_seen":"2026-09-05T10:01:03.245429Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18051184874","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51cfc799a5eb7496bb5aeb15ac470574","sha1":"681e8919dd426ef5275497c2c629e4ac9e6012af","sha256":"c3510c16c31c9f193cd6bb0e39b30abe26336494dc8baf9899dc028d821f9548","sha512":"7c891f1b28450a4c01fe5c54f8b9e0e2c5cfaf087784cc326c9a19e642a1c4e955f5b20ee2ab0b31e526f7739f5238e5510a001b7223ed9d2faa1e39fa324821","ssdeep":"6144:y3H1lxPZfMXrrzudf1UZyc3DR/dEpv3yg+0eSQMlcWp:ylZkqHg90eSnc0","tlshash":"b5a42acd73d674229392f574903f018bb67a29a2b84cc899f289dce42d3469a5173f7c","size":472165,"data":"","first_seen":"2026-09-05T10:01:03.220934Z","last_seen":"2026-09-05T10:01:03.220934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/s/trekkie.storefront.ce2a643c30d67cd7b828f2dda8cfc17d1d88fbb5.min.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"21395db23ffefb3e4cd73ac9c5d1ee33","sha1":"05f86253352f3a02990775c7993d0d22998ff191","sha256":"891f4c7be533a1ff42010d2c573380af750c36a64c48515e661d544877162773","sha512":"3fdcec4eadd503157309ed5564d803f8999ade9110af8de8e08005be0a65bf938433b2aacd0890ae68e705ff32c6692b15088ac24752f7b0e0b653fa050735f5","ssdeep":"1536:89Vj8K0t12smMK7BV9DOHfZwBjwx74M8/hFrRb9zR6WPht9G3KLqYMegCjgH8:O+Qu4F3198WPe86eg0b","tlshash":"7cb3f8c9f1a2b4b003e354b5453f6206f33a7a6e60589064b34aede22c6464b9377f7d","size":117335,"data":"","first_seen":"2026-09-04T19:09:52.288795Z","last_seen":"2026-09-06T13:16:07.548604Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.v4_CSBSzmbm.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"1ffad383f4562077a039422045939fcb","sha1":"378957922c75ef6c24c841b93d3a06ab7dea8cb0","sha256":"0c7c1a4c48aca9bdb7acc19fbb689bdff42d1ccf9c4d65a09cb87cf54a18edc2","sha512":"65b413f865b450f609e3e6bbbf0719dd7204077a14dc26585096c7ada030949f5989e0faa414f936b9796dd7b15f92304c9026028c7cd836c266e59b7a2bc3b3","ssdeep":"","tlshash":"3011bad6bcd57b3e03d01ca9177ef90aa762b020b2659e1fa30408570db0dbaae1780d","size":950,"data":"","first_seen":"2026-03-20T17:05:09.137387Z","last_seen":"2026-09-06T13:49:10.328716Z","times_seen":96617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17889453959","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"822fb9664c73db38870a771a85f34c25","sha1":"35f757036bdc09ed6ef94f17c2fdb427af07808d","sha256":"bede191df179890a4e10705fca11571899213a3d49ecbffeeb83e66f843b095a","sha512":"455cf9ceb38fd66645d697e0cc3a9fb3e782fe1f485c5ecd448a3b7fab32d0b1cd0e8ded623b04480b15130e5be213c5a2ee75177efe2d5b6ccc8509127f914d","ssdeep":"6144:sFH1lxPJfMXrrzudf1UZyc3DR/dEpv3yg+0guMlc+p:sfJkqHg90gBcM","tlshash":"2aa42acd73d674229392f574903f018bb67a29a2b84cc899f289dcd42e3469a5173f7c","size":464792,"data":"","first_seen":"2026-09-05T10:01:03.441107Z","last_seen":"2026-09-05T10:01:03.441107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"eval","is_inline":false,"md5":"4da5caf74e19321bca8b3f29164e6ff4","sha1":"8d8e32b7a15ed52385c9ac08b805b9c7cab4237e","sha256":"33b01c661fdbebe0817ed7e03909d060b4b13c38f55acbb86e7953873bfb628b","sha512":"ee817b454731b025afe95902edd087075df64c709b3529b78bffef963d3db9b7a845c65e9ce76ccc5eea20ca82b106df39e1d5a7fa4fba6602a47504729b2957","ssdeep":"1536:tcMDqDVHcNdYlpE4jQ2/dXfMMvDQQsyjrw/4ORERw/uocm5qRV13Cbcp/m/q2aAH:tcMWdcNaE419h1RFmIVWckvax8UGkThK","tlshash":"e6e3c9c97ac3f04d8257e9a8227fa2dbf46f1da6245c7002e592ec923974339d5a3d34","size":155386,"data":"","first_seen":"2026-09-01T15:58:50.226184Z","last_seen":"2026-09-06T08:49:10.200439Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/wpm/b80079e4cw22952a98p55856082md4f1b6b4m.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e04365b6ce95302e0f085de7c76982","sha1":"1c8afcebee5043d819d849adc57ca82d4b2395f3","sha256":"a311188c217b98f681d75d49ddf5a4028b833c04ca1cecd9a03ad1671cd1d6aa","sha512":"e6139e962f04af73f193a6baf21f5952ab18257dca8aae99d382f673e8f4fd8f37c007493560cad8f6359827e936aaa4c3e92d5fbba6f30683b30e86e128ceef","ssdeep":"3072:dSmPCRUXccYoDMd8AkKcr0/yraN4NGDCZqsKUgBFwpH:kmPCWYj81HyyraiNMCGZFG","tlshash":"66342a98f2b2b47107f711e5903b0401f7351965b84d84a0b39eee992da598a83bff3d","size":251234,"data":"","first_seen":"2026-09-03T23:22:50.088199Z","last_seen":"2026-09-06T13:16:07.587192Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"eventHandler","is_inline":false,"md5":"36fd92b0d47bd15732934bc221b42954","sha1":"d9563fdbf5292dc559c07c51d81236107254fb01","sha256":"7c616227c2a4ee1f821a24d1c3d87b8bcc8d209f85c39214c63512995d41d993","sha512":"f4acb979ea922637bf9f4111d916c2e2e4d195c0576b37091d6eaeb1d52a5b5013f834d8dd7a6e5f52281b6db2f5d67eb82580efceb5e600b515b910b0de7bc7","ssdeep":"","tlshash":"0d90044500c145f0c0711d1001313d05175414150f1351f5d1f1055737c333351475f7","size":39,"data":"","first_seen":"2026-06-10T06:30:06.552913Z","last_seen":"2026-09-06T13:16:07.634323Z","times_seen":38490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.window_BV7pwtSs.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"ea947b9e8858eedf10e14bebffbc6cac","sha1":"e87f37e1499f0385fb72b6d301d253c75362ad96","sha256":"f2f2b61eafa7c2970e23d78d10c99216fd9e57a56c8f19557c55c18b663d2db8","sha512":"300bf0bf7a639e4371b622b699a5c84201b501264806cc1cb89d3ed61a312cf726d0b4ebed8484a5988f831328c44075ece46813e335bbbfa642b09083b4ceb2","ssdeep":"","tlshash":"5321a0b7c3932bf614674ceaa521b5d1c33104d574681760aa0e9c222f89f4e3718c46","size":1270,"data":"","first_seen":"2026-04-14T20:08:13.913696Z","last_seen":"2026-09-06T11:36:39.469606Z","times_seen":80105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/pixel.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7ee05e948ae2e65f60478ac07a6a830","sha1":"98e4e5632763f344c837534357d7e33051529c3a","sha256":"9c6b4e069cda7361ad6e346cd1ffe37cc45fdcc5ca89939e173a6cd6a2ad14b1","sha512":"09023275b55c19113bd1be107337f5201b314bd0899f3458c7d712235e13ef6d1336ffbf5cff9810d32f8665d0ebe29c3228b29c9e8a284c10c0aa0ce4512755","ssdeep":"768:F8ksCcTSHkWstlxKzda16M7tL4DGqcIfiY1+liRVUnaeVGwKK7xMFA9LyTn/Ce0n:m8HToli4g/tJHwM9AF","tlshash":"e923728072c5bd4227475b77332bb2e6f43a5ce9b08444cae004fc94f5ad616fae5ab1","size":47396,"data":"","first_seen":"2026-08-26T02:18:06.733506Z","last_seen":"2026-09-05T10:01:03.175001Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/theme-clear-cache-script.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"71b12032120e583c1bf100a88712fa46","sha1":"9c1dc59b62b3b8cdf57971d85e1e442774f7734b","sha256":"467da41e1b7d9bb71f4ec4f20641bc014a7740f1c6fe3cfab2e4e5e22ef985c7","sha512":"a00f576135e040ea92769cd3da975e4cba33bf27fad32bc71d09cf09f338efdb22fc4cbeac5eba4f83e2d6d804b3e7acedcb4a96c7b93de3bb73e3300f4d44d8","ssdeep":"","tlshash":"b601490504a2260622b710fe2a832138b33a73c7b54ccabefd4e53007f1656b87f9b85","size":825,"data":"","first_seen":"2025-02-20T08:50:01.924358Z","last_seen":"2026-09-05T10:01:03.418936Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/storefront/assets/storefront/origin_trials-5059b83f.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee8181d48948754d5b481fc935d09fe5","sha1":"48d473d13834c84fa17030d2f13a96dd8a237773","sha256":"9aa42303eca1af50ed3ec5b93210c8ab7cc3bbe2e085f8cd4f8f6bfedb46dde6","sha512":"453aff4f90f7d1af1952657444d10cbd4e7a89b7d6d2acd3f12316a56ecbfcae6eb0d3e274ca795e69c321248aa821aadd10d53df6ef7ac97e52bf4877ed56fd","ssdeep":"","tlshash":"602174716991482ceb88111a2cbce13fcf5508ee6212058289cd684abc32e67c0fe57d","size":1392,"data":"","first_seen":"2026-06-29T16:53:35.737494Z","last_seen":"2026-09-06T13:16:07.612978Z","times_seen":27410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.utils_1bb8Zmgu.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"74978a4856e3008417d753278e4e8ee9","sha1":"02d94c78f805fd91427fa364151e77e37a50a25f","sha256":"0d25464a8c29470b86175adc72671b5aadf97162ec62db9ecc3608a41cc58957","sha512":"baeb04d250ca7baed6e1d43b323daba384a802ce77718396c1d0d3851484bc0d851bca836fa3ada08faad73d47159f7d2faf3333d07791f980ca05898de81889","ssdeep":"192:naMKazqF8pelu+ErzFECchQ8dTUT1bIm35FykIZ2eJkY8hp/pryVWNwf:nHKazqFjvChYQT1b3ryvxJkYeyVWNwf","tlshash":"7512d8f2a37251fb9c2184d1843a50029324992878d7f5b0735c8f8b358d5ca2ef9e7e","size":9328,"data":"","first_seen":"2026-06-04T14:11:03.274242Z","last_seen":"2026-09-06T11:36:39.412166Z","times_seen":47097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.useEventListener_BEs6MAnZ.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"importedModule","is_inline":false,"md5":"f5c8078b7aaa7c3f95749f1a0667b8a4","sha1":"a5602a1c6f0626fe3b1f19c92091258615c48d28","sha256":"ade4d2428a5bc88e13897712298a2869b46df60d4bb133a0aaed8798ff5bdbee","sha512":"c6a84622b26a28f9d162ffa985254cb873989f7b009bdbf849bd494c351e32fe5dfb615e5cf03a6144b9f11daa4274946e393ef5ca549cc78fb7f71de4bebb1b","ssdeep":"","tlshash":"472196e74e841875006b4df2e25a3210173931eab1990496b47d0c152f3adcb82bbb2f","size":1416,"data":"","first_seen":"2026-09-03T16:26:38.547117Z","last_seen":"2026-09-06T11:36:39.564596Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/perf-kit/shopify-perf-kit-3.8.9.min.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c7b886b1e06be95ed09f4b2e9370858","sha1":"507910d932920cb4f80ed6bcfee4d51bc898956e","sha256":"59de499e88b31fe683b893e583dbc89b555e7aaf77cbac70cea9cafc47165d21","sha512":"0678b02fc94571c0d0385e04bf192cf1966415ec995896252cfed921ddd135b9fb2b00f4c394a4538d3790e78e84d6238b7a25b94e8f0f77e0722cbc8bf3e551","ssdeep":"1536:Gtj204yfcYBpfBYOD+ujgngzNZJycFOIXS0Yd/6q7/:sTNcYBrKrgpFOIXStp/","tlshash":"87733ac57241357267e746f6407b2202a2386951389aa1a9f23d69cf3d6239703bff3d","size":75153,"data":"","first_seen":"2026-09-01T13:34:00.708185Z","last_seen":"2026-09-06T13:16:07.585353Z","times_seen":757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/amz.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef6695fe351d3ed253b1ea3ebe1fe84f","sha1":"3b7b1dd042b5291b63014351e27c4e202fe93e66","sha256":"0262f859e5581f288a52d7e6214f51164053af590c79619b2a4399374d814fcc","sha512":"81db24c977a81b4c1f15c25c9c1448c139ef0521362344badf57ff8654b031e93f4400874c0fbad34619e18640ba3c778e9f35588724984bcb3427254ed8f0bb","ssdeep":"192:HZt10H12k/oymYiJEmhUhqp0Xjk+U08kkkzVBAyh1fsH7R5aiM:HZT+Uk/o9YiJEmhUhqp0XA+U08kkkzHL","tlshash":"2d3201787e4175eae7130d3b3302f999c24b366d36f5846ae2122d127910337b1e96f8","size":10962,"data":"","first_seen":"2025-10-08T18:10:59.896642Z","last_seen":"2026-09-05T10:01:03.23113Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18051184874\u0026cx=c\u0026gtm=4e6921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ae4b143aee84fa5fb7b3e585b204195","sha1":"c7be13171451174022fec76f2acffa3820d8ef17","sha256":"21ac459ef733f6788bbf80368b54f9455a36ed17ac2b4e6ab5ae7fbba20a5d34","sha512":"94a486d082082ae11c0f0173e223425190714bc078d5c1a7720aeb5db59678accc37614678d858f3b3ef394df50cb8b20076ab52c09cbe9a2256749b358e8f2d","ssdeep":"6144:yOH1lxPZfMXrrzudf1UZyc3DR/dEpv3yg+0eSQMlcWp:yuZkqHg90eSnc0","tlshash":"eda42acd73d674229392f574903f018bb67a29a2b84cc899f289dce42d3469a5173f7c","size":472176,"data":"","first_seen":"2026-09-05T10:01:03.329225Z","last_seen":"2026-09-05T10:01:03.329225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8.4.7/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-09-06T13:02:48.967815Z","times_seen":15373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f337fd4ed94a206208031423103c7da5","sha1":"6af28c59f2b522907469a0849d2b395baffd35c1","sha256":"bf3bb94fc15dfd4cac9dafebe8424d930ba829ca83fdf716873cb7dea6f6a050","sha512":"15ac562b85a4ef72ca2d0cfdc68929ca250fc0cfed7bd4b9855e755135d97f6013621822a7c18c12cff982ae872a94a7a8bf63e66270888761ac287721cad76f","ssdeep":"","tlshash":"0ec09b2745f05d4d11b5470f7b9373347d584c71f1c450c51150d113fb88967c1907d0","size":130,"data":"","first_seen":"2026-09-05T10:01:03.466506Z","last_seen":"2026-09-05T10:01:03.466506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f96f836a073c5afc4278a5be9fa1295","sha1":"065660eba72a4cde09a9b6166b8a3b786f68ca9f","sha256":"631a4688ac4859de976c10c620a9f9641f8e4ca5400901bb9703488a0ab0cfc7","sha512":"294c91ba8bbcc65e5928bc0f805d9d31a0754aab770d2699178973f6a995b2c99edc22aeb035b545f9ecc527d3d536f50a370557815a2c5b5d73e16c019770b7","ssdeep":"","tlshash":"3af09e3fbbf85a35410b53bd222fe60a74b9301c59712c089955c4bca771d5acb2724c","size":503,"data":"","first_seen":"2026-09-05T10:01:03.468022Z","last_seen":"2026-09-05T10:01:03.468022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf3d83ee2b70dffd0e597f2393e87d7e","sha1":"5a743b42f23add783423a41b72cba62823d84af9","sha256":"4d728273308c9d430a751beccd1017e413cb116d442222ffe41eda900a29a518","sha512":"a9d32b17edc2dd8c45767751b4c3557ce4b88a4d482d88c2181a7d86a491583d474d5256200eef72e1b36df9e4989a22e03dcde1d8d83d6177b95ea411d800ed","ssdeep":"","tlshash":"0fe028ee78150c7170dd05f533b1b1197143150868095c33cdfdcd1428189d74c174dc","size":342,"data":"","first_seen":"2026-09-05T10:01:03.469077Z","last_seen":"2026-09-05T10:01:03.469077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b833e99769af922a05818a8e2e4a4f0","sha1":"7004bf50042075a99cf6e91493c9ed670250ee46","sha256":"02fd2d6d7f9837abca374df43f97564be10c91570f250b5ee6b07f0640887c61","sha512":"c6b0b8fc3c05043262f794e3ef44c54401d23b4fd800cfd9b385c2d04bc80e9acea9141e2184914f130e5fa5ecc0d287b521aac59fc8817c90a98c9288cbe57a","ssdeep":"","tlshash":"00c02bc8210a0cb156eb2740cb3fb600f0013204d4f09931080923044d30f07eb48c50","size":151,"data":"","first_seen":"2026-09-05T10:01:03.469929Z","last_seen":"2026-09-05T10:01:03.469929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f731b0c56242e91b7dc42f98f66fc5c6","sha1":"63d5713bd2bb50c0862c6d80ac49c42d4bbc78f2","sha256":"e6668b1f36a9d75ae8acb8c4e0aa127a5f724f045ad94949801f83b2f2a8937a","sha512":"c532896c8df4b00ea8d0d4b1f153fba505abf3bf6b7b1ffac7b873e03a984515116d7e856e25e92135f93627a24338d17817108feed86841a19e03cdb19bd0ca","ssdeep":"","tlshash":"9dc02b88220e0c7147eb27c1cb3fb604b001325894f05d31091e23084d10f07d748864","size":151,"data":"","first_seen":"2026-09-05T10:01:03.470915Z","last_seen":"2026-09-05T10:01:03.470915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"43b90ba5f5581c05150263863086ef4f","sha1":"3c11fb6be2f2fdd4c2eb57bc7373668541bc359d","sha256":"a57dcbfb170a8db671c576acfa2164ba79e12dc323d910084d6a13aa1c87a2ea","sha512":"a45e9da07ee2d0e622c8da61bc836a03ea039239a54f1fa949951409eaeb39fb2400faec2d4273ca198cd4f148b3aca18659a9dc16d2249e93f946b02504897b","ssdeep":"","tlshash":"8eb09225c618606a25f44608928efa03a016532d8622291b4038a40832e300380d869a","size":109,"data":"","first_seen":"2023-03-07T01:07:47Z","last_seen":"2026-09-06T13:49:10.416859Z","times_seen":180629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"76ffe938fb713d63c7dbfde6a8ccad9a","sha1":"9b9dc056910d21cee384045aef675e2083b27301","sha256":"b4b852230642674feeddf531ee7499c70fdd7748932ddb0b1daa99e2fbaab0a3","sha512":"8ccf2db2729a33455dcd59c17068505316ef5949e8354e1ef63f6c03af60cba398ccb63cf93561f1f23257beced82b8c86fb46f482278579c9da82baf6770be4","ssdeep":"","tlshash":"89014c82011bece4ccd75c6e5095b8d96168094d0bff9d6cfb5d8a5e04404f915acf1b","size":769,"data":"","first_seen":"2026-09-05T10:01:03.472322Z","last_seen":"2026-09-05T10:01:03.472322Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d05e584f988e88e4a66e8e3e6985024","sha1":"9e1b08af9ab019e2bebeadd3bc9a927dd0424b31","sha256":"bd2d219e2ac4290121dc9a900e62db77920e2f756c3b68ee4b35d898b77b833b","sha512":"1053971718efc8e44cc9bf639b7b632160ea21486de60029e0432d8aebe13248e9107169d908bd2397b53c9d69721e84d95798bb85de0d5cdd761fa112c0ab65","ssdeep":"","tlshash":"d1c0121d6641e26d43c7013a411f179f2ded794618d9a4005309dbd05cb14569a19f9a","size":191,"data":"","first_seen":"2023-03-07T01:07:47Z","last_seen":"2026-09-06T13:49:10.417874Z","times_seen":178326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"02ecc789cf11699aff1c7f26e5addaeb","sha1":"390f2eca9aae2525184cea61b45dd46550f01a01","sha256":"a69dd8961cf1272ca017a3fe9f9895a151e87f4e1f84f3a2eb50b29ae97775ab","sha512":"822fbaa86fa611beee8e8d0ad64c387cb7369cbab5f6e5e6837120ca4208d817a3fe8ee650685762ce846597f0b3b3554fb8a7ae454b30a579c45f5baaadc979","ssdeep":"","tlshash":"9ac0482552e68284c632202a3f073308349e4a6d1aa49018df4ae605282404f832ceab","size":133,"data":"","first_seen":"2026-05-25T18:29:15.105Z","last_seen":"2026-09-06T11:35:11.641493Z","times_seen":19218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1cddc4a9328cf1f045c4e73147becb9","sha1":"b4be37c9294ff49c283cd6afa64fc5a5f6ad4d34","sha256":"0e8a18056f80aaf5080df8e9a7da8b2ed79624ffa7fddd4ba8ab8b9877bb76a0","sha512":"ea6e6131c8fb7755aa81eacbea4a6705ce488873bc54b38fe050f62784bf3ff2db03888da9e7c9d49d836ee104d8f9adba921ac573ef3d4edbca7ee614300ee3","ssdeep":"","tlshash":"33d0c252828ba194d5b3a866a293360634fe122c4ee6e014bfadc1142420563abacf92","size":227,"data":"","first_seen":"2026-07-29T15:29:45.780377Z","last_seen":"2026-09-06T13:49:10.418899Z","times_seen":3682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"6430ebfb25a164c1f94df212a43a2678","sha1":"37edd6ead770a9165e0762e08fc753ac72ce312e","sha256":"a0898418d74f683d459dd68086423d3e374e0ba1ad096253113ec5f436c41a9f","sha512":"0b78f37f76733f6e2fa995a38889dd0ccb03413a86a42b215c3e799fda9960ad980b675e81321fcc6ee6af0c82e27e740b8c78c4bb2eab36a4b0c6eebe0de421","ssdeep":"","tlshash":"3931a2560077d1130a8aae20fc254de76c855bdad68e8e0dda7d6b8c9dc163f86c448b","size":1703,"data":"","first_seen":"2026-09-03T16:29:30.287233Z","last_seen":"2026-09-06T13:49:10.419396Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c05b7e6942b2f55f29dc45b7d2cdb02d","sha1":"b31b57e770683267b342edd95977dcc5f4c55b5a","sha256":"94e6d09829d06d18a43450b8f14775751517c82f696a09c4c9a6877d4004c655","sha512":"dc8e2fe5bd3f5d1a266939a21401d40e44019b1a2048b5a6fde29f77017103d25d292d67945aabfe0a562f214d46895e6c2fae52726d8133bc2939948a9d75a3","ssdeep":"","tlshash":"0b21216d94a354b8d19760f82ebdb6681026c84b5b56c0c3f68ca6086f60b20942ddf7","size":1192,"data":"","first_seen":"2026-09-05T10:01:03.475157Z","last_seen":"2026-09-05T10:01:03.475157Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"60997f09a3aec80ca967fbfa7a974e0b","sha1":"645ecd952c06d08cd0ac8adc46023f4d24ac91e5","sha256":"31b63227d2fbbbfb878f62ca362fd3e811bc20b135eef060e8b6e69c051e2399","sha512":"de8553658cee28cf883a84ca2af50ba941aa9e31496d6a4f25bb53557f03bf5ecfb25c0f13493d8199143f98b7d11aa21f9e652255f3934f9e5fb3a068f5d0fa","ssdeep":"","tlshash":"0ad02b53c02b12709412e5451a7d2d510f575843a8896c8e9e8f8d62858880475e915c","size":261,"data":"","first_seen":"2026-09-05T10:01:03.476256Z","last_seen":"2026-09-05T10:01:03.476256Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"23203b335edb084a990c2a96821d581d","sha1":"0c0ae3117ccfaf2dacab70c98939df347923d4db","sha256":"15052a94a912ce722866c44ff093237c10192080f51cdeddaa291bffefdc54c2","sha512":"65d0ae1a97b25d065ca9302cdc6f5d5f3f2ed51b7add5e70810c20106b228cb0f80b05bf43c2cddbddbaff3b5ce5d2165527585773f17eab136c4fbdc1493552","ssdeep":"","tlshash":"6190027400c17074c52164211506720021ac5b0d422154551e054248225c1070658c4a","size":48,"data":"","first_seen":"2023-03-07T01:07:47Z","last_seen":"2026-09-06T13:49:10.421703Z","times_seen":175179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a56bb19071c080d8827679a442c8a8a5","sha1":"201b1e783409528a2ffd98b61778ab419cc219a0","sha256":"8ca21aed2922634e4aacff2d35cc3dae754da6724138aa732e3b9b8dd644434a","sha512":"9d7043af2f03839d278142e593c033efefcd7f9ea9d868452be285de6ef800dbda57a6c0a3118155e51a6e58dae7e424e7620629da43c973d2ff490fd1b46eba","ssdeep":"","tlshash":"3a619394b560b0b800f64dea31bf5125d6266208b006d4d0f5688eda3e37dc7a637e6e","size":3377,"data":"","first_seen":"2026-08-25T03:56:08.425029Z","last_seen":"2026-09-06T13:49:10.422282Z","times_seen":1054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"c91974fd447afa0a119a206fc8f7cf42","sha1":"f3ba38539281876f2174ca658b8c3677676386ab","sha256":"d781493238d98f1fdbf92cb97a3be63c5fc6d14f53c86bd8d18bc03d6fe5d94e","sha512":"7aa86c0a95589f421ebfc07b6b65fffbb923b72d10517fb411e257c2c1175a6752641079d962a5f193ddf5d8df3ec15b96c40c8ac227d710b0543f5a451af6a2","ssdeep":"","tlshash":"fe51a39934342232061b3326a06e814f79f6b3316924e0aff73dc5507a229c58363f3c","size":2587,"data":"","first_seen":"2026-09-05T10:01:03.47821Z","last_seen":"2026-09-05T10:01:03.47821Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4db19018849953a1c04f8793d572b5d","sha1":"e23c69d3425bb0e150aba8a7faecd45c895fb48b","sha256":"244c1211763a06b2253ef0ddc4a73680a2b26c9fd9aa1c8659f893de90f3a5dc","sha512":"9a171dcdb9d0314f9460ac462fcb44eb1bd508655eeeb69d9a0f1972a939d81ea6da97a65cb35946c04589c8e7c79122e7bc95b2c9629edfe31617be35212c7c","ssdeep":"","tlshash":"4d1165ab960390700bb7424079de218dd13e320cd2f09139deda8214006016f5336e63","size":1005,"data":"","first_seen":"2026-09-05T10:01:03.479215Z","last_seen":"2026-09-05T10:01:03.479215Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a085e0c40ca6f55ea249d7b729a644c","sha1":"3272e799bc4729f85ea59dbfe937b686eda32618","sha256":"57dfbba084e5ad0c00c174e86ce796b5356d85ee4cfbbf0529d1d6da6919b057","sha512":"e2b8d765bf185d50dbbbf09c46797ce3cedcc7bf3593aca274d53400c4cf5749af7d2604cbbfb01098f3c6cf60c44bc2e9b06ba3facea42bdd0490a8bd635daf","ssdeep":"","tlshash":"521146fb27926ab043ca57bf159ef506a37444a6581d88017052d8e43d71a6083bfdcf","size":1059,"data":"","first_seen":"2026-08-18T18:38:33.926936Z","last_seen":"2026-09-06T13:49:10.424046Z","times_seen":1709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4837177d98c943bddfdab17ca42ad66","sha1":"aefc5c4ae3ff0ee2b6777d416bf067bac0e8d171","sha256":"ff867881822c46cde5a43b99dc2f621f6c23d6b8a736ea06ebb9837a3549bf7a","sha512":"27d66d741c508f4db31926c5ed312d176c6495e02d565f3fc46a5296ad62863d5a49d83db4fc816167c3c9950579be4c08785d289a29a1c35e8c26bd4cf49f0f","ssdeep":"","tlshash":"cee0c0482393dff40487770e547312a88c71581c84a30d20034d5ac82914e12c00bcd6","size":344,"data":"","first_seen":"2026-09-05T10:01:03.480689Z","last_seen":"2026-09-05T10:01:03.480689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"4aec41fe77eddce1e6a32badae015d6a","sha1":"426b4cae107462c8d3b05a10e272974a696578bb","sha256":"4b74c75a9e8c757205906be271868539a58cdfb0aa943c0bab01a861577d2021","sha512":"35b3101224313b2427b1c81c214ea8edd926b1a45a117575cc7cc783e46af996a6eff6c0e59788902304f05622d668c33b7635739164282a71f2744bfa213c42","ssdeep":"","tlshash":"640147c317866b364acf373621a6d3f87a2409484416d6600f0aeb80043eea7a03dee5","size":719,"data":"","first_seen":"2025-05-23T04:46:12.625588Z","last_seen":"2026-09-06T13:49:10.425166Z","times_seen":29480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae9d536acd271b64e48b0b8a69f9d2f2","sha1":"11178730314d176e450ce4d30d7bb9022027e691","sha256":"b175cd91d8c30fe57caec492e87477797beb2169bcb26fe593e7a3d086c02d71","sha512":"a14259cdfd32076028493b6778956e4ab6897800c0bd89aefd8b30b5e6fd6702046f9d04c607614178c2a92463b372fd8870b30b2677a280f04b04be6ff718af","ssdeep":"","tlshash":"dae0d8e4918bdef356df569e215bd3449b72505967220901128c04e86c68e3961efc9b","size":351,"data":"","first_seen":"2024-12-22T18:13:01.392527Z","last_seen":"2026-09-06T13:49:10.425695Z","times_seen":26999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec808fd262cccac29ea8d9cb3bee4211","sha1":"234d5f55ed60e3eb8e4cd0bf11ffafa29fc5c821","sha256":"c420dd42c68731e178c1f045fb41d1dc545aa9649982a35feea70e6afa1bbabf","sha512":"5673a80c00259ccb36625fb9ff4d8f763df1a1ecc3251fafb18fbb15ac2a4519f7424c7b6e1b382da3226401852a0af438145f0876072db2d7546b250655dff9","ssdeep":"","tlshash":"36b09225ca18a05a21f44608928efa03a02623298222281b0028640832e310380dc29a","size":107,"data":"","first_seen":"2023-03-07T01:07:46Z","last_seen":"2026-09-06T13:49:10.426188Z","times_seen":170760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"d28777a3d525abbe1ed0269ac142aae7","sha1":"f636108a910227337d758f699192e163cfa16c5d","sha256":"dfee695b1cc5b881482f9da62ff79e1762c231feed824a1308f4610c67bda09f","sha512":"26dc24d60772fbf16e70cfd50a437d39458d3a0fc6451e3b574c7356fe000374327c0e80bc2f3ea0a015d5c2586ca197b5405776037a696d31c8e6da6a4cc8d3","ssdeep":"","tlshash":"49d01274b4538c758b9b280c71bdc3d43d340486a7973911b27c91491b30fd15504e89","size":206,"data":"","first_seen":"2023-11-29T00:59:08Z","last_seen":"2026-09-06T13:31:39.086289Z","times_seen":2767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1e82204cc9874fea793b7a8db6e98f3","sha1":"244ce4d9c512d4f2056b43858011953dc1d76fe8","sha256":"498c11ce8f491ee724385caaa8ba054e60a418cb37804b3774a7e57991ac43ee","sha512":"9123d0fc69048fc3140f246c4bbdd757c167b1779f437edc42cbc2130010a5b5b2ff767bdc062e93968b582b0da4a468ad800dc6ab6eb797281ca1a5c9e75c11","ssdeep":"","tlshash":"9fb0128b050143001df643356ec3b358207745f90808d00a54f00a10382c38fd73f98a","size":103,"data":"","first_seen":"2026-07-16T07:42:56.490013Z","last_seen":"2026-09-05T10:01:03.483543Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"90c3649f774995d3ab71fec0ed8042a1","sha1":"2a6f89dac55c765bc541d3347f90a4260ddb7ac4","sha256":"1e862e67a5d4372463a512865ed0cfdc020ef69b139f33e7f4b6663bf72f860b","sha512":"78550c47bc360af61fe1335e931e351bb3077d205a2e4771716ee332e7dde5004f4547b0e9f0a53b5d850504b5c17459f5d2890d330cb4d1cbad2007fcce6a06","ssdeep":"","tlshash":"4a218605216513300f8104e06f0e3676ab1fc2d70da5f5a43acd528c57da33f82a9bce","size":1318,"data":"","first_seen":"2026-09-05T10:01:03.484627Z","last_seen":"2026-09-05T10:01:03.484627Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9518f46ad358d2410f401deac241eea","sha1":"1e0f73a6da9eab945631f4d9fb6c3e689ef38c4a","sha256":"16dd52b5e405c3c464fb27489309712a43a5c796c60bc241ff6dcaa4c1be1614","sha512":"9145d6a7fe6f4a9dbd48efcae566157ec757fec331de1943d7e2d667d9d904680ae5fee5e407e5425a3e3fa7ab6ede6f4caafa1bcfd0744c15e6abfa45cad81c","ssdeep":"","tlshash":"77f07dae586726b482ab00292faea158336650cf7189cb94fcecc50c9f64e194775f68","size":648,"data":"","first_seen":"2026-09-05T10:01:03.485596Z","last_seen":"2026-09-05T10:01:03.485596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6ad1e1ac95fcb654a166aa3c6e7c9de","sha1":"245e4e7c9d634ad38acbe29770c31fcd8ed6ee44","sha256":"ec89256fd6760fb8e3e24249da0317e42914a83a7d40b6b772d88b46edb65721","sha512":"b1f0eb1d262f0c53da1250c88682fd6a839749677fed42505c7c7e73ada70447c68290d384f2b530763757a2575b6792c6f5c36f9d97369cf37238bdf01791f6","ssdeep":"","tlshash":"60d02b5e23500b765dea06b5b73930aaa297846ae32e97a2286753141c0365e2370bc7","size":282,"data":"","first_seen":"2026-08-31T10:35:08.474744Z","last_seen":"2026-09-05T10:01:03.486673Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0d3cfb11cfb557921fc6bdfdeb1b8b8","sha1":"1c8b459e9b959b06dae8e2a3829f1f5e97048293","sha256":"6e5ba6cab423b881abec24f4623ab4d0e9aafd8c14f984e67d9799a16e9d4a32","sha512":"b5f4a65e1f4c39b717d216747d899469c309f0fd9267f08213833859718ff25ac2de55456992478792f0381755e6fcb4e62b3cb6f136ef5b1d4df7a6663bdb50","ssdeep":"384:Pvwtdb2v4jJ9XQDi83Q8j4x7ZXfIPJcLpNT0RJiGS3Zk:3e2wjjQtDj4xtg+LpGzUZk","tlshash":"caa2bdd57a8c1765e3a6f0f4c072718e76144fea227184b1722e9daf8b2f1e16bde050","size":22320,"data":"","first_seen":"2026-09-05T10:01:03.487587Z","last_seen":"2026-09-05T10:01:03.487587Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6b7bf5119e9a62b0299b13cadf3ca02","sha1":"9e89de388979f4545712567273c7629154cfae65","sha256":"82551f086c17aa98ebce2838157d189606ab4176fd14341bd56e4cdd9cd4fdf3","sha512":"92eb362cd2d35553beac905f17e9b43723c29af786fc81fd409c8bfaaf2c038ee62c4406ed754b157dae4c02696c44f91e2f02afb6b1b9470ef0208b5a5af6af","ssdeep":"","tlshash":"e131a7d290c8f0ac0651947cd8af7714653397d864628ca0f03894ab1cd1f6f812ffda","size":1783,"data":"","first_seen":"2026-09-05T10:01:03.48868Z","last_seen":"2026-09-05T10:01:03.48868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a1a11d9066b953576a956e655a543f1","sha1":"2ca616a95b606da6bdc5a56934944be5ae0244ae","sha256":"1e3574e9161b66aff8ce5292fdca0e019dd8ad17313f164cfd18ce1db32edec6","sha512":"6018348c4575d6ac6ba8d038012e9fa69576ccd66a023b8a071dc0f9c4868afd289be9cf496d1f035a3cb3e0af5754750a733c037fe69fc82e2b2c917fa30203","ssdeep":"384:MyuUDP/xkArtg2uoKe2uYhSZrBbCuZi1PmyylTbtlgwU5zPbAv6:Jkwg2VouYYZl2uBycbfgdsC","tlshash":"aad24099d4285878074f8a2fec8efa42669cb6ddf6c0dd15ee24b09c12b65c4633f50e","size":30012,"data":"","first_seen":"2026-09-05T10:01:03.489644Z","last_seen":"2026-09-05T10:01:03.489644Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b52cb47f2ac5659fff1b707f411e8fd","sha1":"0b15ef424712bb5e13547e2d4271b7059a1786fb","sha256":"2b84e8c368db9930fb7640cf722d426a023045b7041503768990f3300d48cffd","sha512":"8c167590b5d6f60a68f633111260540d2f789dc33b3da3bdfd73aa77c992c2d97d010ef518a750d48d9953ad16529e4d3da8bc3b9ad8e4901bcee88b34a84fca","ssdeep":"","tlshash":"294174d1758293f1164212f458df3716a3b4d20bdb80b94ce510e6097cb4e86906fe8f","size":2435,"data":"","first_seen":"2026-09-03T15:29:41.979164Z","last_seen":"2026-09-06T07:01:50.080621Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"002c444ff21aa1ad3976106fae2a9d65","sha1":"650d27691f915fa2680fae203c987985a1ddb721","sha256":"0c3b0adce0dc164010217a602ca07b2ec10a50def669a6441152f6d5ba39c3e7","sha512":"4a306bcab475d7410f22a30b7967d0ff4825e07fbac17c2b05ffada932a89bd6b78ffb699b07d4f8daee0d6780e05f7ae6368a7f7768a9cfa2996308de44323d","ssdeep":"","tlshash":"7f41de2499a253f1911319152bbfee8aba963213e121e584fcbcc92c1f01f44c939efd","size":1900,"data":"","first_seen":"2026-09-05T10:01:03.491422Z","last_seen":"2026-09-05T10:01:03.491422Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb9b81354941b5d87c790521e9ac9655","sha1":"6fb4eafd3ff039ff2eead53076b1716470b63d9d","sha256":"657c58dacaef353ae7a2692981e85998fdd8c898c99653650ae7202f3b249a21","sha512":"975b2ffbdaae119657471d1046ee54e518f8012c6ddb0daafd8929655103659149bb2842c5b8206c86adb89d978115b591fa2fce91206d1a7db7a8ce74e1fba8","ssdeep":"","tlshash":"faf04c6afe81f0e6d4fa24a40f3b7b4b7379563068805000a650359539e6e1fd302687","size":577,"data":"","first_seen":"2023-03-08T15:57:54Z","last_seen":"2026-09-06T13:48:19.000665Z","times_seen":42145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7746f7af6ff7dded4b43a4a9d91fdd08","sha1":"20945b251adc19ac44c7576523407d39b8b71248","sha256":"090485583e2e1312dca83f7ae6be80b472c27759453b73720cc8300368854807","sha512":"a24f23a6a439091adbe674f2018e14108ef73157ce6d3eae978b2ca40b8aaf36fcee082e5033867b182f220a46e89d044a92ad2c941b30a9426849cc6bfc727b","ssdeep":"","tlshash":"a29004ddd515c41401355171354713547744f50041dd40104134c0153107d43434545c","size":46,"data":"","first_seen":"2025-06-05T18:44:38.851011Z","last_seen":"2026-09-06T08:18:37.498184Z","times_seen":7753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e8c41750858192b5b3e50821185c1e0","sha1":"200e859070aff2be0ef09b59d3394b587d431310","sha256":"a9c3942d2866334083f8d26cf21cca162933ee1ccfe0198a77ac7f9a06ab4790","sha512":"8f296030a3b525a0716337543512002d6eb09fa079a36de253d4ceb04ff18e1b7aa4454702a39095e2cd53fafc0e6112dce97c8a2dd947864a1ab896f1ef326c","ssdeep":"","tlshash":"9411086f14f32c37d863f06a6b2b31c366504c0b1bee89113d5f46656fa829e82b4f91","size":1052,"data":"","first_seen":"2026-06-03T19:53:10.437738Z","last_seen":"2026-09-06T06:24:29.463024Z","times_seen":775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"51065b98e71543f012bf787b9fcca1f9","sha1":"cd64cd3f0a46ee4e9bb48d2dba55c2bb4fe15cf2","sha256":"09388a81b469100a141a32a685aa75ed0deb54daa0a05c89d45f271120d2128b","sha512":"670f3db14fa2c746cc72590c2a2242d54f78a637a2788da17846dbf0f09494512d7de628c5363eba96c25cb9b82b343d24f63398aadf1fb86d6706bb7dea2045","ssdeep":"","tlshash":"2321e147e9a8b029c4ff1062d23ea93a6e3703217505ac45837bea115a48fc7b653e47","size":1338,"data":"","first_seen":"2026-09-05T10:01:03.493788Z","last_seen":"2026-09-05T10:01:03.493788Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"774a2e05318b7784667096fa363cfde5","sha1":"13cf9ff2d15faeed42f1098b0be8f2bdb2796728","sha256":"50a0b0074950782b37822ba9be7ac0e7070a161bf347fd29159fcb7ef9457deb","sha512":"73c3e8eb4e1cf2a6d68a09a58c03d95c5574b178432442a07a8279a2494173896f5ad0b1b1d8b08bec961efda9953d67677d6af44ae37f1d91da154a1b5e7267","ssdeep":"","tlshash":"f1a004054504457504f1d100731d3d45710344f011550140c54d571dfd5154351103d0","size":64,"data":"","first_seen":"2026-05-25T18:25:35.735452Z","last_seen":"2026-09-06T13:49:10.43812Z","times_seen":29527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a54456d637e26e41d301959cc1157c11","sha1":"55d83272df0664856f55744f1a1083336a5c1b4b","sha256":"666c4216da29594ab59a9341165547e160a8441cc2dfebb5088be71f29e4308e","sha512":"091d3e3b3a79b7e24c92ee37695af565338cd4978f785760da3ba9bb5b01af56490a22b3d5556ba95506401fc04c288b9587022b41cd0841db15b7b501ee81f9","ssdeep":"384:HKzjaz/8DYX718BTkLcKRjrz1n7lr0mscPQD/+WH:Vmq7OqLcKRjrpnxr0msOSN","tlshash":"c392e9c97838ed3accf55e47176f9e03ea77b213786c042966a6fd0813c417da62252b","size":20182,"data":"","first_seen":"2026-09-05T10:01:03.495329Z","last_seen":"2026-09-05T10:01:03.495329Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"40368b0f835d6a4226e498c6f83e1539","sha1":"d4ffaed389e03e7a19967eedbc19b615aeb589ed","sha256":"8fbf9aa3255a30e0ad7ce8cef5d33690d9833d3dee055010c1d89f3194cd7e3f","sha512":"9bcae7709b6f5d683e842515170ba3084e2a708e33ef7593ba3dcdef6a5a7c05146766d95a23195a7175b0d00eb60665005cb56784766d7dbf6038ca2a702696","ssdeep":"","tlshash":"cde086932422a1505523d314be6e7200bafe133f5491e5143bc9cb717d608c383cada7","size":363,"data":"","first_seen":"2026-09-05T10:01:03.496184Z","last_seen":"2026-09-05T10:01:03.496184Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8b3d2859e04c7f893eeacb88221ade0","sha1":"3fc29190de0023536d3ee94f16fd36931ba7b78d","sha256":"05d9cabf04850e3f30f3ac149fc18c28557e7e6e82a1e6a33e82cf43647cc73d","sha512":"53c2e6f675fb5c68e2e98828c03749bbd04a648b33bea7cc3fb8a36cde3ba1bc056c36bfa8cef43d3203abbda1a9aaf8fabc5a89de6678d54de1701e603a8886","ssdeep":"96:30FwypaCabH8sWyQTQzoy+z7ySfPu7Tmr0qtycYrMSo39UX1/B++5EB3A:zypUFXIQzoyITfPu7YkASo35+yB3A","tlshash":"fcc1405d5ce740359877b12d673ff604327220136849ed207b4caf246fa0a6b89b9fc8","size":6129,"data":"","first_seen":"2026-09-05T10:01:03.497152Z","last_seen":"2026-09-05T10:01:03.497152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"97205b32479b5bf7edf66cfc57413cbb","sha1":"d9b7fbcf5ea9f29ac4afbdfeda9b29b8bd69bec7","sha256":"6ae13337b04159ac3bb635e0ad8643f802784cbeb594c249dafbb3d8b9151638","sha512":"2b8346520f4911abe63acb75769c17d39de8fa8f58548f2d2631b3c282e9dc1688795e74fd1bfd114f21026d74a40febcfefd0272997573b2a403af702ba2682","ssdeep":"","tlshash":"69218a8869f94134189370344ecb6a05742719ab1108ed497ecc97a01fc57af8bfbbcc","size":1430,"data":"","first_seen":"2026-09-05T10:01:03.498185Z","last_seen":"2026-09-05T10:01:03.498185Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"7918e774f3690aaeeca1a3144af6d5c2","sha1":"27c29ebdcf544beba8e7aa60978e373b6e21d590","sha256":"f0424879cd746357b78fb83ef8b95554be8a6dfee6708ee7163a9c1d3b02f1ab","sha512":"0ab087138c5fedfaf13e1a9f9bb64845c74ce0221245b9035d592f38d74fa82e57278f0f44fab43185b34081c16bb9a32afd823ddacded5eb8c2790309a5fac0","ssdeep":"","tlshash":"4b11f20420a2143b817b47e506f7a5cd6e1024437381c29c797f920dafaa694e9fbbcd","size":925,"data":"","first_seen":"2026-06-08T02:48:53.322312Z","last_seen":"2026-09-05T10:01:03.499152Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9ca322534c481d7e3d78dda2765cb1e","sha1":"0b31d351bec840418c13dc4fe0c931c70a4faff0","sha256":"85d62d47e78c9d5ecbfa1dfeea7a943f3b96ceaf4573ebdfb77e46e25746fe3b","sha512":"82d73db95307266b6aee17f3c4eb294ed8225f3e0455be955d59196aca5ba8d3209d5ebaa0b07d6b9c7f63fe8a5eb237511536a1100bde17a7182daef45996d0","ssdeep":"","tlshash":"0d01213d19ba9430043331aa73aba7d4242921077445dc887a6ccf491f85e268aa7a9d","size":663,"data":"","first_seen":"2026-06-03T19:10:17.879708Z","last_seen":"2026-09-06T02:38:44.218294Z","times_seen":1550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"253365494ca870339f285eb574d5daa4","sha1":"5a167a413e0943f312993bcb4d11e571350de9e0","sha256":"54f5414e717531eaf1401481d50efde0e5a831f8ffddc0c61dc9e3e33ee7e2fb","sha512":"182bbc3cfa9d687c4b8ecaed7c29b8aea010f3581f24b42d1f8677cd70ac304479cac3ee1897ade936666254821cec7d49d9ada88b801ca414bcb10e01590e9b","ssdeep":"","tlshash":"32418809e27695320263a03ae67fd680a3b1b4874d8ace357ddc96098f445b8b1f76d2","size":2427,"data":"","first_seen":"2026-09-05T10:01:03.500224Z","last_seen":"2026-09-05T10:01:03.500224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"74bed28cc1dea2c8f071f779d5b77743","sha1":"b0dd252b6215e8e495119f52b713845c79e7b922","sha256":"cd7d40aee414bfcc60a8f377d5f15a897ba7edabef50203735d9b60d9693c68e","sha512":"c375255c35bcf201462c6c353e2d5aeaec0e840c9528ba2d11d05bba97c0005f730347afa9f8e82234afdcdc90214deff3d1effc7648d80deaf02eb5b9245c0e","ssdeep":"","tlshash":"ebe0728810e03420872f00ba09dfa3563502200bb18bc0fe3a6c92860f002b083f3aca","size":308,"data":"","first_seen":"2026-09-05T10:01:03.501116Z","last_seen":"2026-09-05T10:01:03.501116Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e291aa1c7d72905cf47de41a0effd9b5","sha1":"b71cbb6a3399a6d7448d0a0dc63371109219654c","sha256":"f8459a28444a134ad24bd2fa5de4fa5ebd5a8468e434e02bd835471e20668467","sha512":"5360cd260bb49ac54a21491e6c85f51adbf718814dee5ef099a0681548e4cf9450f4e4a3b1c9b344fc7c139d494ab900d058a48cc816ec046ee67e701b2d4701","ssdeep":"","tlshash":"7b11cceb2de150070170c01c0a2b6aa0368201434e643ea57d8d9ac52fafc4f59bdeee","size":963,"data":"","first_seen":"2026-09-05T10:01:03.502098Z","last_seen":"2026-09-05T10:01:03.502098Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"32171449506209207a225863cab75ec5","sha1":"4c8db8f2385b5b542a8a22273815f96079ca5547","sha256":"0a0be764687d230a9622fc3e179f11980e1919640399202c2c0ade2b811f8c4a","sha512":"85e01be8041fbd340bae205336f37def09610179e186df6a5db0f11ddbc2042cebd2ab6e00b3d0933416c9cfb6a2e3639cc3db86ed5a8c8d3fa5affa4c84cae7","ssdeep":"","tlshash":"d231df5571b6107b832f613b139f53493f36108b209dd9157e7c86841fa0e3297f1b8a","size":1622,"data":"","first_seen":"2026-06-03T19:10:31.461116Z","last_seen":"2026-09-06T01:59:16.244997Z","times_seen":523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"33d1b34187159f7dbcd4b56aad2c91ba","sha1":"559d497516989785c46af87203a38847046cbf53","sha256":"1b394f880333fce2e5ab5e1be713b4ab85b922e70b981a25d3d0ba97c6cb4e41","sha512":"a78e90f8d222521023c26ffced14bb84ea9231a77859277d121f39859c8ec3b2f5add0601ce31d5182d8009fc57f02bf3bb6e7a47ce90a7d080246ce17bddeec","ssdeep":"","tlshash":"59d05eae09a112c071072065da1e5116b06102a315169e00fd2c2395ffb5d2e61daf88","size":287,"data":"","first_seen":"2026-06-07T13:19:40.150451Z","last_seen":"2026-09-05T10:01:03.504596Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"eadc8e454eed1bea29ac05be183692d7","sha1":"8e42c67944ef332280aad065746d1412a4049c50","sha256":"d17c6490506783395842050322b439fb20e1226c8a8c058c6cac02d32128b5f7","sha512":"012b6aafc307e1ae0e723079c703353af3bd19d31df975b9c1d16f177e61924e21134814609c6dbf881567cb6b1b53d797a20474f034154893b0c5a0247c6e6d","ssdeep":"","tlshash":"8401fd1a8dfba07143b2142a27ffd6403222484b2255f8413fccd6421f55b1ede39eae","size":790,"data":"","first_seen":"2026-09-05T10:01:03.505129Z","last_seen":"2026-09-05T10:01:03.505129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"44c62bd9f52c8dfa2805f29643954ef9","sha1":"8efbc6a6a9f679ca5e41f371cc020eba804fcc53","sha256":"30959588d47e9c326d9084f386eb932ce1f8c38a0276d3c896f80431a5ab70d8","sha512":"38d08ee2e101c06b391204ca233651b5a3992ed611afcbb8f7df6d3907c1dcb6d6481fb140e536f4658de1666b9a717378fe686e00b534e636a98e436605380d","ssdeep":"","tlshash":"d1d0a71f2ea35234412b009a713bd36836617427a862d0466a9d871d5f50fd9894183c","size":232,"data":"","first_seen":"2026-06-07T13:49:28.638731Z","last_seen":"2026-09-05T10:01:03.506109Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9b0f6780bf45a055e5bd67cea84869e","sha1":"463da11108cb81c6bb58d1cbf5435dac90ee502a","sha256":"555e19d7bec48e6c5fd4cf147b516d3e9c2ce5deaa725db8e60e0784dc631ab1","sha512":"bf5c455efdbc0b3e875a6a615e27803acc511511cc0fc8645f5026b6ad68723df20050f00e8f4c39f7ba59439c8fb915aefaef11e40789f9338013b6adc0efb1","ssdeep":"","tlshash":"7351636b45443837ca4942fa509f3d106a2c6cb31296b8ad7f9e5f2c4be20479325e6f","size":3168,"data":"","first_seen":"2026-09-05T10:01:03.506683Z","last_seen":"2026-09-05T10:01:03.506683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/apps/buckscc/sdk.min.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ca83e242347e809123dd6a1d855a846","sha1":"f8981c57a99f1d0ad04ae0a4d54859687e4f46dd","sha256":"7fb89d82dcef389534466022a37c4875cec0434bdd85d6375a72ff9a1ea06c6b","sha512":"7f79beadb382161eca61f9818ad9595795b3b55da80b0195090e337f7c141b557f6a517305d997d5e9df487ce0a75438565689ce10be90afff36129ed3983de0","ssdeep":"1536:alyM5rWaP69soB/P2CebtZNUU4YIH5JV2TIN2dfEn7:0WaPssoB/P6K","tlshash":"16a3a681f852197f95e7e0f178df2247763bbb18e84909d6d48eb5b823908c6c112e7b","size":104378,"data":"","first_seen":"2026-08-09T11:10:50.088246Z","last_seen":"2026-09-06T03:38:03.565619Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[ABConvert] Running theme clear cache script 1.0.1","filename":"https://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/theme-clear-cache-script.js","line_number":2,"column_number":13},{"level":"log","text":"[Alia app extension] v1.0.5","filename":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","line_number":11382,"column_number":11},{"level":"log","text":"[ABConvert] Running customer label script","filename":"https://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/visitor-label-script.js","line_number":2,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"flagcdn.com/w80/iq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.856Z","timestamp":1788602383856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/iq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-13f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztLaeGYl%2Bq9W%2BoVqd5ZsCLIlj%2B26LFA6r3l%2FLvOhOm7JPPDTMc9Cst88uqMu%2B7Od5FMewBq3RwhqipGhrnTzn5MIY%2F2KOgo6erouxvDJn3LCq6V9%2Fw0Dv5oMPL2PwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462031b4b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 319\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319,"size_decoded":1156,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"f38b98ea5b189eb0cb727bde2f57c883","sha1":"486ab29ff1caa89104cc7f620948a1e1911a12fb","sha256":"cd95b18f6ade141eabd5f00d4f420f49c64eadfb5320dcfcdb6d68bb0e554d03","sha512":"00d6155891e6eb81235546adf192ce1606183fc8f6413b0892453fd93c7f794a208b1ad3edac2c31586e5f5f204e01c2a801b72d8318e5dfc13e79ef1c91886f","ssdeep":"","tlshash":"7be07d4d40728f1cd966996b9252b20cd8a146c2fc71a653da77023d794c603c0c1232","first_seen":"2025-08-29T01:16:58.627528Z","last_seen":"2026-09-05T10:01:03.156204Z","times_seen":100,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/jo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.866Z","timestamp":1788602383866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/jo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-11f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHcyDZa%2BejCirqKCJbca6eC5UZJu198n%2FS6Z2T1TOAKBPXPFww19vmCa%2BICYhsiyULomEa%2FrzjyDvbFqVHBJbwfzcGH6MyC%2Br0%2BqlCpn3tdUFNF8tfNBAG9Xo2ArDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287,"size_decoded":1122,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"31d4e3828d622a146a6978b6a6a72d31","sha1":"57cd04b7ad113cae97cc7f60fdf718caac1bde42","sha256":"e56000f765062306350e6138c41ee7d3f4ba18e60709f4b803aa90af47065cb3","sha512":"acc98737a8f4783fddd9cbeef15068ea736a607f4c28901e168313dc346de9b4d0284e7b749c6c628ad9e7cc0447ef33c188f5c88a74fd8a61714be299db44a3","ssdeep":"","tlshash":"33d027d7e9744d0cd5c1c837914c97d4b565711cf121191d318b2d6e7a42455c19c553","first_seen":"2025-08-29T01:16:58.669392Z","last_seen":"2026-09-05T10:01:03.157286Z","times_seen":107,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ke.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.869Z","timestamp":1788602383869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ke.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-28f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AlC%2BnJ8sHV9oRlZpsszj6EFNMXpn8RY3vCkcILNMPG5xX5dDEQWOxJAq3mrobf28RZ3k%2FiKKTUm9jMpebGPmRzZLrwVZFhJPxL1VAHoI1YVFJ7SYB6vWJOE0BoxiSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 655\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":1482,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"5d79a8893f63a3fa345a0c4afa5f21fd","sha1":"58788f069ecaf0064e44595cbeafe6840d053030","sha256":"e62c36f709dba84c7bbd0bf5e8accdca8090d5aeacdffb609bab7925dee7aabc","sha512":"06dca6bb31bf760fa65ad30481dbd6dd831ebcddc50e1b851874a1848748fe31fbad29369f73c42962efe505dede65a009efac9268f03dc2d18837b780ab598c","ssdeep":"","tlshash":"1ef023c235021f3f4cc6c931d22514a7ad7303462347376935afc8228f74a4a58ad1a9","first_seen":"2025-08-29T01:16:58.553258Z","last_seen":"2026-09-05T10:01:03.158178Z","times_seen":105,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ls.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.899Z","timestamp":1788602383899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ls.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-13f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2450101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYPiDc4dpQuARQMrnMQcXy%2FosUKgabO%2BxqSSTEZBOE7PtiVw79FHKJ%2FvgTlxN3oWiZxCosbMaEYmB5vLFUnvuPEdBJww6QXWMF1sQxCvfGUOX2sDyl6XYubz86Ei9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462035b6156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 319\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":1151,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"2d52907c163091432e891ac41595dbb8","sha1":"b4dbc9f2d9ca47fd6eb676fe0a32776222fbe62d","sha256":"5edebe1f9731155a12caca11819c4a313fbfc3fe7de6fc2074db3b6c36ff4683","sha512":"f33296eabfecbacd8a7bd6f16f7e7c6a9e138f12c56c53c18b6c2fa377d5b75908cbb16da45f172619bcee12843c48cbb62eaffeeb50531104a44d2f38201cb5","ssdeep":"","tlshash":"4ee07d58523fcf34c50f08ea6099e728d549e22811dc35063367c37cf23a39a94d4707","first_seen":"2025-08-29T01:16:58.687459Z","last_seen":"2026-09-05T10:01:03.159171Z","times_seen":100,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/lu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.921Z","timestamp":1788602383921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/lu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 358387\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4nHJG22wbKclLGycfsXDR3hqPKMavK4ZXvGd1C41hA4q4BY6iWyKz%2F0tMqTPethFmrHiYSrOAWX6zkk1I%2FBehPpXcrM8IogUyedXDVH0Dql%2FTvMYVCN3oHD4JohFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462038b6956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 2-bit colormap, non-interlaced","md5":"24524cfb0dd32e2a936d83a5eb25453f","sha1":"ab84d0d7cb90dd0ba489206d54cb385829777e4d","sha256":"50b9d335fd95f1340a29fee63c1b9431288d5daf39efd8682bfba90faaf7d070","sha512":"b83f7065231249130732844dcc076977aa317a2e01b81dca45e9929175a359e61244d59878851b91d11d99cdc401fbcd702c9026110ea91e96754bba69540167","ssdeep":"","tlshash":"74b012d387e85d63ea6f143701081540f92dd21c272f458e8456dd2a11e0244c8c4231","first_seen":"2025-07-08T00:55:32.449228Z","last_seen":"2026-09-05T10:01:03.16007Z","times_seen":173,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.937Z","timestamp":1788602383937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-8a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AOluKV9EcriUTOBHmEf4N15BYvNOGrmyVSN%2BVcV5u34OQjCTOaXai9bWXtNJDHfo0H2jv5SShsp3mfjSOqZBcIZwCHv0QIYlEtPIdXpRe8ZP5du2RgkMS8QxljQ4BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462039b7556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138,"size_decoded":962,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"c762633f8b29038d3a650d6be812f59c","sha1":"e7911a3a4fd605b083ac7be02067a582ccbc7b34","sha256":"28552502baa778428c43466e2b8f4ff2d11cd93f0bad3db02aabc77e65be04f9","sha512":"8ea23de474f905e80a304cb0cd554d34448527856748ce1b1de8d6fac9e28e45e538ab742fd2c68d2b81199b8c8fd6b0adea4d4e3f2fac6350926c3d38b713e3","ssdeep":"","tlshash":"a8c02bf3f38d2f17f42a302601680493dcb119a0b30141230003c238033821b45c902b","first_seen":"2025-08-29T01:16:58.59375Z","last_seen":"2026-09-05T10:01:03.160548Z","times_seen":102,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ne.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.964Z","timestamp":1788602383964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ne.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-107\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TygSSPS7wtnWWLqeWUNwPtQJmZ%2FXd7BYDtEHThpiUJHIYrA3AFntgvXMnfNJwAF%2BxbN1QBSl5PvQwRnLwXFPc20TLSDM4RqgHtRr7VdfCaRUcIb3MG2VoXjz5I1o%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 263\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263,"size_decoded":1092,"mime_type":"image/png","magic":"PNG image data, 80 x 69, 4-bit colormap, non-interlaced","md5":"cbe30a1349b439f77a0fda5a84416738","sha1":"9d0a4d7520b176ba99f3cb296d348dc32612d8c1","sha256":"e6535bab7b7ee08a2d087a4adedb8e0b39df9370c6e91bb7264ab85c958aea11","sha512":"bbb4f1ff6510cfac883f92c4840634093378aac4369906c6b41fcd3637d60296c8cbf2ec90218697d586640adc337c0eeeac96d013815d43bfd26893f42b2101","ssdeep":"","tlshash":"2cd02bc44659ed658d8900aac282eda1ad528e045998a13e52478cae8ac71a90499572","first_seen":"2025-08-29T01:16:58.534778Z","last_seen":"2026-09-05T10:01:03.161555Z","times_seen":96,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ch.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.068Z","timestamp":1788602384068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ch.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-87\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2611684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kC7DTLGb8NlREVj1sHgsOojjhYEU958PvSy%2B56L0iM%2FOHhJd83BcrkcI49GvC2eTVUF1F0s9uJKj3MewZjKGFwEnlgnpLL06U5gwy2qGNzj5JoslsnE4iELNJqOMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462046bc556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 135\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135,"size_decoded":962,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 2-bit colormap, non-interlaced","md5":"fa62de254012b0e0d930f952d91d4218","sha1":"08f2def6f0bf90dd017cd6ef91546dad89b9eafb","sha256":"c0238ceffa2927c670890712efe6eafdce019fa68e9118486ac08c2651ae4a4c","sha512":"389b22afd76471d497255c8add2f43fa03ba61ee137c598e71c33cd673f7df3c1bc75bf0bf535460d7933fe597af16f1cad48abce024a153dbb686ba10c16035","ssdeep":"","tlshash":"9ac02b83a2f44c23fa5b007281081200f815182c142582824341d7976607280c484701","first_seen":"2025-06-19T20:09:28.339796Z","last_seen":"2026-09-05T10:01:03.16265Z","times_seen":258,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.061Z","timestamp":1788602383061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\nage: 1815161\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 583362, 229796\r\nx-timer: S1788602383.088292,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":30979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-06T13:22:14.872506Z","times_seen":193412,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":14,"dns":0,"connect":9,"send":0,"wait":9,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/vg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.738Z","timestamp":1788602383738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/vg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcnwBqsmZcODzKg8fHQWniNUSA9kJlQQQhHsbeDRK3sZQk7NGe88FwEf%2BLFpyACMtgp4GodGotRee6QPiQ7CfkFl2EVGHt2Oj%2BPwZ9NqumC1CFfsi%2BL81AZ6TCgayg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462025afa56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":938,"size_decoded":1767,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"da75c9cfa49a10d7d6d0b6fc46292e72","sha1":"5f00864bde6c4d9abffd883b5cfd3931d89e8b92","sha256":"6485d2d920e5e375a15905de1ff5760fa48d4afbdf629b46f774de2163e3627d","sha512":"39d59097d5151adbdb19941b024895d584fbc5557b131311d0a0f75357b566d1c5508ab394859473c1c2650343d91af94e8b3ec82b4eb875a741c68044183e9f","ssdeep":"","tlshash":"ca11c8b5f2089b33bd8c548288008187d009a250d75530c46f91c3b01324e78d07ffb2","first_seen":"2025-08-29T01:16:58.635852Z","last_seen":"2026-09-05T10:01:03.163642Z","times_seen":98,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.757Z","timestamp":1788602383757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-13b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uapr95LZU0XRMpedGme%2BUgCzFbDT%2BVvrNrPbeY0z6CAlv4r1uQ%2B9BYAMcf1vUCBuMyO2U0HhavNi9F3ETLXFTwuz3OqZ8lnMEwhRS4JzI2jIXYimH19WB6M5C7HSBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 315\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":1144,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"dfe29cfd46cb82cdf6b0cd0a22aaacf8","sha1":"2bda4aaaf579e95c4ce78b9f7b9aad1bd0292b78","sha256":"fdbfb0d49ec098827d28f297a4ee3614edd1dcc014bcdf978b7dce73c7b7b4f1","sha512":"4e7068a5f563aaa4bd482408a762dbdc75d6c13604e71545bc178746729c4d2de493ce60f10d6cb7e100a1de20070e54b1aa5d1ed5fccca485df015024904a9a","ssdeep":"","tlshash":"50e07db353d29fb4c1013b2d79d8841d66ac1144fd02515f414ea92572e951207db356","first_seen":"2025-08-29T01:16:58.576765Z","last_seen":"2026-09-05T10:01:03.164685Z","times_seen":145,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/de.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.824Z","timestamp":1788602383824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/de.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1547559\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYua063a8VjfTcn0riBZpHLnyNFgMDdmxLWQNijnNBwSDDLR5DB6Oa2lZaQAOufT9kR6HhVMNLd%2FTTIh5nvHBUOiA3lWkismWxL8ocqCr6KLXSzgSUMb78ZznOcCJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202eb3556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":930,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 2-bit colormap, non-interlaced","md5":"b4643304aa865b430f83028fea4275b3","sha1":"2cb125dd205d90b6bf11825f354a1cd74090795b","sha256":"5eb33c86a8f1cd43cbbd990aee89e4ce4fabf7efdece1529be66fb1becf29fc9","sha512":"e2d5e24263a0d529addcd8d5db9ae61f87695174cf2ab7b97b5fe2eac7aee06094f99c4b68d5e116665e61c0bab24d90471ea4796415dc471d84d9617054d167","ssdeep":"","tlshash":"2db012db06c89eb6d340113f012900a1aa1eb518131286cb90568e25788a6c0c1c4553","first_seen":"2025-07-08T00:55:32.433518Z","last_seen":"2026-09-05T10:01:03.165542Z","times_seen":320,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/la.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.876Z","timestamp":1788602383876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/la.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-108\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JTtWrzs4XOUHrH9EjkcO6pg7SfqMwY7uyiK%2FPEEVFLgeU3w0fiubP65WOn23A4Sac2Vco%2B0Snn3YMu4o%2FjUSTGHyJDw%2BTcGke9AejFeDJsYuG88ZCBLOvlDIHb4QFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462033b5b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":1095,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"5d5bb86a9c0e2d575ff18a43aecad0de","sha1":"ae875028027b3b09441f1217942855a2e68983c2","sha256":"f44d2ce837fd22ef7adb3a3cff06224e0f3bc26a20520f619e56fc7269ef72e0","sha512":"18e0fa897990e5c02d01e316db74654b1f6b7fb10e2a1ccae3fa82bc4005e4c7abbd84a77fe326f0f1fcb2f85b9ddfb2c8486c7a8ea378d95c871d16f7c0c8e8","ssdeep":"","tlshash":"b6d02bc3b8f99c385747741695041465d1346239e64a4907a4090daa17da1cee840973","first_seen":"2025-08-29T01:16:58.681569Z","last_seen":"2026-09-05T10:01:03.16602Z","times_seen":100,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/nl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.959Z","timestamp":1788602383959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/nl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2519592\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqoOOccuaSsdR45SGWjSHI2U1iz0s0r92NSTCStlPoA%2FVRu4R9yKEYLquxj%2FFkBS7gJ904kvVEYb%2FlyWwZ9VKF9OcWKEE80yeFVB8FU%2B5p0UlISY5GxhHLgOSO8uVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203bb8656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"8e543c0cc19192ba173370caec276542","sha1":"690dd1e75cac9b81ee020593298eaf48d3ceb73d","sha256":"2551bcd6a2ea816da99fd646a6f68feef0e3b2897216b1afca88a6e4283ee42f","sha512":"848c17daf94ffecaf5f644bbe6f272971362248e29b806f7c07be071d68de95ab11785b71fe6bb0592f647d8555fb36695ad8bdea336997f7f6015622ae3b65d","ssdeep":"","tlshash":"0bb02bd1b1551ea8470ad43f408824cdd97716057a240902318e02740d02000d040127","first_seen":"2025-07-08T00:55:32.482299Z","last_seen":"2026-09-05T10:01:03.166995Z","times_seen":266,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/nf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.968Z","timestamp":1788602383968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/nf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1cc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 362204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvmbdKriQzH4n6F1TEpIqgGd2BJiey2AdVU1pVs%2F1eGrtpBEv8bancf5A1XlhiWRKynqFXDlt6gTQLNOc7gwszkg%2Fpoxaji%2Bq3l3WW5R1f0%2Fjqije1hPsrmAkYxUcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":460,"size_decoded":1291,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"69b5829a12daa6f0e915587068a0aace","sha1":"c22ea358ca78e6bd7e61f54883dbf57f8bdbb0bc","sha256":"caae77d969ae742ddb7f5f825b21b168097f6871d4ec7af76f1c25074211dd17","sha512":"06aabfbb27449c39c90b25e2c25521027306a582454cd4a388bc49001249f7236d114de54fb761396cacf5eda9de258d3133bf9b971b38ba388ea2e9410d6785","ssdeep":"","tlshash":"e3f0dcd712e65c48a6aad867982ae8a3b7b126041431909404dda057f923830a8f5740","first_seen":"2025-08-29T01:16:58.692716Z","last_seen":"2026-09-05T10:01:03.167545Z","times_seen":95,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.hooks_C3ligZlI.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.041Z","timestamp":1788602386041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.hooks_C3ligZlI.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 128\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Sep 2026 16:24:10 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.hooks_C3ligZlI.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BgL4ms80PxXBF6f9E4aHS34pI63meT8s6DB9sIGT8Cb%2BcUeQZ1yhTSFqWkVEK8Vghedg%2FjJEJv6jogMhqTl5dxSfa%2BIX7thNo9f8JvJAzKTB89AgyVpwFgrW2hP8lBD37g%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 0fc58888-1964-4a64-85eb-0e9f9afc50e9-1788452650\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 149735\r\ncf-cache-status: HIT\r\ncf-ray: a3646210cf5c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=71.574, imageryFetch;dur=71.248, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143,"size_decoded":1329,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"126341613693e75d3dbfd6e70737189e","sha1":"6f1432a01636cb47164b2d85a9c1c7c46b3f1dca","sha256":"e755f5d47d9df8ef9f70d2bd058edfec8588e3aa1cac147c4a6434d5123221f1","sha512":"fb535fc4265e1f3feefda07f0c7406e1c7a18fe40af79a7d0846f0bc8e4e23d746b3afa67e7756ef0161848ca342ca59584657dd95350c0a333e596a449ad21e","ssdeep":"","tlshash":"4fc02bfecc706cf1d4e01cf8431103264681218cf36e0558600c452802338830f1e824","first_seen":"2026-09-03T16:26:38.545552Z","last_seen":"2026-09-06T11:36:39.501452Z","times_seen":476,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/by.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.719Z","timestamp":1788602383719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/by.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1a2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 290525\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOVNQTU0%2BgeXYyEvvUf7J9y3B9HO2qp3NZsxbps13VD6eCfb6EwTR%2B%2BYRA72Z%2FAVTCSms4s0r0J6GdX3U8X%2FqNOoh%2Fvubk8VPppIuyaW9133TXmySqwwMkiJkMTgyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462023aee56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418,"size_decoded":1253,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"2e13d4a7e4f177e3fbdc32bc973e84cd","sha1":"1f7942d93593f831d9ecb3876ba044f059c3a93c","sha256":"4e980c20f56bca6204cdf0e541650d4cb2552e39af1b830c31be497412af6232","sha512":"318256951150c586f8c4625943db1f813baa772e6eec6a55cd3ac2b824cc2d5860c354aa3b5e770f5e46296a30bdd69e60bd640dc3ce96ee9e87284748d7c760","ssdeep":"","tlshash":"78e023f169c5fc30e282801786e483544bb48e1c238100412021cc863855099f2f87d7","first_seen":"2025-08-29T01:16:58.684468Z","last_seen":"2026-09-05T10:01:03.169085Z","times_seen":104,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/is.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.850Z","timestamp":1788602383850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/is.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-b9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXZ%2BU%2BhX3e3hAydrIgovkQi5bPQwfzHlVWymuD0eX6qYUnpm2q8RA%2B9qQoYvToJqXhDsFhSOWHVmLQ%2F4N6srcSWyDsXrTBk2a8dAd1aUKsKE1IJbInbdlnawfwWi1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462031b4756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 185\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185,"size_decoded":1015,"mime_type":"image/png","magic":"PNG image data, 80 x 58, 4-bit colormap, non-interlaced","md5":"7083992f2942e16da894b56d454e1216","sha1":"020830be1c17538ee65bc80b42f4e39a50c085b2","sha256":"c3c910c259f77d246b2159e5287520a28cc849672ba622a60f50734fd2b1699e","sha512":"61bad9b74547b4565f1e8c0b4bec97de1298d3a177e8dd1dad2e9780b90314a49482232d9830359f13d7f0ac0b66114ce0d1c6051afeb20a1ef81bb10a5d0079","ssdeep":"","tlshash":"8ac0c0c192000f34c2d1c83206442253b21192486a51411f584ce3ec2013c9b0000efe","first_seen":"2025-08-29T01:16:58.590069Z","last_seen":"2026-09-05T10:01:03.170104Z","times_seen":107,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/in.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.852Z","timestamp":1788602383852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/in.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-162\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2605684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyH5Pn2shIWraJgV1iMYiegkE8krXSc%2BPAg0HlcBhN7dPF09NDJmIP8OAoyfrniz5VKn7mjOb0GMT2xwNeknPGEK6YP9jDEm0Z3PxGsQddyKd38ZvxOy59CXF616lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462031b4956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354,"size_decoded":1180,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"f34fef4ec05dcb9bbadeb6611889f43f","sha1":"79d8b7df215745056ef0a2a8e4911ad1f5c4e1db","sha256":"fc3292a3ac5feb33759087d8968441965723068fa7cbbd12226b646b7ff83252","sha512":"a7b7570506b27f7e318ba644709617f24bbde39cf1c55352ccd602b6b87d3e91392156df6ce13289bcdab637df2febc40d294a2b89934882c8733c598462490e","ssdeep":"","tlshash":"09e0c0d2b1441d3c4c44ed2708424864ec13c3830ea1e242d43ff55af5f875448c2962","first_seen":"2025-08-29T01:16:58.560644Z","last_seen":"2026-09-05T10:01:03.171061Z","times_seen":144,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/zm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.154Z","timestamp":1788602384154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/zm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-124\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEPxeAunAALzZ%2Forf6mTGEWZe3frhcn2TX7qel3KWx8yiHPLxVkq3bmE0xUjNo7MvIiwSUj3Ugm1pup2OrYcY9rODokx0W0ACBjFx21%2F6vlnlYdz6xxyLz4hpKkULg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204fbe556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":292,"size_decoded":1119,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"cfd3a8c3cee07f790990487387f3e770","sha1":"aace14416c5637926a924d75871c57c88a4aeaf9","sha256":"daa4a37ffc444bc3bb7d4a0ad7e047d8e6aab6b1c5940dc8e9d6346b50f02919","sha512":"8ac60cf129a4721bba0c948dff06d6d3cda9e469fe2d6cc29665cb858683ccb5bf970b4877aff19e9ce01616f3955b2b1dd8180501a294cdb38a4871f01a5108","ssdeep":"","tlshash":"97e07db502404af4d11c32a94a50e2d0a5b561742a215168684380756a83158c0c02e7","first_seen":"2025-08-29T01:16:58.483676Z","last_seen":"2026-09-05T10:01:03.173542Z","times_seen":100,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zigpoll.com/static/js/main.js","fqdn":"cdn.zigpoll.com","domain":"zigpoll.com","tld":"com"},"ip":{"addr":"172.66.42.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.253Z","timestamp":1788602386253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zigpoll.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 23:40:43 GMT","end":"Thu, 03 Dec 2026 00:40:33 GMT"},"fingerprint":{"sha1":"62:28:93:82:80:D8:09:D9:61:8B:9B:60:17:E3:86:C0:64:A1:32:21","sha256":"D4:25:B9:46:F0:5B:5B:E7:34:A9:E9:7B:00:F3:17:EC:A4:E3:BB:6B:62:FC:E0:33:FC:80:B3:F7:6D:9C:E3:15"}}},"request":{"raw":"GET /static/js/main.js HTTP/1.1\r\nHost: cdn.zigpoll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 29 Aug 2026 13:41:44 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=60, must-revalidate\r\ncontent-encoding: gzip\r\netag: W/\"130454778b52a76852b2fb93139d5edb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 848885df111d513ff002f6c182e428d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: NoqeizzQpCuseb7qoHeSWmmqS5jG2lhWFi1DZnmghCFjwnbcygeh9g==\r\npriority: u=3,i=?0\r\nage: 51\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a36462121b205ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10682,"size_decoded":4562,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10680), with no line terminators","md5":"130454778b52a76852b2fb93139d5edb","sha1":"25c155fc075117bac9a09e6d1cc7ffa90ba76848","sha256":"8e11c5debc0ade0157bf0b590a2ad9a66141a35724f979c0dd07394f3b58066f","sha512":"b6613716a158a5c82762c5c38276b6ec673edbaafaefa94f0edfb206c99522043123bef93bb2fb0d003f7980127095fb2ec92ea9bfac3797b0fbeb76f54ba4dd","ssdeep":"96:l7JTz/az9S+91QRyz6dp89i5RbnOVg2rcnAks/4Zbjysq7cpBdLWM7pq7lwJgZxg:f4w+9Gj5DXZGspnFgHLF/AFjEgGi","tlshash":"6022529e30817ba123e2007e665f7702b3764656294c85815ab6d6c43d38e9bc3a2fda","first_seen":"2026-08-30T08:47:34.969908Z","last_seen":"2026-09-05T11:38:55.2522Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/pixel.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.trackcollect.com/metrics/vitals.html?hsj=1","date":"2026-09-05T09:59:46.836Z","timestamp":1788602386836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/pixel.js HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.trackcollect.com/metrics/vitals.html?hsj=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jf9kcL%2BktkaVMoLv3ZK%2BOXgFkS8WlwZAnRLt3%2BMVNAILKDexee%2FDQbvSL%2FG93BWUCfWkxRDlqVfhvPnwcEwK4NjxhY2MY27qLKRRRAw%2BA2o0Nlnu0VkFhqSI%2Be04XywcbWZOWnKJZw%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 00:43:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"c7ee05e948ae2e65f60478ac07a6a830\"\r\ncontent-encoding: zstd\r\ncf-ray: a3646215cc5856be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47396,"size_decoded":19825,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47396), with no line terminators","md5":"c7ee05e948ae2e65f60478ac07a6a830","sha1":"98e4e5632763f344c837534357d7e33051529c3a","sha256":"9c6b4e069cda7361ad6e346cd1ffe37cc45fdcc5ca89939e173a6cd6a2ad14b1","sha512":"09023275b55c19113bd1be107337f5201b314bd0899f3458c7d712235e13ef6d1336ffbf5cff9810d32f8665d0ebe29c3228b29c9e8a284c10c0aa0ce4512755","ssdeep":"768:F8ksCcTSHkWstlxKzda16M7tL4DGqcIfiY1+liRVUnaeVGwKK7xMFA9LyTn/Ce0n:m8HToli4g/tJHwM9AF","tlshash":"e923728072c5bd4227475b77332bb2e6f43a5ce9b08444cae004fc94f5ad616fae5ab1","first_seen":"2026-08-26T02:18:06.733506Z","last_seen":"2026-09-05T10:01:03.175001Z","times_seen":3,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/Untitled_design_19.png?crop=center\u0026height=32\u0026v=1769281187\u0026width=32","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.540Z","timestamp":1788602387540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/Untitled_design_19.png?crop=center\u0026height=32\u0026v=1769281187\u0026width=32 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEA0OhubqShFx7sec8KilNR35mkccEC9jBThgkhOKRIK1LPf4Zo53tkXvEdbkfGkB6RDWz6zXzk05XoDc1XkntLKNK3Y2Z0_ad5_7I4gJYx6L8ShpbCzV54xXUURZsdwgfVCLIEEPxa27aUaQsg5v5-noSBRNq0V0lVEDKxKBYi5QfzTdpkENTAKI-MVkGC1JBIPlWMw-YX1uQYs9B8QKJqElehvEdcI56pBac4KyoySe3pD31Mh3jYA589CODWuXsfPhZJSCyzl7ISIK-ttyB8eOawmtryssPqGRMkfqIa8V9HQ5RxhppQBqhFPeAkGstNLYPywi9sYryft0ifsUhWhxUAdgrtJwc-EV3jVdWE6fqy-HfPEdAONEZ7RwU4rKqFQqSXBSIejF9bY96nopulj-xPP_bTdQbRKuiEENXs8O94Tf5jQp6kE-4NkL2DY_XP3RgsHZN2oAVN5b6cZswkUaSqHXqG9CdxWVX9WGZnaiAd9NNTIr404HNJd5tBSnUMfw:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1434\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Tue, 01 Sep 2026 19:04:19 GMT\r\nage: 9663363\r\nsource-length: 7642321\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XD27ajc0iIj8LRt26kzs4N60NBCXOnEqJRYMeG9uzacXzX0b8eQWO7OC9C1CzRidf8psJ7JwIoeyM%2FulvEhJ11eE5fQZWl%2BWguFquake%2FLz3fpKvPFSyK5ioqzsRirA%3D\"}]}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\ncf-cache-status: HIT\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 2ba35242-1739-4d57-842d-a19f3834cbac-1778939023\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=6,i=?0\r\ncf-ray: a364621a2d1c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=607.602, imageryFetch;dur=210.226, imageryProcess;dur=394.993;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":2668,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"016fd17e38c842d7871cddcb3302cc5b","sha1":"39c01f54d37bdeea36b74c5fda7dad4c94cb8a6f","sha256":"433b98127032448ec1915fd1a04c01638300b85f884e73d694d52e4f57af81d3","sha512":"1a611cc01643a5d32c9c1c0dfe76ac9490647a68e1a11b1787f3fa5838e50bdc914842740241c7c39860fd9f4bc6c0c3d654aeb0c1e7266429a828541b5f6536","ssdeep":"","tlshash":"c92195f7a7b00f94c19923bde8e25f05d3b67a65474aceda3301424e2b60ec26db10c9","first_seen":"2026-02-01T05:25:19.707726Z","last_seen":"2026-09-05T10:01:03.175729Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.748Z","timestamp":1788602383748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-14e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPkmE3U4TdpYxfJi%2BzaUokIqIxpsqqzry6w%2FPwZLJmdWOuIfAPyv7U4gN%2Bi5JtCXnYxM0g7Vrae5Wv1wHORs3v1JC0wpQhM2uhOtf0pHyJ6e8ii%2BJJ6heJUIXrl30Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334,"size_decoded":1165,"mime_type":"image/png","magic":"PNG image data, 80 x 47, 8-bit colormap, non-interlaced","md5":"8b0f81958594d06c3ad77c0dcf20100b","sha1":"47ed3a638d1870e2113f1e3fa48c0ad7d5696afb","sha256":"aee4766f9fe89db9ac48e1d0b2645c800fe1026026e19a99a455f1a2b339bb43","sha512":"7cf2c4ce211864bc5db1b963e5024b0c019767a45fb416c8b9070a1def628ff72b455f1016fca2f549ba0d6aa739b808f54a08b20e2686f649fd5cc6f52cd7de","ssdeep":"","tlshash":"78e028dd48b55c16cc14d15ed6414023cf36014c4343ce705047f81f411e61530441ce","first_seen":"2025-08-29T01:16:58.442398Z","last_seen":"2026-09-05T10:01:03.176784Z","times_seen":101,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/it.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.860Z","timestamp":1788602383860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/it.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2197131\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvcKPjNE5Clugubi5%2B57X%2B%2BRoAwqsE5geWsBWMVmF39ZHyMtLTT%2B7jlVbzBvioWKJ92hjaM0G3AsGiDJaDLLE9TG3ky88pYU6%2FUgUbU1ESYgB8YYTgIclEWvAdOhlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122,"size_decoded":955,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"c7c7b696ee165120b3a3840fd561fe0b","sha1":"32dc5c05521fdbed4f78296f1ca49f4ba3614cfd","sha256":"655b1b31b9a3d3b6f659863e6ffebedaf8810e5e97f12fea687e9ede6d298c3d","sha512":"4e8fba45f4f8deb8913198c277d2583f03088f5d2a7b820862140bef9b7a35304859bd24cdf7df0d1b18dafbd2cf4775edea6dd26eb2eb4cfb266e17b59271da","ssdeep":"","tlshash":"44b092e285541e35e786a9bb81a8d6919db6539d226ec3d92c8b826d02082a46184592","first_seen":"2025-07-08T00:55:32.440497Z","last_seen":"2026-09-05T10:01:03.177695Z","times_seen":272,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/st.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.998Z","timestamp":1788602383998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/st.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-156\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2611671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhHvmiv7k2pqHmuOOAa0Qp2m9MsohjT%2FnH%2F6gq2k9f3nt3XwciDjMrzq4CHmxJ1alFyFegz7wMkoOsz2JPRH62jWen3HwJvIUcdxQsiGWEL5xqqLuT6dCbV43rOhfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203fba356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342,"size_decoded":1170,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"3c27d392330463f2d3672298922650cc","sha1":"174cd1c92b4da38f040521d2e22637bb94e20a8c","sha256":"fbcfe87d46cdfdf7147d5987503aa4fb3fbfc844f5420fe947ddbe2166c79187","sha512":"08b8ee62884d34f66c537972df19bb552be1e7422365b706c14387bf2251eddb800705e9205e62f074ac6a6fe1624398f9ec3fb0dcf36640d880fe84eabac846","ssdeep":"","tlshash":"6ee0c0c0fb455c1ec41b41f1d47ba540e4cac805073401d50a330cd5663560d948cb80","first_seen":"2025-08-29T01:16:58.656245Z","last_seen":"2026-09-05T10:01:03.178182Z","times_seen":99,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.useEventListener_BEs6MAnZ.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.045Z","timestamp":1788602386045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.useEventListener_BEs6MAnZ.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 708\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Sep 2026 16:24:10 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.useEventListener_BEs6MAnZ.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGL6n47y0sZGPnEuPdYzu%2Ff%2Fp6M8FLjYwBNyQx9loErz096M845IFbnw6THIl%2FC%2BQ3rQuBVfx3iqqfMljyScnqkkTz5l7S6Gp7%2FZ54g70pApVDDKkQ7l64oS9BzNxsSdWQ%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 5a45dad5-b24c-427d-ada6-a13cbdb491b9-1788452650\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 149735\r\ncf-cache-status: HIT\r\ncf-ray: a3646210cf602678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=113.619, imageryFetch;dur=113.174, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1416,"size_decoded":1932,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1351)","md5":"f5c8078b7aaa7c3f95749f1a0667b8a4","sha1":"a5602a1c6f0626fe3b1f19c92091258615c48d28","sha256":"ade4d2428a5bc88e13897712298a2869b46df60d4bb133a0aaed8798ff5bdbee","sha512":"c6a84622b26a28f9d162ffa985254cb873989f7b009bdbf849bd494c351e32fe5dfb615e5cf03a6144b9f11daa4274946e393ef5ca549cc78fb7f71de4bebb1b","ssdeep":"","tlshash":"472196e74e841875006b4df2e25a3210173931eab1990496b47d0c152f3adcb82bbb2f","first_seen":"2026-09-03T16:26:38.547117Z","last_seen":"2026-09-06T11:36:39.564596Z","times_seen":472,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/.well-known/shopify/monorail/unstable/produce_batch","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.109Z","timestamp":1788602386109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"POST /.well-known/shopify/monorail/unstable/produce_batch HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 438\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":438,"data":"{\"metadata\":{\"event_sent_at_ms\":1788602383688},\"events\":[{\"schema_id\":\"web_pixels_manager_load/3.3\",\"payload\":{\"version\":\"80079e4cw22952a98p55856082md4f1b6b4\",\"bundle_target\":\"modern\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"status\":\"setup-started\",\"surface\":\"storefront-renderer\",\"shop_id\":79356199133},\"metadata\":{\"event_created_at_ms\":1788602383688}}]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-allow-methods: OPTIONS,POST\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-max-age: 86400\r\nx-request-id: 93a2f271-bc63-4c57-a688-5c65174ed2fa\r\nx-robots-tag: noindex\r\nx-shopify-location: us-east\r\nx-download-options: noopen\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0CM%2B5DluTpGj45HJUA9ukJbSiUGZ82LMxWPi4a46Lau5RGV7LzMNW9df9NSdqpcswrB9e1Hs30YKvYrZKKYg3Pwng%2FrawmNr0R9GGs6CwQ3C6%2Fgbi6vzneLcofFgD9kwSdCXjJ0IHZfYLSQOBg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a36462112c4c569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3403,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/web-pixels@80079e4cw22952a98p55856082md4f1b6b4/app/web-pixel-2194800861@a3321ca85cf5aaf6b57585fcd8d67b3a~2/pixel.modern.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.519Z","timestamp":1788602386519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /web-pixels@80079e4cw22952a98p55856082md4f1b6b4/app/web-pixel-2194800861@a3321ca85cf5aaf6b57585fcd8d67b3a~2/pixel.modern.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding,Accept, Sec-Fetch-Site\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\nage: 125364\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=31536000, public\r\ncdn-cache-control: max-age=31536000, public\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=7889238\r\nx-request-id: 4368181c-e5bf-4a12-8674-aa0c18f1fa41-1788477021\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncontent-security-policy: frame-ancestors 'self'; report-uri /csp-report?source%5Baction%5D=web_pixel_javascript_response\u0026source%5Bapp%5D=Shopify\u0026source%5Bcontroller%5D=web_pixels\u0026source%5Bsection%5D=services\u0026source%5Buuid%5D=4368181c-e5bf-4a12-8674-aa0c18f1fa41-1788477021; report-to shopify-csp\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nreporting-endpoints: shopify-csp=\"/csp-report?source%5Baction%5D=web_pixel_javascript_response\u0026source%5Bapp%5D=Shopify\u0026source%5Bcontroller%5D=web_pixels\u0026source%5Bsection%5D=services\u0026source%5Buuid%5D=4368181c-e5bf-4a12-8674-aa0c18f1fa41-1788477021\"\r\nlast-modified: Fri, 04 Sep 2026 01:18:04 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FR79LT%2FsLwJc4tLvJGdKIswT16xVAiVr9fYymx46LCGCzfSTJe8EnDA70a3%2BUwgcZb2NjOWSmhfr4Lc84jgC3hfQ7Imo3GSXRYQs0LKVcs4r2XA1JRkXtd40sA3sY60%3D\"}]}\r\nx-dc: gcp-europe-west1,gcp-us-central1,gcp-us-central1\r\ncf-ray: a3646213cf14569c-OSL\r\nserver-timing: processing;dur=31, verdict_flag_enabled;desc=\"count=15\";dur=0.757, _y;desc=\"09a9e673-5128-4611-a75d-da9655c5627d\", _s;desc=\"95de5e46-1991-4db0-abe0-6f8e622cc3ce\", _cmp;desc=\"3.AMPS_KWKU___GtEICtQRR9CyUxYBN75beg\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18772,"size_decoded":7088,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18700)","md5":"52366b5c2b279dc971aed7fe5f0c4d38","sha1":"a8dc3afa596776c5404a299b5732860a7e22d8ea","sha256":"88f7c196f563b9a96c167a697712a79faf894f555edc53a5c244273de7df6e9c","sha512":"d4f8512c12f41845c3197bb33198e2b0058654db78d044770f5234b5f4237bc48ca1f2bc8b81a4e8a236933decd1b23aec5669b61f6788f19f3bc7d3ff5e0477","ssdeep":"192:FODduW0VNuQa9YDF8iwi2pZsvizOdGazmbmZaf61+Kli5uVxq8mvR5fv5eK/KQgb:FODfx+4PpcizczaLf3GyXRx/9SF","tlshash":"06820d4ce07c20a1328aee9ce8770b77926d71936155f8f4b1bb5f381394b4993e2936","first_seen":"2026-08-27T21:08:13.76091Z","last_seen":"2026-09-06T12:33:47.713346Z","times_seen":1072,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/services/javascripts/currencies.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.948Z","timestamp":1788602386948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /services/javascripts/currencies.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store\r\nset-cookie: _shopify_essential=:AaBxAnriAAEA0OhubqShFx7sec8KilNR35mkccEC9jBThgkhOKRIK1LPf4Zo53tkXvEdbkfGkB6RDWz6zXzk05XoDc1XkntLKNK3Y2Z0_ad5_7I4gJYx6L8ShpbCzV54xXUURZsdwgfVCLIEEPxa27aUaQsg5v5-noSBRNq0V0lVEDKxKBYi5QfzTdpkENTAKI-MVkGC1JBIPlWMw-YX1uQYs9B8QKJqElehvEdcI56pBac4KyoySe3pD31Mh3jYA589CODWuXsfPhZJSCyzl7ISIK-ttyB8eOawmtryssPqGRMkfqIa8V9HQ5RxhppQBqhFPeAkGstNLYPywi9sYryft0ifsUhWhxUAdgrtJwc-EV3jVdWE6fqy-HfPEdAONEZ7RwU4rKqFQqSXBSIejF9bY96nopulj-xPP_bTdQbRKuiEENXs8O94Tf5jQp6kE-4NkL2DY_XP3RgsHZN2oAVN5b6cZswkUaSqHXqG9CdxWVX9WGZnaiAd9NNTIr404HNJd5tBSnUMfw:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pke64TqaZFO0zIxG5UDQg2Jp8NnMg87l3fz6Cx6egFZ7HCgEt%2FQbkUUvxgevfiWKF3JQ4K%2FB7iDNeuszX555%2BbMY2TscantbBG2gv%2FrZiK4LIusE2UAx2wSvx7A6eKQ%3D\"}]}\r\nx-dc: gcp-europe-west4,gcp-us-central1,gcp-us-central1\r\nx-request-id: 2ea96a1a-e16c-4bf9-83f6-061ff940583e-1788602386\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a364621679b9569c-OSL\r\nserver-timing: processing;dur=21, verdict_flag_enabled;desc=\"count=8\";dur=0.39, _y;desc=\"00000000-0000-0000-5000-000000000000\", _s;desc=\"00000000-0000-0000-5000-000000000000\", _cmp;desc=\"3s.amp_NO02_t__VMd-tVneRiqZSstfYtRzPQ\", cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_shopify_essential","value":":AaBxAnriAAEA0OhubqShFx7sec8KilNR35mkccEC9jBThgkhOKRIK1LPf4Zo53tkXvEdbkfGkB6RDWz6zXzk05XoDc1XkntLKNK3Y2Z0_ad5_7I4gJYx6L8ShpbCzV54xXUURZsdwgfVCLIEEPxa27aUaQsg5v5-noSBRNq0V0lVEDKxKBYi5QfzTdpkENTAKI-MVkGC1JBIPlWMw-YX1uQYs9B8QKJqElehvEdcI56pBac4KyoySe3pD31Mh3jYA589CODWuXsfPhZJSCyzl7ISIK-ttyB8eOawmtryssPqGRMkfqIa8V9HQ5RxhppQBqhFPeAkGstNLYPywi9sYryft0ifsUhWhxUAdgrtJwc-EV3jVdWE6fqy-HfPEdAONEZ7RwU4rKqFQqSXBSIejF9bY96nopulj-xPP_bTdQbRKuiEENXs8O94Tf5jQp6kE-4NkL2DY_XP3RgsHZN2oAVN5b6cZswkUaSqHXqG9CdxWVX9WGZnaiAd9NNTIr404HNJd5tBSnUMfw:","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_shopify_essential=:AaBxAnriAAEA0OhubqShFx7sec8KilNR35mkccEC9jBThgkhOKRIK1LPf4Zo53tkXvEdbkfGkB6RDWz6zXzk05XoDc1XkntLKNK3Y2Z0_ad5_7I4gJYx6L8ShpbCzV54xXUURZsdwgfVCLIEEPxa27aUaQsg5v5-noSBRNq0V0lVEDKxKBYi5QfzTdpkENTAKI-MVkGC1JBIPlWMw-YX1uQYs9B8QKJqElehvEdcI56pBac4KyoySe3pD31Mh3jYA589CODWuXsfPhZJSCyzl7ISIK-ttyB8eOawmtryssPqGRMkfqIa8V9HQ5RxhppQBqhFPeAkGstNLYPywi9sYryft0ifsUhWhxUAdgrtJwc-EV3jVdWE6fqy-HfPEdAONEZ7RwU4rKqFQqSXBSIejF9bY96nopulj-xPP_bTdQbRKuiEENXs8O94Tf5jQp6kE-4NkL2DY_XP3RgsHZN2oAVN5b6cZswkUaSqHXqG9CdxWVX9WGZnaiAd9NNTIr404HNJd5tBSnUMfw:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3098,"size_decoded":3352,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2976)","md5":"9af0e15d9821f4690b442882d7d0829d","sha1":"79c84e0cb4e09a0526930349e3ff2a0e661a553a","sha256":"598197d0a59dc835206bf1cd320cae6d323a29abc516541d5bfbcd478a072128","sha512":"b7406deed99ad1646a5d48280a0134159fc861530294961dd1f0d6ea406c151892367b1ff11015628c63abe46112f9c688d705472f475a25a2d3247b6aa104ed","ssdeep":"","tlshash":"135151f0cae642e8c2d6f1901fa37479be52344fa0d9ee57d481cc91f88a0d0b31e499","first_seen":"2026-09-04T12:20:05.711464Z","last_seen":"2026-09-05T10:01:03.181477Z","times_seen":6,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/pixelate.js?api=91b9cec4-5d97-48cb-bf9b-5c786bbab919\u0026config=3","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.529Z","timestamp":1788602383529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/pixelate.js?api=91b9cec4-5d97-48cb-bf9b-5c786bbab919\u0026config=3 HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrspgT32%2Bh0sf7Qjm57vczjt%2FVVdbTZbdMzQGQp4%2FyPfHPdlS2ATRfMaOeyTZvjV0e5aSYzbywFNatkiv7jk7CCUIFq9vUy1WQe57I6J2ASBQvE75fBCsMOp84vHMFvWM2XDMzz9lA%3D%3D\"}]}\r\nlast-modified: Wed, 05 Aug 2026 16:42:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 5997\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"8ffd90551c64d94adb7bde00d59f695a\"\r\ncontent-encoding: zstd\r\ncf-ray: a36462014bdd56be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12077,"size_decoded":5795,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12077), with no line terminators","md5":"8ffd90551c64d94adb7bde00d59f695a","sha1":"f57d22d18967c8d30c1639b5aac480ecfff8cea1","sha256":"60b542ac38b8335f46a07b15d49e0d847eef47a11170c64684047531b5b934cd","sha512":"3ffc51efc107654583dc64a17bac1c363ff29a569bfa43bb37058f13010fd6c5e18caf78067cc1237d65fcb83f636ab9145bb74141a10ca3bbc6ab16bc1c98fb","ssdeep":"192:A1O1OO7dqhYsxfdxjsse0f695l3gbPIUWXCfHLkRT/iKW73yf4hB1Kx3bjv68GZJ:Nt7Ays9dxjss3f695l3g7XWXCfHL0iKU","tlshash":"90424381bbc1b8816247d7777b3ba1e5f02e0dd536c8549be204bce4f9e8401f9a4a74","first_seen":"2026-08-23T04:28:54.651137Z","last_seen":"2026-09-05T10:01:03.182428Z","times_seen":5,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":16,"connect":13,"send":0,"wait":41,"receive":-1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/fonts/poppins/poppins_n6.aa29d4918bc243723d56b59572e18228ed0786f6.woff2","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.561Z","timestamp":1788602383561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/fonts/poppins/poppins_n6.aa29d4918bc243723d56b59572e18228ed0786f6.woff2 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9860\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2c%2B2LXMiNFD4eEUPe%2FGNbaddEWOju8qzCFkIDXNMeDzIkc3fh9Zlcgeq06WB1Mu%2BHKWpn68VZyjONMGPgtNyGxndcX4Pm0RQ0jXuvDV2go128U6eokeTrOk2pwcZJpcG2aUEmbJF\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 02:54:48 GMT\r\nage: 2776458\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-fonts\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 0c2c6a98-261c-4abd-adcb-23d6c72125e2-1785825924\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462014d76569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=353.048, imageryFetch;dur=107.618, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9860,"size_decoded":11336,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9860, version 4.262","md5":"2161b540499d808fc67c7b1b3ad3d660","sha1":"aa29d4918bc243723d56b59572e18228ed0786f6","sha256":"37abfe8614437b5371c74bc04682a154b479e9c84ef3aea5aea0bdd866b6e5cd","sha512":"ad40e219aeec9e47661ce7367dd31de1ce80fd6aa6223de2307566c2b42585f3a3c96fba231d7451ef69ffda52668f5bafad95f6272c69b08c85cf7d10ac0439","ssdeep":"192:6eJ50AiQFxdn/J/iB16vyP7qpFf5VVBXNWvi5angKnZq2XGAXsLHh:6/AiQZJw1WyjsFhV7NWv5gKnZTXpXsV","tlshash":"cb12bf4610fecc58f07f46bb4d04556ab1fa83f4667ad792c054e3d7b1ce892a17ac41","first_seen":"2025-07-09T20:39:11.563982Z","last_seen":"2026-09-06T04:49:11.464708Z","times_seen":5036,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ag.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.696Z","timestamp":1788602383696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ag.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2521806\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cJiPsKmsTDBpcH%2BMyPS0MRIPuUEjyrW%2BfA6eh5pg6a%2FT%2FQb%2BSQWgyu6wF5rB45cgnlOiMRaBlRt%2BQOuBXMp%2F%2BYLvGkZLtmobdkDEHVkrx5s7oqy7gTqMeunKl9IgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021adf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":708,"size_decoded":1548,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"1dd7e0d9774ea66e8a71d0675dfcd61b","sha1":"c5b76f44687976c13c4be6f904bc76bb6f85e8e5","sha256":"f61f04f1fc1707d15cc29741c5664955e40fcc43c019be70a6cd1a8a91d72352","sha512":"796778fac936410399a1925d124cd116d274bb2647c9675ae4e7d0cfd307900c8fd0b2a1d27833f4d859164f41ca2dc40d4ecc5dd69eeb0e751375a0483a9e26","ssdeep":"","tlshash":"a801d8ed8b15bd49c45050b68d07023cc3285be230f1222d8401f0dda82980f63ee30c","first_seen":"2025-08-29T01:16:58.704902Z","last_seen":"2026-09-05T10:01:03.183526Z","times_seen":101,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/aw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.702Z","timestamp":1788602383702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/aw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-10e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IP86uzvxZNwZcoQIIL2V2LtTI%2FvtRzayxNlOFIoh9iVOpDRSmvbGSDHqWd4V0GGJb3PjUjEdDx4%2Fbu6%2FJWKG3tnRvMMOQ329LgkWDn0B3hNuwqwY2tUx8fZpygYq8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462022ae456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270,"size_decoded":1099,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"bb5662016bcc1f8af8dc6a2844951175","sha1":"4c9d0cbb6b95f787b104777b9ab461caf5a42cf4","sha256":"17be250f8416b90f6f36ea02092ad14153fcbb05ee6c869ab4d668d697dbcfaf","sha512":"73a3c95e3f88a656e3decb36f35c450b450290c76b937fc20f39a849de5a01c1b7a56d1a61589adc8ab8b9ade2e21aac0a4e452d905d8fdab2ce1b04cfd4e51f","ssdeep":"","tlshash":"2dd02bc611f8ae67eb03f2a1291606f5edb181640396910c2d1b917a5682074464474a","first_seen":"2025-08-29T01:16:58.582299Z","last_seen":"2026-09-05T10:01:03.184561Z","times_seen":97,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.765Z","timestamp":1788602383765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-136\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2F5vO5VIJ8BUSIVO2WmozF49CoIocMiUlxB0qp4TdlSbtMh3pJdTsH6ez%2F7QLu%2B4j9QI7gnNJWgdA4PGuIqzBGTLpLKFtylAvIQZe%2FMrdG2xXYR%2FjOafaOMhC%2FblLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462028b0d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 310\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":1145,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"07f13154cb48aed0a9ac592134ace182","sha1":"a51f611af504000f5939d0e8f3eec03ba21eea05","sha256":"cceaa431a52340bd23671dce72515891d648d2bfffaa182e5dfe1748a497396c","sha512":"f015d9028eb6c660e932465d5f037439007ff0d2541a59126314ffc4f66aa052cf23b98ee5453dd83bafe6c087c204898da8185d8be3cc299c20c7820e17155f","ssdeep":"","tlshash":"58e07df10388ced6b26cba26123842a7abe655a4071a013707510c2e5d35356388435f","first_seen":"2025-08-29T01:16:58.654673Z","last_seen":"2026-09-05T10:01:03.185746Z","times_seen":97,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ec.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.786Z","timestamp":1788602383786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ec.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5Bpd%2FOAqP1NJbFV4esMDV8k7WHmmzUWgyC0oCU4k0vvdBopb4z46Zzapxj4EDnLneOR%2BsoXKXR4BsA2QETY%2BObx%2FO4gDsSSdvvn09Hq73SuF1BUEt3hLIPZNQdm%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202ab1d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 933\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":933,"size_decoded":1766,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"bb6df093fe6f5176878629cfe333e244","sha1":"3434c6105664ae03d031dc8df080440e6fbd2f8d","sha256":"767a69f140ef4f9a28bdba99a149b53cf1768e6896893b58b3e3ac7a444a515e","sha512":"73c1d3f228e1143057ee1756873883e301290f89517931dccb3a899776416d9626bc508aed1cb6039dec588e76253ae2cace9e7f108c3c6645aad0206ef559d7","ssdeep":"","tlshash":"2111b7d77bfc50090849116a608aaa48deb1c34dd3d4802bd0737c09e4f869901ec704","first_seen":"2025-08-29T01:16:58.465203Z","last_seen":"2026-09-05T10:01:03.186708Z","times_seen":119,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/um.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.122Z","timestamp":1788602384122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/um.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1ae\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1632680\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akqArH0ftSEap5pwV6rTs3lDubKo9hGBc6LFIPvVvistH4vOD0rnNxj7UbUU9jqPqczGvX2pPKMlT1xGgxpWzNC0cK4tFAmNnZZNm4ImQTnLDwZty00VE8U1kwfwog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204cbd556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":1254,"mime_type":"image/png","magic":"PNG image data, 80 x 42, 8-bit colormap, non-interlaced","md5":"0534161a3d82678bd6153188af83ecf1","sha1":"7703ed22d52e1f6da00372e418a7f8eddbb7c565","sha256":"59ac434b97e6db8b4fcee5c8e1996995562747e76875625f0886f1936488b7c9","sha512":"194522c7dbda1e8967969f26574909448b3a7cca43660d40c9041b5768e226286ea527f9c34a34a7b5710aeb2eaaa45276f07b712b57cbb3a0688e01c2310ade","ssdeep":"","tlshash":"f7e0a375c3d049fb87ff292521074bc1b5832919d1e71b85734983512117ef0445dba6","first_seen":"2025-07-16T11:11:00.957382Z","last_seen":"2026-09-06T12:43:38.440432Z","times_seen":417,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/t/27/assets/base.css?v=72514207947921368001782994699","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.066Z","timestamp":1788602383066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/t/27/assets/base.css?v=72514207947921368001782994699 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/css\r\ncontent-length: 60891\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sat, 08 Aug 2026 20:27:07 GMT\r\nage: 2593261\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/s/files/1/0793/5619/9133/t/27/assets/base.css\u003e; rel=\"canonical\"\r\nserver-timing: imagery;dur=226.775, imageryFetch;dur=129.718\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KB4u8qB0jWKoFiISTat8%2FU6Ldz%2BQLDT7Qx4A4GZxvYanlvxkojDphsYb%2BGGw7dM%2BE8srrDjOQrWqaPvGwnzyGVzIm4Pwo5pSt0BdxR9TegFv2NM5Wd%2B%2FtLp6k6Oebp0%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 2bd95500-db55-41de-9d58-4bd2d667f647-1786009121\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\ncf-cache-status: HIT\r\ncf-ray: a36461fe2ef6569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415783,"size_decoded":62158,"mime_type":"text/css","magic":"ASCII text, with very long lines (65264)","md5":"dc033b6188c63f3dc8ad067b8e03485a","sha1":"085f18b0e6989857cfb044ba4f44f193fbc6945a","sha256":"0a7b5942e3e48103e9a01c5fa5bbbc7b5df1b96e25236f92764100ee8ce67cec","sha512":"c134a41ff1c6e12264b15bd71f7333193d30c51dcd7116a1c076a55470bbb033f50d95eacecc11b0db670e9dc916ebdd9b0897572068da0075e1fec83be5bfab","ssdeep":"12288:E2YEt9X/5WYnKAQHRcQNgPCeMZJFy3yd+7d+35xcz6SX6uDCSqTyoXvq8RDX:7YEt9X/MCKdNgPCeMZJFy3yd+7d+35xn","tlshash":"df94e950aa24103cde27a139b79aeb8cf764a400c75251e5f5c3516983ce3fa06f7ade","first_seen":"2025-11-29T08:37:50.535771Z","last_seen":"2026-09-05T10:01:03.18862Z","times_seen":232,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.974Z","timestamp":1788602383974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-169\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hn94KSHdfeHXXnLSdgykrZU%2B0N5oo9QMBbx1bonAdekMwGc2EusneXnUL67UD6%2BUCvzGpwbEedlUvrkaMEiglOMl1Y%2FN2yqqsILl5Pp%2Fet2ZAJpJpfDqX9NnBGyDLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 361\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361,"size_decoded":1192,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"14765e25e37222fcc79f1f547748e171","sha1":"faac877a0fbd248604104d64cf754176f4daf025","sha256":"5b7c11938c58bc8160d12f608dd0bc6acff113fe165c5c45b46ee1d5a4a1f71e","sha512":"6a01eec49e1418e1982a0fcb143380ea4b123055d0080118c6e36a2b8cb14a904ceb18e1cde24af8f1a6e92c162e14d2bb966080c163cb7dc7f066fce7262257","ssdeep":"","tlshash":"8ae0c0ddbe708928a1d3fce7659415217913759c2624418570f64db822251590a4cac3","first_seen":"2025-08-29T01:16:58.688468Z","last_seen":"2026-09-05T10:01:03.189182Z","times_seen":110,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.alia-prod.com/launcher/events/v2","fqdn":"backend.alia-prod.com","domain":"alia-prod.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.499Z","timestamp":1788602387499,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /launcher/events/v2 HTTP/1.1\r\nHost: backend.alia-prod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nx-alia-shop: igkqfc-ff.myshopify.com\r\nx-alia-jwt: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsYXN0VXNlcklEIjo3NDM2NjY2ODkwLCJpYXQiOjE3ODg2MDIzODd9.ucBMuo_YIwjw5Y9M8KED6KG5AMXS-lGfE9FXZfeMnDI\r\nReferer: https://tryrovina.com/\r\nContent-Length: 55\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":55,"data":"{\"flowID\":null,\"type\":\"session\",\"shouldRecordV2\":false}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/t/27/compiled_assets/scripts.js?v=179266921911920200511782994794","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.556Z","timestamp":1788602383556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/t/27/compiled_assets/scripts.js?v=179266921911920200511782994794 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 979\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 21 Aug 2026 20:20:25 GMT\r\nage: 2254625\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/s/files/1/0793/5619/9133/t/27/compiled_assets/scripts.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EBKM%2BeH8bbC1OG%2FqhfvZCQl2ziyyZOBZVDfVk5TQI8knn5l9eKZMbVtcWHe8ySI08UGz0wCro6Et63l%2F6TeKoBxoHf5ieLeQ9RFZJ8VKZ%2F1mOxsIfoDErqPZj%2F8EJT8%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: b15d4ca5-b336-4c78-ab5d-5c3fcd47613a-1786347758\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\ncf-cache-status: HIT\r\ncf-ray: a36462013d69569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=82.160, imageryFetch;dur=78.061, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3715,"size_decoded":2274,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3614)","md5":"85d661039202a2a4ed91777968212dbe","sha1":"0415ba2955dedbc3076759812d3cf3fcab49d835","sha256":"ad3ad3454e11fda721373b21a055fb970d99a128add2d85bf3137c9bc474ee1d","sha512":"a453bf94495f7842d2bfa0007fe6003467df7cbeb79360fd8554dc9cec0da605884ade7f364073b35b57420730fe13c28d4ab65844bb719760cc2ebd2f10ffe0","ssdeep":"","tlshash":"38712f5462193eb545ef84b3d0460f8076a678956612842d3b3cecff8ae4c11e3233f9","first_seen":"2026-09-05T10:01:03.18972Z","last_seen":"2026-09-05T10:01:03.18972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/az.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.710Z","timestamp":1788602383710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/az.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-106\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZpfA3Lb2HxSWHb0S4omFZs3dJFRr7NkMY4G%2Bv63gpjgZind%2FLl3Fe%2BqegSjX8TyVWFZWpoy1%2FgevEM2Mucf13ydx44flkKCqor5VhsdKJgOZwG1yCQVLG3uTW%2Favw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462022ae956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262,"size_decoded":1095,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a62c95707ac879773f81b7f5b9be3938","sha1":"91b995d5890aeb810b2f68d5ebd701833641e3d7","sha256":"cd60096c80f2a6ab9f9354949240746eec6b167f97f2fc64f14a9c1da3458f2b","sha512":"f5e2f1be251fe0222e0142e8134b2d231f292566937336a77608cd2baf8fd2b4772fe8712336255f1be6001fb1187b29c8b0714575e338cdb70924e2834a3492","ssdeep":"","tlshash":"d8d095c1594a3c3cc1d39c38c055955cc70570d4bc27639391d2fc37750059590c19dd","first_seen":"2025-08-29T01:16:58.617463Z","last_seen":"2026-09-05T10:01:03.190664Z","times_seen":110,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/eg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.787Z","timestamp":1788602383787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/eg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-123\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2271563\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCyxUgJyPpXnOED5LqhX6HwJr9cUYKlgoVFCQmsuSFll3UitPxQln%2FWGteMp3JhWiL0%2FhaRmsw5aVTyneFBAMZhwwvYg4dvBOB1u76HVO0w5tveWuULtJ5yDlCMHVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202ab1e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 291\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":1119,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"6fea70efbf07249f9bae2540318cc3ca","sha1":"c108c1e81fd8d559aae9ea4ef42f922cd5346fc4","sha256":"650c5df8ef5e0d1c2267b67caeac0fb8643a5fb4e55df3117e4aa8b1a5861a77","sha512":"12d1434c524f945688ed7dabb58618a0ff36e8b7afd17c0e40e650068cfdfba6aa3cb22202c367859764e85bdf39e4cc0a281f52e5683e402dae8c44a2c238c5","ssdeep":"","tlshash":"58d0e7f143817924bd5f711318c8d060b76692d87219d1f7c407403b75460014541516","first_seen":"2025-08-29T01:16:58.484552Z","last_seen":"2026-09-05T10:01:03.192063Z","times_seen":115,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ph.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.978Z","timestamp":1788602383978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ph.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-234\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 421356\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPCHHeKSbCelMv30vENW4tLxaNLOAusCgHtPsBNeVmUCIrAJGBEvsXYoFOE8tsrM6F%2BNC0Ijy%2BK%2F1xUqZT1HIk9WZRNdkRoJ689mWqyYMAy41D1JWbsWaO%2BOEu5lrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":564,"size_decoded":1395,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"e71c236c0e974c0609f898de5f869b33","sha1":"0e00fb77541da02effab9ecde3106a965e7ba6c3","sha256":"089e20ed35c6c16e3d28ced61045285b63c344e00620bf90376dbe9a12865d52","sha512":"e2a9ef6ec3b11d43157407b69102b57a8ee2f5516e629be187d01730e7c6e8b2bca205d03ddf1fa0d4d86fad3f1c7a71f247834e6afad978c7494e2c3b1af3d5","ssdeep":"","tlshash":"33f0e1e1df7a0c30d8b4e7eea7066112b49f27b28935225b61a049d6990950c58e095f","first_seen":"2025-07-08T00:55:32.454939Z","last_seen":"2026-09-05T10:01:03.192993Z","times_seen":112,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.118Z","timestamp":1788602384118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-563\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 359159\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4M3vZv2OeqL6W9NLf%2F9Fim5en61tACGM8OOfIG5%2BLiGVyFVPREPsYVETDEdaGIWpUlbwx4QBJIMZwJmuMp3POdBCLvTI5GaALkAVOztUIuiUAGPHEEbyQ3c9ZURnzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204bbd256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1379,"size_decoded":2207,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"c3d86d2cbdbe6e43e609272bb1bab877","sha1":"c5ab10067c0dfc031336b9ac9ba2a097af95c480","sha256":"2a7bd1aecf3009086f30543dff31fd19234400c653c9926d90dfd827a1bb7ef9","sha512":"542a716b819f4409869befadcdb922fb91e44a1218f88106684701e229211ad8d7a237fb83b87c39b8a18878ab5a331ffef24c242e340af695754a713234e3dd","ssdeep":"","tlshash":"a021b6b3b85988a2ab0c093448e14437aab32e2b8a201d611457d0da57b11af6fc6881","first_seen":"2025-08-29T01:16:58.587199Z","last_seen":"2026-09-05T10:01:03.193601Z","times_seen":97,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ad.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.690Z","timestamp":1788602383690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ad.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-258\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2615418\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMlQkPNQXfjNZKON6wUmMz6UBt15GH3rcSe0eY%2Fv%2Bs49g%2BtD2oyqpRkWoFLxSRuljJgz3Fqoq8N3O7tMLgxhpoJGQHPWzmnPFyxh6g9pXeU08u3GiH4UQkUKtWHy6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021ada56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":1430,"mime_type":"image/png","magic":"PNG image data, 80 x 56, 8-bit colormap, non-interlaced","md5":"249f91aff7b4c366df7b33c51780becc","sha1":"7cf4f36ca226aa678571d999ce0c68559c1debd3","sha256":"c817338716cb52f043776dd6391c09055a089d62692858c5a02b7074c458d8b6","sha512":"1a8965a10f16657dbcb7c5b8040b2b12e3d29db6023460d2e6bd3085df52c4adae7f6b96bfdfec0fcc3fcd6d71aa96a39e93b2ec4212f644d5da7ecaf6d69c06","ssdeep":"","tlshash":"fef041499764805fb10a60aa4e0c2784c14ac28a79db57158a4e6f33f69ab25638c888","first_seen":"2025-08-29T01:16:58.58121Z","last_seen":"2026-09-05T10:01:03.194581Z","times_seen":107,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ky.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.750Z","timestamp":1788602383750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ky.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3d1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2604272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFK70llHhULh9%2FlAARgM2%2BVzxSiVZxiAvKJhKtrEW1aGI32q8ZlegeXVJD1b3C5TQWKbq5ewFsiU8ODv5CBc43TeBG9LQJzpmBpukig%2Bgm6wb7U302JbnxFaJFaeCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 977\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":977,"size_decoded":1807,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a1605b9a8d15d67eb5e191367a904c6f","sha1":"680843a577900e66a45e62ceb360822f744ee776","sha256":"fb8985b4d7f6271a49316dacdb8bfc509e33e2eba9a212752d33601934219231","sha512":"1f2d2a0592aa1bcdc75036c6f42aa43bd27190d5185fbef915df2e088ba1f732eca2d47ecff2dd354649f09f9d5aea9cf1bb1bf0776fe8410355508b6b696b52","ssdeep":"","tlshash":"c01194eaab05643a980d76b579e5bac3bfd022091c444ad1a6380b32aaa9a1522613d1","first_seen":"2025-08-29T01:16:58.644502Z","last_seen":"2026-09-05T10:01:03.195561Z","times_seen":98,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.authorize_BuQdLYn9.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.044Z","timestamp":1788602386044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.authorize_BuQdLYn9.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 328\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nlast-modified: Wed, 26 Aug 2026 05:27:10 GMT\r\nage: 3085283\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.authorize_BuQdLYn9.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gi9EFv%2Blt2y0wLhwZteavFTb2TCNdeOcxhxXhwatLjGPXJdUYQZ1PKUVD0NeNulkpnXCzfVKlvupBiFiErM9g2jkaRowObBQrMawL5IX0nJ3AQJnjObjYLi5FdIM24EqzA%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: b7a7e668-cf59-4e78-b233-d647d3ffdb35-1785517102\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210cf5e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=42.009, imageryFetch;dur=41.597, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":1536,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (581)","md5":"e8bada1a48b9fce6c9182be78ebd9398","sha1":"0f9c55cab57a03c69358b4942c8cf2fda122d687","sha256":"8c8ee15e9443da7d8524a5f1ec8b1978bc7c63a891cce985c3da33e84b2fa652","sha512":"89628dbf4593283265ae53b826272724ac364c6ee1b68bb33e592370960af4a61db43e5856bf9587b0c6c1c6327afe226368572a673574494af7b230b358b22d","ssdeep":"","tlshash":"1ef049fa969824b487b218ac9197f41792267e3d3bec45e0d3204e944c31eeba434c1d","first_seen":"2026-07-31T17:05:34.173813Z","last_seen":"2026-09-06T11:36:39.54937Z","times_seen":8278,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-accessibility.avada.io/scripttag/sea-accessibility-styles.aae3b36095d8a921c3eb.213970.js?v=213970","fqdn":"cdn-accessibility.avada.io","domain":"avada.io","tld":"io"},"ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.564Z","timestamp":1788602387564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-accessibility.avada.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 16:09:19 GMT","end":"Thu, 22 Oct 2026 17:05:18 GMT"},"fingerprint":{"sha1":"96:21:05:71:CA:22:5E:9D:15:9B:F3:84:8E:00:80:50:AF:3B:17:CB","sha256":"E0:AE:C1:D4:8F:18:17:EB:0A:A9:80:81:6C:80:F5:0B:EC:2A:C0:72:FE:45:7F:1C:4E:AD:C7:AC:73:04:E5:22"}}},"request":{"raw":"GET /scripttag/sea-accessibility-styles.aae3b36095d8a921c3eb.213970.js?v=213970 HTTP/1.1\r\nHost: cdn-accessibility.avada.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3PgmftN7oBJgzT3YkcIFc71vqC%2FP4gTaseRbJAY48COvL8mXFVG3E3Sr7mztJkVs8GpE4Xop%2FdWqgISrajpbbhPqML%2BHUVSJ8grXB7nut8P6VcFovppAu0KrftnKVgzGG71gYWQDhMcnstZ7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"7a5276351cce8969fe8a3c046d82ddf1\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15552000\r\nserver: cloudflare\r\nage: 93992\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a364621a49091525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41809,"size_decoded":7832,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (41809), with no line terminators","md5":"29020f922a1eefa4184b5f06f4c46b52","sha1":"4b08de37319989eb6bca70eca39add1087fa3e25","sha256":"3d35cbb033dff7715a51124941d37ecca3d4f31c770e06ccd62088bad76fd756","sha512":"a2bdbec8404b1670486ef7a3447f79043315801fa3ba47fadac0dc2c6a27b1a6f8ab1912fbbed3b0f4a618b931118041014563b91547b3f378640eb581b84b7f","ssdeep":"384:p5fUsavT8JvamCTgW1BhZ9jh1M2Gdu+7D/8/ZZ7CG3RTx:p5GvydUlvhZ9jjt/ZRRd","tlshash":"e0139983f2d82127511e462e1342b6e83724bd70a7314b5fad8673a947879e316e2b1f","first_seen":"2026-05-19T00:37:20.659028Z","last_seen":"2026-09-05T10:01:03.197113Z","times_seen":24,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.tryrovina.com/KIT53949","fqdn":"www.tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.74","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T09:59:42.418Z","timestamp":1788602382418,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /KIT53949 HTTP/1.1\r\nHost: www.tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 05 Sep 2026 09:59:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 167\r\nConnection: keep-alive\r\nLocation: https://www.tryrovina.com/KIT53949\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzRzXRM9v09je0AKx12AVWXuYl%2FUP6J8j6vxEtaThF0TKUk20jfVj6uiIyZ4nV1PX8N32XDjsM8DqfWHX1jG%2FBBbVi4vPk4XL%2FPaekLusUOY5n00R%2FrZunmkUghisnKtKUzR\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Download-Options: noopen\r\nServer: cloudflare\r\nCF-RAY: a36461fa6fccdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":47,"connect":1,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/UHvXw4/klaviyo.js?company_id=UHvXw4","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.130.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.574Z","timestamp":1788602383574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:47:57 GMT","end":"Fri, 27 Nov 2026 19:47:56 GMT"},"fingerprint":{"sha1":"9B:87:51:BB:39:47:9C:19:5F:25:BD:BE:8D:B5:E9:FC:3E:0C:52:3B","sha256":"77:36:E3:14:FB:62:C0:27:7D:0A:A4:28:C3:29:8E:36:88:6B:8A:A9:D6:65:84:DC:89:11:AA:C5:4C:08:8F:46"}}},"request":{"raw":"GET /onsite/js/UHvXw4/klaviyo.js?company_id=UHvXw4 HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: \r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nallow: GET, OPTIONS\r\ncache-control: max-age=1, stale-while-revalidate=10800, stale-if-error=86400\r\ncontent-language: en-us\r\ncontent-security-policy: object-src 'none'; base-uri 'none'; frame-ancestors 'self' login.bigcommerce.com *.mybigcommerce.com admin.shopify.com klaviyo.file.force.com klaviyo.lightning.force.com klaviyo.my.salesforce.com; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval'; report-uri /csp/\r\ncontent-type: application/javascript\r\netag: \"b0699e84e6591f38668eb939f08b2238\"\r\nserver: nginx\r\nx-klaviyo-hash: build-preview/commit-505351e455e354dc2a53d6496a7d415f1e0739ee/\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 81\r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\nx-served-by: cache-lga21950-LGA, cache-bma-essb1270077-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 43, 0\r\nx-timer: S1788602388.560173,VS0,VE100\r\nvary: Accept-Encoding, Accept-Language, Cookie, Origin\r\ncontent-length: 1586\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4368,"size_decoded":2727,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4367)","md5":"b0699e84e6591f38668eb939f08b2238","sha1":"c17a8f2437877b0bf55503a3120c7a6eada14960","sha256":"141d09f3d030d46ce070f377a4bceae78360fe9be3ca43488689a5209e8f6b91","sha512":"d4c2738a24b8a366b5365056967755819996c274e799b5f5c43676e557782a064aab5aa61ddf0e4641fc4b924da5cab56f3ae2062f59a9c884e471c6a1c8e1df","ssdeep":"96:1WxFvA6PfiqcKcnhWTQ7FrZNJ1Mwa4NciZt7bciZt7jzuWcC6VsuobRx:sxFvbP63vhoQpzJ6wa4NciZxciZxzuWz","tlshash":"6b91da6a7ae1c07f2d4278c5bf3b5d7da2ad8715f0458079f2268c5826c0927af7bc80","first_seen":"2026-09-05T10:01:03.198181Z","last_seen":"2026-09-05T10:01:03.198181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":110,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/lr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.912Z","timestamp":1788602383912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/lr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-116\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTqVG4ghnE77baV4GoQP%2Ff8sz%2Fb1OpRBdzzjM%2B3%2FMvFklq7%2BGkNViZKMk9BvsAveVN%2FOdhDqQQ33ItIwHocltbzaUsONPi%2BkVH047CmJuauqdrFj%2BcMpVqUZftQmlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462037b6556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 278\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":1117,"mime_type":"image/png","magic":"PNG image data, 80 x 42, 8-bit colormap, non-interlaced","md5":"01e2d33846e721724e7aabee455af35e","sha1":"5f0473236fac6e3be0b80ef185ab49c37f24ebee","sha256":"2324a3c7b6eb1a1e53a882bd1d5cf692b72efbba7a8670a6fa340b9f13994e73","sha512":"8e36ac5371c5a66a575ece5f287d2d69a7511ee4bb43280450b407c089dd1a476820d5d5ea9f144371a7275d17a28ecb01d41ba4d70acf62a6de4f863558762b","ssdeep":"","tlshash":"70d0ebf014601c3ec8facace848040be7c33239b9a10203a4283812857a48648c90042","first_seen":"2025-08-29T01:16:58.472717Z","last_seen":"2026-09-05T10:01:03.199141Z","times_seen":97,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.004Z","timestamp":1788602384004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dm50hyRt8CWf2YNqdaN5HTyclTFl8AeqBvKVP0evpL4aZqK4oeYx36liDhkPAgcAWyorFRJ8dWoqT1%2Bjm4AQtLw9bXC%2FMo21r9gdqOqXyKXxMKm4BtY65aRAD88a3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462040ba856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127,"size_decoded":953,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"359d05fc4fdeae5d922d3bfb4ccc52a7","sha1":"c4ae073087b19d664a9360e72f27ae721d86682a","sha256":"9aa703af0a2b94e2de448da95469fee21856e89f81f26646fb87b4ca6a7d852d","sha512":"b5fba6410df8e2eaa44118965da84d08784b9e18f5e63eae5fe23ff75826fe69579d40193e92ec6aba0faf3de9a1806857aa994866f9dbd1fbd5f107f7a4354b","ssdeep":"","tlshash":"93b02bc152220e34f34ae43b418808c8981801013f340202108b41bc0501158904000a","first_seen":"2025-08-29T01:16:58.51586Z","last_seen":"2026-09-05T10:01:03.200133Z","times_seen":100,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ug.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.123Z","timestamp":1788602384123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ug.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7Cd1J9X%2B0BVZRsSd%2BK%2FBdeFBVPful7EMLEUiYWYi9OR%2BVJOmE6xGPOh9ThGmyYgzSrd8uPaWKC2yqmyK%2B095Z%2BMoZi60BKcbgFZ2K1%2F5dd7aI7EvWaffH7I8Ne2ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204cbd656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":1289,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"79a642025c18283a7c48202d5c5aba00","sha1":"1470d1cd3cd1a60cc7abfa0cb2a09f1aa3ff8f21","sha256":"346730a1053373109240fea54b23c5f499e99321dc087c75f7c2f6affdaa9824","sha512":"551fbc3efd9f08b69efe6afd64c81b50fc0479140220f17abecffbd61e6fb1a7c636d10ca2dbe6fbca280a3010043bd5000326890b93f28097b862b91f405dfc","ssdeep":"","tlshash":"bdf0b3fdb128edaf8b8056f2113de284ecb3cb838f20000722735d0d860e24ab780c05","first_seen":"2025-08-29T01:16:58.552344Z","last_seen":"2026-09-05T10:01:03.201121Z","times_seen":101,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/apps/buckscc/sdk.min.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.261Z","timestamp":1788602386261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /apps/buckscc/sdk.min.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: a36462122d2b569c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 243848\r\ncache-control: public, max-age=1800\r\ncontent-encoding: gzip\r\netag: W/\"197ba-1a0624dc8e0\"\r\nlast-modified: Wed, 02 Sep 2026 13:27:40 GMT\r\nvary: Accept-Encoding\r\nx-download-options: noopen\r\nx-do-app-origin: b13c3366-9379-412f-a7c4-e7d8e37b3ceb\r\nx-do-orig-status: 200\r\nx-request-id: 3deee4c8-7b36-417e-9377-f1ed20a047e7-1788602386\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BKpDtg%2FrHj%2FiNfB64A367fwQ5kDZuf1hbCjTjrQLODxI43KtsnoPgkGklmWahw%2F6sbKVtjjKLcHa%2BxzGLWfhTFuAuy7qWfXju780NMETOK5VxTlOpArC4bcYxtD4SQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104378,"size_decoded":29980,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65451)","md5":"9ca83e242347e809123dd6a1d855a846","sha1":"f8981c57a99f1d0ad04ae0a4d54859687e4f46dd","sha256":"7fb89d82dcef389534466022a37c4875cec0434bdd85d6375a72ff9a1ea06c6b","sha512":"7f79beadb382161eca61f9818ad9595795b3b55da80b0195090e337f7c141b557f6a517305d997d5e9df487ce0a75438565689ce10be90afff36129ed3983de0","ssdeep":"1536:alyM5rWaP69soB/P2CebtZNUU4YIH5JV2TIN2dfEn7:0WaPssoB/P6K","tlshash":"16a3a681f852197f95e7e0f178df2247763bbb18e84909d6d48eb5b823908c6c112e7b","first_seen":"2026-08-09T11:10:50.088246Z","last_seen":"2026-09-06T03:38:03.565619Z","times_seen":18,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.tracking.vaudit.com/track","fqdn":"pixel.tracking.vaudit.com","domain":"vaudit.com","tld":"com"},"ip":{"addr":"34.36.32.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.164Z","timestamp":1788602387164,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /track HTTP/1.1\r\nHost: pixel.tracking.vaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6786\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6786,"data":"{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"platform\":\"Linux x86_64\",\"screenWidth\":1280,\"screenHeight\":1024,\"colorDepth\":24,\"pixelDepth\":24,\"timezoneOffset\":0,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"currentUrl\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"previousUrl\":\"\",\"mimeTypes\":[\"application/pdf\",\"text/pdf\"],\"touchSupport\":false,\"hardwareConcurrency\":8,\"deviceMemory\":null,\"siteIdentifier\":\"1f19779e-104b-6d60-ad5b-fa027f11be6b\",\"timestamp\":1788602387115,\"sessionKey\":\"cc4e96f0-bfa4-4d5c-ac6f-b735b0f96c53\",\"thirdPartyIntegrationInfo\":{\"verisoulSessionId\":null},\"fbp\":null,\"fbc\":null,\"ttp\":null,\"selector\":null,\"canvasFingerprint\":\"data:image/png;base64,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\",\"event\":\"firstVisit\"}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\nset-cookie: vid=1f1a9108-6e98-6833-9ddc-1061190d12da; Max-Age=2628000; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-cloud-trace-context: b91bc5a3d636e5fba62efb6871c74e05\r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\nserver: Google Frontend\r\ncontent-length: 42\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"1f1a9108-6e98-6833-9ddc-1061190d12da","quoted":false,"path":"/","max_age":2628000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"vid=1f1a9108-6e98-6833-9ddc-1061190d12da; Max-Age=2628000; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.715Z","timestamp":1788602383715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-114\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2521691\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIjf6rOvIoryZsEFlLvTsET1F09dagceguR4V25K2zoPQ9XXJZPzuPNWu2alM2jiA2fbqaSsHk75YPGSFDUZ8DE739k%2F4xAU%2BVvPCfkDTr5nCrmsztuCfvxNXPynTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462023aec56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":1104,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 4-bit colormap, non-interlaced","md5":"88a8c04211d9a9f2565316eee8c1b97d","sha1":"83ef72ba4beeaf777ab52ccc48aed6ac8d629f68","sha256":"497afce056f92f5a2ee5d4c019bdbe3a6b2e63b17767ba1b36e9c4e45104931e","sha512":"6a482283014c37ff8e62ae08461b87c14458ba4d31eb2c517a0f9c514e5e8fc2ca0331aafeaee92791fb55f261ea15a1045036b4b4120e92a89a1176eb4817ba","ssdeep":"","tlshash":"31d02bfd53e01cf6df566527a6038145c86156240e92a21d68094a2733df51ac6a6a51","first_seen":"2025-08-29T01:16:58.653531Z","last_seen":"2026-09-05T10:01:03.20256Z","times_seen":105,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/noto-serif-gurmukhi","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.791Z","timestamp":1788602383791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /css/noto-serif-gurmukhi HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 862686\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bh%2FPeVQaUNPP4e34QuK0EwjshNeKIqA2ypWSRxIAp5TOp6einq506FrYxaV2L4%2F0wlCk%2Bfo4VUq3fZrAuXz2v8PIPW%2FlPpGUgm8f69y5iFRLZklsDgvi6jueOuPa%2BBZqD%2FjdZIg%3D\"}]}\r\nlast-modified: Wed, 26 Aug 2026 10:21:37 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3646202cf944e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230,"size_decoded":891,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"b9947de30e00ba166d52129e5796c653","sha1":"bd5476f099351beae3c4c4198ee103249840266b","sha256":"73e0d125543a1e70270f1c3512f5c03a3333ed056a270ae6ab8369687a942119","sha512":"6c1d8090b0624d1fc2a8869879f966bce82e738fd17a3aece1aa0ed895195de0e5f8b32c8f7924599c71e575408b218c82233c80a1ac93d1e7147fda44751d60","ssdeep":"","tlshash":"ded0a7545897940835203dce732b20089f1f5447250de6a53aa51c0c5da6267134175e","first_seen":"2025-06-26T14:24:26.371131Z","last_seen":"2026-09-05T10:01:03.203502Z","times_seen":700,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ps.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.973Z","timestamp":1788602383973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ps.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-130\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPfLqP10%2FBjwq8L6BWorB2vJzHj6e8zZJzMrPc%2FCtywlvLtXAlC6YIC659G6O7yNA5IxibKQnrq5SPWgxDODRkzfmBejRUOBat%2BB8V4GQysBW80WnkwV0dH0guNPyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 304\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304,"size_decoded":1133,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"3bb114a57b90132d4e5e984b33335db1","sha1":"a0944dd3a2335dcadeb8618d3b6e85b878f18c58","sha256":"ba4ebad41d9c4459ab860306f2eadafbf23dc43ac452929d7b354423dc5323f0","sha512":"20c4d43879e8608a6ca8318d3912c7aeca7020a50c10d574f1e46660da26946dc33bf522af2457c8bd79a9505f7471a644d5bfe1ce804192e468299973ce65a7","ssdeep":"","tlshash":"7ce07de335885a2dc0d16077506785b096269e4043b0c637b8c19d6e63e0bcdb4e8393","first_seen":"2025-08-29T01:16:58.693696Z","last_seen":"2026-09-05T10:01:03.20444Z","times_seen":92,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.979Z","timestamp":1788602383979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-480\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJSK3g53g%2B77BkLDsQ%2BBNxoYV7sr9HKYgRdCmrS%2FOsDAhOROg2L961D10CRVp47I2sda9PiLFplfHwB5J9m5oKsfEmbEWMOj29fTMqC8LbNjpkRBpnXOs3yBecZx0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":1982,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"f57c1b3b74aa46649a21697102171480","sha1":"f586c44faec32dd8ee35a418204d2db271a539f0","sha256":"f3896a549254890612d938aedad5e909b782edeae7017ffc5f160b34e31dd1cb","sha512":"55fe8aa048efaf550c5b6b841ed4df9e484e3724eeecf6585eaee751c4ae83ea673dca3bec53512e3aef74c98d752888edc702012bda9d31a910d41234216b5e","ssdeep":"","tlshash":"8b21d7cbea04e761789bc8345d151342c16905e49ad1bc45c4ad3c32d102f2b2358157","first_seen":"2025-08-29T01:16:58.623114Z","last_seen":"2026-09-05T10:01:03.205322Z","times_seen":95,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/no.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.682Z","timestamp":1788602383682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/no.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-c0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591670\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2I9ZLIPt7weqY1ONuwVyW1oUo49XKAjaMt4NmG4C4JnnsAnvUNIcldsMvSZKXJCaWQbFTLoQwA6PhayD9DMUADx5QbyuVC47q42Xxdy0RDjTQz6t47Z2vqSTZx1t2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021ae056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 192\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":192,"size_decoded":1014,"mime_type":"image/png","magic":"PNG image data, 80 x 58, 4-bit colormap, non-interlaced","md5":"3afab54f2d4f9c42b9532c2c95806b5f","sha1":"0dfd3cedb2b093a6b8451d3d41da81fa7da2e9c3","sha256":"f58edc8912be7c7f5a462809dae326895a9b529bd841475a4aedf0ccf26e6d7f","sha512":"3aa16cd52d0e9c1944e8af08a6e5a8c7c4f030f77fb2ad117ff3159a0bceb22bf87b912a54f71838a87cb3783fdb513d8cc90b426a429c46915653b7e5a16dc5","ssdeep":"","tlshash":"17c022d3f3110fbbf2b90072224c0aa0841b0a2e1bb8200a242ec4e9105001491c024b","first_seen":"2025-07-08T00:55:32.394227Z","last_seen":"2026-09-05T10:01:03.206609Z","times_seen":243,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ar.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.698Z","timestamp":1788602383698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ar.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-14f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbE7kQ6y%2FtT%2Bj9z1sAoJW4kLblF7yW6TRoxTfsOiNjmixLZIaaetbz2bb0PmcUrigU%2FKVQLuofOiC25SaSGzzbnS2%2BdohFzoCAT0EXikW64MD84sU7kOCGSKiiym3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021ad956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":1166,"mime_type":"image/png","magic":"PNG image data, 80 x 50, 8-bit colormap, non-interlaced","md5":"e9d0f58593921ea932b1222983f632c6","sha1":"b2d815a6ddeb7c70d3e917c58168343ca40bcdce","sha256":"6350038be1f1cd0b67c22cbd02f08bcc0fef2c23b59d5c657c75ab23363cee16","sha512":"363e63fdca907a9c4cb2f1c8b059e024dba8a606e22835193935c17cfde7dfe0e370803907c3a2afe4a1767f2fdf0ff479b1831a79090ccb6b92aa7c280b9859","ssdeep":"","tlshash":"04e028b541249c75930fc41fc1008fd0d44b500887830f1e31530f150751911a7b9f35","first_seen":"2025-07-08T00:55:32.471167Z","last_seen":"2026-09-05T10:01:03.207121Z","times_seen":140,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.954Z","timestamp":1788602383954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1cf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xCX0ALRursCs6IqgZQxpw%2Bk10L%2Fjeecj0fcWp208z6xA3SMUkF8s%2Bm4%2FP9Kbguvm4Saar6yojd0UnpQoPbu6Jt9d9YTwkjwRC7JxwZZHEB7hleHRgJ4zqZoH58NJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203bb8056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 463\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":1294,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"94a9043a7d8c2fc432ea0c8793efa32f","sha1":"c40ffc8269b1d6632c4ea379892d71068e0d4b07","sha256":"d34d541cc986436b8005185fd945100e4d9b0a774e108ecd394fb09e45db92e0","sha512":"b0b2f1ba3a2dd70de7c6c0b371191d3188981978deca2d2bbfa5058c55ff2805df1a5abea196578fc2243b179f7f3722b1165635d5247a94b62548b5da38d83c","ssdeep":"","tlshash":"eef0dca972bb8f25ce8c8b3ae88656e38a9510c8a46568806a5bf4b7005d368c924646","first_seen":"2025-08-29T01:16:58.469308Z","last_seen":"2026-09-05T10:01:03.208525Z","times_seen":97,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/.well-known/shopify/monorail/unstable/produce_batch","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.113Z","timestamp":1788602386113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"POST /.well-known/shopify/monorail/unstable/produce_batch HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 524\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":524,"data":"{\"metadata\":{\"event_sent_at_ms\":1788602383689},\"events\":[{\"schema_id\":\"web_pixels_manager_load/3.3\",\"payload\":{\"version\":\"80079e4cw22952a98p55856082md4f1b6b4\",\"bundle_target\":\"modern\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"status\":\"loading\",\"surface\":\"storefront-renderer\",\"navigation_type\":\"navigate\",\"request_id\":\"d31abeae-8a6b-456a-bc8b-082f3ba18438-1788602383\",\"shop_id\":79356199133},\"metadata\":{\"event_created_at_ms\":1788602383689}}]}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-allow-methods: OPTIONS,POST\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-max-age: 86400\r\nx-request-id: b2d6c98b-6d0f-4eb1-887c-22416fc55225\r\nx-robots-tag: noindex\r\nx-shopify-location: us-east\r\nx-download-options: noopen\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFgFR%2BETzWSJ0Bd%2B6sJtjak%2BWSdh%2FqiqL6lLhs7GuPoaQkxiglChZHgLRz%2BtV8HxLm6EvLbF7D6QiHySp5E49%2B2O3USdQtKnGfO8aEorA%2BULAECh%2BwirQ0UM%2BYLSPlqvj5Llc9N0uEatmpZJZO8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a36462113c4d569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3501,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.807Z","timestamp":1788602383807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-329\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jAJFB2edf6XPQXymIcyAxrWMS5aNw5SYqBj87D1WCqCKcKwREaRF1V1e4xZFDm8yIl71EpxHc36nhxYwnReDmSR9f5aZaXDr%2FBbYandgSfwYG5fRAS6my6bmOJYjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202cb2456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 809\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":1634,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"9c75e8f7f0dea2601939673609de27ea","sha1":"367970d2bce2da7cb7ec9307f06e8a76863542de","sha256":"448430a1a1d779ab04ab014eaf5b68467c283f1a30aa00f32c36d41afb224efa","sha512":"3a08c0779bd49c01aa91353a445ec45a6c8440cb6e6ffe91e4baca9519cd6304bc05cb10cde59d1bc8b8b471a9d45dc42dce9bb290f51cce32b20a8a95139c0b","ssdeep":"","tlshash":"f00175ce435067dd059a8f3968c9ccb4c5b396a61318de19338ed79956f04afc2583e2","first_seen":"2025-08-29T01:16:58.685585Z","last_seen":"2026-09-05T10:01:03.209549Z","times_seen":100,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ma.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.949Z","timestamp":1788602383949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ma.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-130\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 107733\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nJqODX3l9COjnIpgsaC84S5E%2FiI8s92K2ix9YDnRK1jHQFaH4CXmP8XuLbyp5ZmiaFcs%2Be0LEjUrb93IfsZ%2FZ7CkEmVtrT2V9yrgmesmk25B4NLzE840CMJA3VBuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203ab7e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 304\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304,"size_decoded":1133,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"6fc48da69b9522204ffa4d9cd0ac4045","sha1":"f960f36bb6b69b92beb26311cfc45cf1ceda3f0d","sha256":"2c5b318cf6fef7f438edc4bf43507a50b782ac57191b6069fe367ee5151c1b0d","sha512":"0aa6a7a00465447fe3604b5fc46fe71d22ec2fe7bb9da5bee98dd5ef6a6023dfc71e5825fc79f3361f6e9c46d05417ee1b204a49fe6f41a8a008322e221b20b0","ssdeep":"","tlshash":"19e0eb3f1ba85f4987235d36e12b2d41cc3037b8438082cee889c69c1bf33638186b66","first_seen":"2025-07-08T00:55:32.424296Z","last_seen":"2026-09-05T10:01:03.210441Z","times_seen":126,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.001Z","timestamp":1788602384001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-f1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1632701\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIyt0a%2FQruk9hksA1f02%2FQDFJq35a3R2dJCGMNGxjXykPxyKnM%2BEuE1tJk1PW2aaL5R2ftQJqiyz%2BpWrxZuz2RnvP90qWRoaT2QqHyUoyz2jZqAKGGbUbXVeaPuiMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462040ba556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 241\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":1072,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"7b05b4537d395bc808f9c6cc14290225","sha1":"efd687c08962c6ac18211ff4a6f5e88160f7688f","sha256":"858bcf6fe5da87f2b9affb7492ef06482b6ad0b475b70203d38f4fbb0fbaa7e8","sha512":"c25befeecbeedeef1faf7e248784917197a4eb9af0f591e19c4b276853186e7e25978fdf6ca50fbe2ec11eae193ff0038f6f30d1a169767066879996682b28cd","ssdeep":"","tlshash":"8ad02387b60ace31c7cdff3380c91080a8f28b3d4344000d378358224800701ca80bda","first_seen":"2025-08-29T01:16:58.705823Z","last_seen":"2026-09-05T10:01:03.211084Z","times_seen":111,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"www.tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T09:59:42.820Z","timestamp":1788602382820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 09:24:35 GMT","end":"Sun, 25 Oct 2026 09:24:34 GMT"},"fingerprint":{"sha1":"D4:F3:E4:66:E2:26:D1:B9:76:97:1E:48:52:5D:FA:A1:EC:23:27:37","sha256":"B5:EB:98:56:5D:BA:E5:D6:BB:ED:6B:64:30:D9:29:19:CF:D1:83:DB:FD:70:57:58:57:B3:59:BF:CB:8C:5C:75"}}},"request":{"raw":"GET /?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949 HTTP/1.1\r\nHost: www.tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _shopify_essential=:AaBxAnmDAAEA9tm9dpvGyafmM171ppXoC2TfjD7tQVNjiDwSE-9paoF-LDy5ef5NxV-nI1ZezGDLxQdMu-JqlGGiY8HZhJCNVjONvJ90Ha1yBlXQAnjVR5X6a_Um1fHdKUPNBrye6GgctMLyh_M0K9Gh9XZMSCgbQYxVFatNc92EwzrmGyuPZhmyv6J1tKJ_DkqZDjf7t11C0AqGaTBJLQGp6NYAxkgIU80GhauwPVZLppgrSj_ezV2y_42PRXB0SC9wojVOTidDyyvncOwuuMINB1Sclekx7lipLpz9UsQnGDGmIxvC9FLC_w3r0qsB0D2Uh-F7TJyBtTtXbzmG7I6OKh_-gk7WCYHwMbraV7VpIVpIoqTt8AbcUJgosKoQEM40a7rQsby_gMetFUneRcb4mtFTsnCErnsS:\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sat, 05 Sep 2026 09:59:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nx-download-options: noopen\r\nx-redirect-reason: canonical_host_redirection\r\nshopify-complexity-score: 150\r\nshopify-complexity-score-v2: 15\r\nset-cookie: _shopify_essential=:AaBxAnmDAAEAnGABJFE6wyiIbG5uzsdxb19kAyYLepkjn4YvcG9BORu61Y7sGhOZCiMN4Ir8Hh2lsR6UZ48Y-gloUE6aURypV_LWlbvcZyFsxI_JmyvxaU223jOGKyfp4ZDSy3q7tkfoPvnBpYeCiV3xFOKQcCl27-ojVysbOMaSr-zeumKWcHLv6tkWkrV9cLOfMfpJwod4P9VLEDriH1qtlru53SJ42iMP8xUaiJ4qsJQS9Pbf2HnkSdfDh4LroeZg8_0KUyuW--rBWz5vgpDOL2ej3KcF6T-6RQ9baEDOZt3Szfd9xXpEVn2GX-kxIP9QZqGPQooTYs76v3dRukfvtILrtH_D4lIJ6ewLs05peEYj8l_61bcapbD11R0VCBkH8j_8WfeOl6mVW9NLowCmekL3FX1UfekJ:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\nx-frame-options: DENY\r\ncontent-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;\r\nstrict-transport-security: max-age=7889238\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hs2RqRJQ%2BBq06hYVY%2BSmUiYuGACKi2tixOZmQj7LOm%2BqDl7BBdK4voz%2B6I9WcVL0E9yp5YghU1%2FCWpw6SAlKIYHTZ7q7DdRzJZWEUp9dHsGg351Pc4guhipyH3FOhhCezcrc\"}]}\r\nvary: Accept\r\ncdn-cache-control: no-cache, no-store\r\ncache-control: private, no-store\r\npowered-by: Shopify\r\nserver-timing: processing;dur=21;desc=\"gc:1\", db;dur=3, db_async;dur=0.951, asn;desc=\"50304\", edge;desc=\"OSL\", country;desc=\"NO\", pageType;desc=\"index\", servedBy;desc=\"9wkc\", requestID;desc=\"6cbf83bf-f44b-47b1-baef-79d13e30371e-1788602382\", _y;desc=\"00000000-0000-0000-5000-000000000000\", _s;desc=\"00000000-0000-0000-5000-000000000000\", _cmp;desc=\"3s.amp_NO02_t_f_JX2CVa1FRtycBpkgmO-ilA\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-europe-west4,gcp-europe-west1,gcp-europe-west1\r\nx-request-id: 6cbf83bf-f44b-47b1-baef-79d13e30371e-1788602382\r\ncf-ray: a36461fcae1d0b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"_shopify_essential","value":":AaBxAnmDAAEAnGABJFE6wyiIbG5uzsdxb19kAyYLepkjn4YvcG9BORu61Y7sGhOZCiMN4Ir8Hh2lsR6UZ48Y-gloUE6aURypV_LWlbvcZyFsxI_JmyvxaU223jOGKyfp4ZDSy3q7tkfoPvnBpYeCiV3xFOKQcCl27-ojVysbOMaSr-zeumKWcHLv6tkWkrV9cLOfMfpJwod4P9VLEDriH1qtlru53SJ42iMP8xUaiJ4qsJQS9Pbf2HnkSdfDh4LroeZg8_0KUyuW--rBWz5vgpDOL2ej3KcF6T-6RQ9baEDOZt3Szfd9xXpEVn2GX-kxIP9QZqGPQooTYs76v3dRukfvtILrtH_D4lIJ6ewLs05peEYj8l_61bcapbD11R0VCBkH8j_8WfeOl6mVW9NLowCmekL3FX1UfekJ:","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_shopify_essential=:AaBxAnmDAAEAnGABJFE6wyiIbG5uzsdxb19kAyYLepkjn4YvcG9BORu61Y7sGhOZCiMN4Ir8Hh2lsR6UZ48Y-gloUE6aURypV_LWlbvcZyFsxI_JmyvxaU223jOGKyfp4ZDSy3q7tkfoPvnBpYeCiV3xFOKQcCl27-ojVysbOMaSr-zeumKWcHLv6tkWkrV9cLOfMfpJwod4P9VLEDriH1qtlru53SJ42iMP8xUaiJ4qsJQS9Pbf2HnkSdfDh4LroeZg8_0KUyuW--rBWz5vgpDOL2ej3KcF6T-6RQ9baEDOZt3Szfd9xXpEVn2GX-kxIP9QZqGPQooTYs76v3dRukfvtILrtH_D4lIJ6ewLs05peEYj8l_61bcapbD11R0VCBkH8j_8WfeOl6mVW9NLowCmekL3FX1UfekJ:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/storefront/load_feature-1bd60354.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.550Z","timestamp":1788602383550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shopifycloud/storefront/assets/storefront/load_feature-1bd60354.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3285\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YJt6qQwXsYLagQ5MWPCz8eGxJD4Tma%2Bt1m8lXyZrzEvS%2BO%2Far3kmSNLBOxufnSC2CeEVxV4nNkgZ94w7qEj%2BTYJtmNXNvWt%2BQTwaSQR1xomC9Mi4VqwWez2gnq3CpANUA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 27 Aug 2026 01:58:18 GMT\r\nage: 2708704\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/storefront/assets/storefront/load_feature-1bd60354.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: b9755926-6dff-4adf-966b-5da5ddae4ca3-1785893679\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462013d67569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=68.257, imageryFetch;dur=67.464, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13938,"size_decoded":4563,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13937)","md5":"6775622c397dcfa06f3eebf84d89f54a","sha1":"1f50d4ae8a7bc2d2751cdac88ce50d44df264ba7","sha256":"263a0fa7965f075b1202ce5241aa25d71d4682fbde33e060991cf20dec489c44","sha512":"1e384971032cb409dba16b3d7ca6a8850ef125b1b2a9e19388156d7ed397d6ea4a8493e42612e9c143237e24d37236c408de1bd0b45e714f417700dfe82b3dc7","ssdeep":"384:7zTyVf/v/+4trtuxc22/cj2sq0/nbjBXgrm65GcYCTJYt21b59:7zmVf/v/+4trt6cKj2sq0/nbVXgrm6cA","tlshash":"3e52775e5e13d57f8ee71af71ca741142fa81eef340cd00083ad5f8628d06da6a2ee65","first_seen":"2026-04-15T05:14:11.956412Z","last_seen":"2026-09-06T13:16:07.552175Z","times_seen":81448,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ru.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.988Z","timestamp":1788602383988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ru.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2523940\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCs2x6uypFiSr5B5ORgmGK6mPPZUGLU%2FcR8W%2F1uRXvibI9CQ4cQb8%2FYSI4O5wzFnp4t6ZssbNxb6JHIw44DNpPx%2F2ydNXZq52Q8DFFrVDYMGRiWs7GUHOs5ELC08HQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203eb9f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125,"size_decoded":956,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"7901c9ebadadc5068dadd29be855832b","sha1":"e7afa58d108dae590d854691d172e9595d1daf84","sha256":"fe1a82a5145e5fba6982bb14cb20663b888a5feabada2235d036825fa4cbcac8","sha512":"4ad9dc4eca22f1128559b9001ba5c58b7774d4f557731aa41a40f64ce609229b85564fa49eaf3129a5f3a344fc188f86c6d8e805687ae20c052405b55faf3bd8","ssdeep":"","tlshash":"89b09be17d515f649b4abd365d74104455755717225341935493411d274224141dd196","first_seen":"2025-08-29T01:16:58.543561Z","last_seen":"2026-09-05T10:01:03.212598Z","times_seen":130,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ae.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.131Z","timestamp":1788602384131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ae.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-84\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2605694\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6zoQosRk9xonYBCKJ0w2cS58H1zRpXhxs6tBt1D3VVDXlKUBdFbtKfAE7nZIrm2hedu6ouOre0tM2IkX38i%2FbFsTqrZLOvEZmJFiOScLypbfKMPB1ryyaTDPiJO5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204dbd956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132,"size_decoded":957,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"2ed3ba512b9de8defa4c9cf1b60b8dbd","sha1":"80f9b343a52b01d72565ad2828e315f69bd8e3a5","sha256":"709f7c8b8a3c4cdc39c35e60f918e944dee6544913bf7f9a1f4efa27aba7cf70","sha512":"147228eb2ea6e4f6c52d2a0fb863fd9a941edeaf193b9f05ec47c3d1ab17156eec8c9803b9459b2ea6d0affdb94a7add1cdfa47696953746e4abb04c32dcea64","ssdeep":"","tlshash":"19c02bdff0484c70c14426377345a100ceb2001c816e8149108bc927c1f000f6088513","first_seen":"2025-08-29T01:16:58.651317Z","last_seen":"2026-09-05T10:01:03.213684Z","times_seen":178,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/preview_images/5739d7be32a04cd9b4e74219a3e143db.thumbnail.0000000000.jpg?v=1781733909","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.171Z","timestamp":1788602384171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/preview_images/5739d7be32a04cd9b4e74219a3e143db.thumbnail.0000000000.jpg?v=1781733909 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 72694\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sat, 05 Sep 2026 09:59:44 GMT\r\nsource-length: 380527\r\nsource-type: image/jpeg\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXU6UaZpzcWmvxdLIuGTbK%2FQWiiz5B%2FGL2I1jc%2F5fckh2RaZRi94FBXdolTRN5gpgVGfYwYA3n1cEzyysTjClWYyroJnxoF61Vn2KwqhTslRkpyrJbQuscr02ZtiG20%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 8989833f-4996-4e48-821d-d438c3af7ce4-1788221728\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=5,i\r\nage: 380655\r\ncf-cache-status: HIT\r\ncf-ray: a364620518c3569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=238.356, imageryFetch;dur=82.167, imageryProcess;dur=119.282;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72694,"size_decoded":73924,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd6b66f040fef871b12f02cdde0c514b","sha1":"6fab176bb924c1e832f91fc224642701f0156eb7","sha256":"90d22ba8ec7909572dbb444f5315b41dba98c7d05983c2ebe73e4c4c74a1ce79","sha512":"032dd8d8e90992f02a8cae5ef7d34d12c7dfe5adf0d9b668377b5d438437bdc27a85611662d3f69b32e5db852c19776a098bc520fbe1b98a885b89a3170ffb72","ssdeep":"1536:xgDCm9QkH7b5GY6+xtIQtk3W34VuWmt993ju0qEHHtqW:t0QkH7w+x7t9373ju0qwHtN","tlshash":"04630218b7c816adc5733032d64c4aa357ed029d507979c633f45e9c076dae82a3f875","first_seen":"2026-09-05T10:01:03.214312Z","last_seen":"2026-09-05T10:01:03.214312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/fonts/plus_jakarta_sans/plusjakartasans_n7.0fa457c7659036d61c299855f2665d487764b03d.woff2","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.636Z","timestamp":1788602385636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/fonts/plus_jakarta_sans/plusjakartasans_n7.0fa457c7659036d61c299855f2665d487764b03d.woff2 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qd1gmDuxkn0xElOFwQCq8wvlSWcV%2BQ48fl0Sro4y%2FiAt32Htn2En5%2BAN3C%2Bj1%2BDEeFNk2oqPt1OCxB8Kp8Vh6E9C2ppeaZK7qVireiepVOSlaHAmIBsTyd3FSr5GHTTEGZkjml7\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 20:06:17 GMT\r\nage: 2213048\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-fonts\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: cba5a30b-f345-4581-b6a8-04f54fc848a0-1786389337\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a364620e391d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=140.108, imageryFetch;dur=139.710, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13800,"size_decoded":15281,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13800, version 2.4653","md5":"731217a18939e88b88420fb2c6a145a8","sha1":"0fa457c7659036d61c299855f2665d487764b03d","sha256":"8266e5a9067da34e199704f4b1aba46002a722cac46ded914bcd2dbe79404d8f","sha512":"fc118fe29c4b7a650774759b013d19ef517e4a66ce65e575b76f0bfefe0a97481c96c213f61a73819cc25ea7b253f20137ace7d919cdc48325097bfab6ca6d6e","ssdeep":"384:IUkj9wmgXe9OLjMFE5TMFiz5A+9DofR77af:Ifj9zKcO0FuYiqVfRnaf","tlshash":"3a52cf02f4df4e4fa752266ac81c2b36416090e0273dfa07d5a49f53f4669cfb3687a8","first_seen":"2025-10-12T17:09:33.03172Z","last_seen":"2026-09-05T10:01:03.215387Z","times_seen":113,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.casing_BkIPdPn9.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.035Z","timestamp":1788602386035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.casing_BkIPdPn9.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4681\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 27 Aug 2026 13:08:35 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.casing_BkIPdPn9.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UU2nLNSnagdSgxmBqIHV7izaXC2z8hkldNAdX3xBQ4SRbdarrCUs1QO19ztA1yvW7DadxzYlcJZTCGWImufs4gwRsY5KymdktpaUELjZVOVY7sqG8ri8ixNWHKtVWI%2FUpQ%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 853146ca-1de9-4d70-8c50-4add5747de97-1787836035\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 766350\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf4f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=107.448, imageryFetch;dur=106.327, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11648,"size_decoded":5888,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11593)","md5":"56e07dac7b97272e7aac40a55062be25","sha1":"d6a442ed7d84973727c268b3e1890d02ea5d5280","sha256":"f9208c6b5e3f4b0c20d0bc7ff0a8d1a2873ca6accfcf67b2447ae370c2c102a2","sha512":"832e5541cf0fe10242b082d519f0d9db178cea5397e0a2f0099a9f6b0088487338a6df1c376d164dc83e166595c93727dd18491a0b7c46f3384354dc95428a92","ssdeep":"192:HfDdFqSRb9bxj1SRn4UZB1eAk5VpkmycvbeFSH/lmH8Z2UQ9Lw9R46Yqo5r119PV:/fqC9bdi1ZzeAC5v62Z2U9vX2V9j092","tlshash":"9332f9fc7c24f0205bfb216170bb1c17b378051ff98854a05608edfa2ab456d661bf9a","first_seen":"2026-08-27T13:15:35.416221Z","last_seen":"2026-09-06T11:36:39.600478Z","times_seen":1789,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shop.app/pay/session?v=1","fqdn":"shop.app","domain":"shop.app","tld":"app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.394Z","timestamp":1788602386394,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /pay/session?v=1 HTTP/1.1\r\nHost: shop.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/\r\nOrigin: https://tryrovina.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.729Z","timestamp":1788602383729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-276\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmjHHGmtjmZFMbY4Tt67Lr4MvIr0J6j6%2BqfJ9m%2FhLayN7OzR%2FrqUa7r8PJpYgu%2BXr9KWLKpcXFUG7KOUXOO25ZtTyviFWILUfKGB2tPpDWAZdAZEJvc2ClF3bXMCFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462024af456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 630\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":630,"size_decoded":1461,"mime_type":"image/png","magic":"PNG image data, 80 x 55, 8-bit colormap, non-interlaced","md5":"78c1a772df6fe19c76532bbfe3d2b9c5","sha1":"a35ffb5a3ee6a60970978b1a00f2b181528a901a","sha256":"2a3ef1143661691f5af75a5d0936baf2b89cebacf2aa5a7b606aa49d4ab19394","sha512":"08ca8f072a07e60eafab7dc302e8bd8a6ddacc44b5860ca3dc3609269b7c8c9602db813603880fea5b1404d159dc0e5e6f2a4df582ea3525f6cafc5814c0863a","ssdeep":"","tlshash":"67f0687672918474eb4bc837540094b258ffb1b9035047d7413bdc516747417eb87705","first_seen":"2025-08-29T01:16:58.595896Z","last_seen":"2026-09-05T10:01:03.217041Z","times_seen":102,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ba.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.730Z","timestamp":1788602383730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ba.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-15a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xB4pNoHHpMXHLuJ3e1e2oe4uvNlsCudIKvDUndL5oNiX0Np1D5L01CnyB%2FOTIhgCyiSwp0e1TwlINut8otszbO1vd5FREgWehkAmhKBblqf6ceg%2B75WDRmpflQ182g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462025af556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 346\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346,"size_decoded":1173,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"856993d949f3ae1d2386a71c66ee6345","sha1":"d39b311903a7b5669a4deb90bad7fe9400cda8bf","sha256":"65458f3db09cabf5e23ceb4e27463f3ced69fa3bdd65ff1107a0dbfec2281c97","sha512":"d67f419a15bc1381c4bf4154c25e481054e70f084d218576e0e05403491e1395cf30a2e83f74d863c7f7e657f6415d11731fd1db8ded2886d8b0e2f305d1719c","ssdeep":"","tlshash":"a5e0c0e1708c4518d5a9c6abc21242e5c2294ba41f3045298215f071a7084c0ca4d169","first_seen":"2025-08-29T01:16:58.474785Z","last_seen":"2026-09-05T10:01:03.218043Z","times_seen":109,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.969Z","timestamp":1788602383969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-221\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PwSXerOSt9QsEcV%2B9vFw5KlryHxpjGXjJQVBMzFYTwrg4mqK1XShk1v%2Bmf86FXnSNZRCR188RbYoRt%2BX7IQ3ueGSGbiVLsC4RiAyOJxkx1%2BZuZwnr5XxQzV6GR8coA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 545\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545,"size_decoded":1376,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"b5e4c0ae38222c470920b60916a9ff46","sha1":"f62e5adb896e2077895bcfbdd991251d674d1b9c","sha256":"35b772b223c5fb4ee46824a36bb3d57e9bc265edccfe8ed2ef8428d53e1fb821","sha512":"9b2e20d8e1a1bee5fef3e7a96c3a39c3c7118d9ffa0c6b05834c6dc1711b2a74449419fac24b8f8930e7bcc5eb25c0f4fb109117f3190e499778a933b2531010","ssdeep":"","tlshash":"8ff005c6f14d936df301a5ee28bb8483d48523584372435f1477553a7b2391df08c156","first_seen":"2025-08-29T01:16:58.527192Z","last_seen":"2026-09-05T10:01:03.218924Z","times_seen":103,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/vc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.038Z","timestamp":1788602384038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/vc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-13c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2603367\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhoOGiDPRc2yXO7GB5l%2Ft7xh46exnwwke6tFjmH9ROrSSQC1otCS346xuxG01qYmCtBQ6HdDGDcjLWt9qXLDIWxHzn9MKwTsz%2BSzCK2Hl3ObAkOKDopd2i7IK6Wj1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462043bbf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316,"size_decoded":1144,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"13a2b49ffef700507de17407db38398f","sha1":"89a1abb799e8dfca939bf6505744b9bd1fe84599","sha256":"e51d83cdc247c4ebe0942fcc248efcc7aa9d31e37f0181ed5c0cd2c5081934b5","sha512":"d4a0ba2544db96d6a330dfaab2ca41f07373ef95f5dbb67037b8ab89ca99e16101c7ee425cfcb3c08ceff228437fd0572dca7f064916051d245969613dfb83c2","ssdeep":"","tlshash":"74e0e75136608f7250493ff254cd3807363e19bd62d8527d110bdf1d0c91554b1c5371","first_seen":"2025-08-29T01:16:58.701555Z","last_seen":"2026-09-05T10:01:03.21995Z","times_seen":99,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otlp-http-production.shopifysvc.com/v1/metrics","fqdn":"otlp-http-production.shopifysvc.com","domain":"shopifysvc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.473Z","timestamp":1788602386473,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /v1/metrics HTTP/1.1\r\nHost: otlp-http-production.shopifysvc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://tryrovina.com/\r\nContent-Length: 703\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":703,"data":"{\"resourceMetrics\":[{\"resource\":{\"attributes\":[{\"key\":\"service.name\",\"value\":{\"stringValue\":\"web-pixels-manager\"}}]},\"scopeMetrics\":[{\"scope\":{\"name\":\"open-telemetry-mini-client\",\"version\":\"1.1.0\",\"attributes\":[]},\"metrics\":[{\"name\":\"web_pixels_manager_feature_usage\",\"unit\":\"1\",\"sum\":{\"aggregationTemporality\":1,\"isMonotonic\":true,\"dataPoints\":[{\"startTimeUnixNano\":1788602386251000000,\"timeUnixNano\":1788602386251000000,\"asDouble\":1,\"attributes\":[{\"key\":\"surface\",\"value\":{\"stringValue\":\"storefront-renderer\"}},{\"key\":\"feature\",\"value\":{\"stringValue\":\"event_emission\"}},{\"key\":\"event_name\",\"value\":{\"stringValue\":\"Page Viewed\"}},{\"key\":\"user_can_be_tracked\",\"value\":{\"stringValue\":\"false\"}}]}]}}]}]}]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18051184874","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.527Z","timestamp":1788602383527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-18051184874 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\nexpires: Sat, 05 Sep 2026 09:59:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 161470\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472165,"size_decoded":162074,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"51cfc799a5eb7496bb5aeb15ac470574","sha1":"681e8919dd426ef5275497c2c629e4ac9e6012af","sha256":"c3510c16c31c9f193cd6bb0e39b30abe26336494dc8baf9899dc028d821f9548","sha512":"7c891f1b28450a4c01fe5c54f8b9e0e2c5cfaf087784cc326c9a19e642a1c4e955f5b20ee2ab0b31e526f7739f5238e5510a001b7223ed9d2faa1e39fa324821","ssdeep":"6144:y3H1lxPZfMXrrzudf1UZyc3DR/dEpv3yg+0eSQMlcWp:ylZkqHg90eSnc0","tlshash":"b5a42acd73d674229392f574903f018bb67a29a2b84cc899f289dce42d3469a5173f7c","first_seen":"2026-09-05T10:01:03.220934Z","last_seen":"2026-09-05T10:01:03.220934Z","times_seen":1,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":40,"receive":34,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/dz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.689Z","timestamp":1788602383689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/dz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-18f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 113239\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2X7V3oJtnl8dsztaZT%2F140vIaz252STmG5KvLwPOd4T5ryy4l7iPlklPrul1nesRr43g9FQMFlRwBueKgplw%2BdPOtti3bMyDIQBFjlK%2BgIYdMewhHtbU8TD1EFdiIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021ae156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":399,"size_decoded":1228,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"179662edd8108dd37830d87d14867e5e","sha1":"2c0e6818706f0d43039f17661b6da9a4bb1b7dfd","sha256":"15e7ef69c144fa4d9d57ef9c6761a23c5dc1e2f2506c0c77a847139ca6663039","sha512":"f412c5e863becfcf0244c798c01a323d0f701d96276966a89d1f9b9a53433d6d67e8d74d8677495304e6fe11a8ac169096d41e4b14d544398021d9fe7ea50df7","ssdeep":"","tlshash":"8ee0f1d3b3488f6ac0a867f3c3523621e4b7d7b566248162d41b4833405c40981f1440","first_seen":"2025-07-08T00:55:32.469844Z","last_seen":"2026-09-05T10:01:03.221971Z","times_seen":109,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/dk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.779Z","timestamp":1788602383779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/dk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1645150\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDFM4TvvecygWn2TjkqYowPbcBgkRqLHN1PY4JeQOy1nkzOBaN61K%2Fp7z1n1GIzBLRKVS%2FgqSyivhnrs3bLpN3%2B6HxBv74KUqJAcgjHd9Ksj3TZzfBmcb7edCsiHbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462029b1856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 148\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":148,"size_decoded":977,"mime_type":"image/png","magic":"PNG image data, 80 x 61, 4-bit colormap, non-interlaced","md5":"dedd552befccd774bfa5265b103f0b72","sha1":"303d99d23eaf49fb24b810abd03f54154a29bc34","sha256":"7f9de76f88b1049ad15974b93e1bc863280bfc3c5c566227a702e57684e0f233","sha512":"d064dc1d21735ef490e817c69c53959b2c66b5833e5f26a782aa3224dcd7d704c46193f3bfbf4bdfe30f2d69cd0035e8b8087d878487553cbb76805f313af100","ssdeep":"","tlshash":"27c02bf46220ef18d348d13323142100d0fb054932c0014a884249221e92365504819f","first_seen":"2025-07-08T00:55:32.408855Z","last_seen":"2026-09-05T10:01:03.222596Z","times_seen":222,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/dm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.783Z","timestamp":1788602383783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/dm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-205\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDUDXc%2BE3e5zr5dlck5ZnZ1K8pmxb06W3enjKC%2Fp28NcXhJHbxikG2jWSXynKAT1lZa3AZ4hP%2F1u5wBvvySTV1PqG1WgZ1hK1fqNP6anHIcznqlWL968Gs8ioMn1iQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202ab1b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 517\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":517,"size_decoded":1346,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"7c238ec9ce7372e9f248b533ac88186a","sha1":"cc4e8aae3e3cf0372f126ec55053a5a08d8a6f41","sha256":"dfe111b09e715810673eeec3b5558ab227c7ebbab7dde54946910c519e528d49","sha512":"ae5e66d81a9f45a451d6cd4e455f0e7b4db7ae39c8eb5e3a56b4805cf3321f923f241de8abef5d7c0009fbcde2f2d8a95a29b1705a47afc8fa5c8bd1ce06f62d","ssdeep":"","tlshash":"b5f005ea193b5f74f4911a7177bb7dcff5d4107d8b25278b218609303722515c048160","first_seen":"2025-08-29T01:16:58.672165Z","last_seen":"2026-09-05T10:01:03.22321Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/na.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.955Z","timestamp":1788602383955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/na.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-30c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kum6KaGSsCcpEoBlqMxZGzSnlIC0h%2FENptZXFo5qgt8w8Wx1ZivDLN460R%2B1ovGO2LnFC11fsqotYLnVekM%2FYpFHGM2Ikqmdwygw8WINe%2Bsj8lPyGEAdaY%2BXQgg46Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203bb8156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":780,"size_decoded":1613,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"a3adf5406bc312f176cff294e90f51f8","sha1":"b6225c60357e8e40f7e021e6eaf714876d1021a7","sha256":"f06d0d31252fa2c707dbb4af303c342c1f11375158f7d97b6d86b4776a569a6b","sha512":"0e76a4e0da1619868b753dcf6d2d2b727b98c66836677cd3d2bf92beaad68b2f4fb02a3f4d895e7166fd71a4830726fc1c53b7c890ce03722b0b40cd2353c497","ssdeep":"","tlshash":"e001b58e673d6e6a8e556ead20bd4048c41cb389034f0129aa3fe4bfd0384907fc1384","first_seen":"2025-03-09T09:20:42.20864Z","last_seen":"2026-09-05T10:01:03.224281Z","times_seen":100,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/qa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.983Z","timestamp":1788602383983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/qa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-c9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MC0eUIoNMpU1xS1LHAhQTubCVWEuNCiCh5K5wbA53u3URhyO7SfbfidXGao2%2BJTEVz%2BY6JahYx%2FbPoZiRtzJqwgtrAvT60iJNIGjwISpNHShV4bAy5ZKoAkx7sBxCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203eb9b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 201\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":1029,"mime_type":"image/png","magic":"PNG image data, 80 x 31, 4-bit colormap, non-interlaced","md5":"ec48c3608a0c1c5f2b1213877071381c","sha1":"b97c3e8230d816bd762de2c7410713a0147f9faf","sha256":"ab007ed48922bf300c3a76462aa8a40ccdb2bf9a06276e3acde96a6b6296bbbc","sha512":"28b0f536feeec8bd6d16213ccd57fa0f5db124d04537e4a6b1c95a1331899291152cb67da8f3016a066a0356aa0267938064fed1033d626a1119319265b691fe","ssdeep":"","tlshash":"95d022c2baafbcb642c61b23e9d402139e25123417a502cf540a7929f4e2c46d6ce103","first_seen":"2025-08-29T01:16:58.482316Z","last_seen":"2026-09-05T10:01:03.225589Z","times_seen":124,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.996Z","timestamp":1788602383996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-46a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1311675\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0cz2Ju93nqL4Oof5tjmHz9HMjnjXEG2rY%2F0AvvwKbKX6vESMl8654KuK4%2B%2BmtrAghYyclTwZc27TCYLKzQKEEdyGJ%2FRBXPvUkHzxn2PaLjDKF1vcor3GcvtSg9eOgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203fba256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1130,"size_decoded":1963,"mime_type":"image/png","magic":"PNG image data, 80 x 60, 8-bit colormap, non-interlaced","md5":"ee75bdf13cc7cef28051f75f53049838","sha1":"cbd8c48efc43e91f81a10c8c0b39a71528682e2d","sha256":"70d6493008f0a06bd73cb32dc246c7da1ceb62ff64a8b6e49951537235c8dc57","sha512":"6b261cbdac7b25a8d3ae8afaf02bb925250898f33ca3bdbb34432c818dcdf7ebbb79c191c6f1a002b51b152cb7250724075652fd8cc83433f714a4e7f7774249","ssdeep":"","tlshash":"d421f9e1d92353bce2866bfca389f614c7acc85e4ab003b7d152c52df5235024196301","first_seen":"2025-08-29T01:16:58.629682Z","last_seen":"2026-09-05T10:01:03.22662Z","times_seen":101,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/th.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.077Z","timestamp":1788602384077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/th.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-89\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2522811\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwEVYYx%2FSvWUBdEcvOaQ0Y%2BT4Tt8Pf3WlpfLYDALxJEmVt8UC04hKltQAew18LTcE2YINTf3dwx9mins940Kat9uluZ7%2FCYGax85E%2B9trRCWbROwm5x7vU405Sch4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462047bc956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137,"size_decoded":968,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"5533bc0f00c3bc37ab0842ab80aadc5c","sha1":"75280f73624579f0633780eb5990ae6dda5d022e","sha256":"21290b9be44e3953831573fc7416dd266a7f1d31b523efcbfd68b5df22ea79a1","sha512":"19a98f6b0f46b4420a8f2e5ac654f2c0f2125602793ba1e543d1457efdbbcfe8143b1bea57a7e5e2f326f5f504f1352f4f464cfc7ccf713b719da872f7694040","ssdeep":"","tlshash":"edc02bf047000e38c3c7b5b3901f15c0f9d2138c2225230104cac8258b32100f0401b3","first_seen":"2025-08-29T01:16:58.613204Z","last_seen":"2026-09-05T10:01:03.227542Z","times_seen":131,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.064Z","timestamp":1788602383064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 09:59:43 GMT\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1056,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"34fb70c13bbdbc8cf543ef12300581c2","sha1":"799a44752ae252516b6d4992df2bd479dfb96971","sha256":"570f075600b33d642e0e4f13c13c80bd397299d3208a6efb9a7e5bf74fdb704e","sha512":"4081a62b827272c9bc10ce86357fa876440cf55377772d4230755675c96122330a1f6911a45e21b466b17a857fe43a6e3d269ac9b6ae3069222faf58edf72bbc","ssdeep":"","tlshash":"06f0ac586e1a5805a1150c87330f3f220e1d491f294ad8feaf414d0c9efe5774345b0f","first_seen":"2026-09-04T00:58:58.783451Z","last_seen":"2026-09-05T21:38:01.669426Z","times_seen":40,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":38,"dns":0,"connect":16,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.012Z","timestamp":1788602384012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1c9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxQC0MKjczumGbUu%2BF4BHmd2S%2Fzkz6qTioRprKu81zpDbSuWjvBd7tFskxbi3CiwkyFaBlEb2D43cEQQA8Qv46QUZ5a4oJrtg6LetiPexH1zP29PAD6N11N292t3Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462041bb056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 457\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":457,"size_decoded":1284,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"987c55e6aaa8fc0d74e5673efd2712d8","sha1":"a46ea4d7487603f64214fb6ec55266889b23c38b","sha256":"6ea25b29aa4ae0732fec517448de13ec02eaca1d834ae9e0aa9bcec22d464f05","sha512":"8dfaa6bb9fd5b6450f23bf6332a501c16f00927b8faa39aa93b433ef7c615d9414dc806d2d80ee33418ccc796b9e3f13cfec2ca686ab61c80ee37a8086469330","ssdeep":"","tlshash":"c8f0dcebebf8ef5dc88aa37ac448b50d703a911907959951911d53835802a08e84c3be","first_seen":"2025-08-29T01:16:58.694727Z","last_seen":"2026-09-05T10:01:03.229028Z","times_seen":99,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/vu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.138Z","timestamp":1788602384138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/vu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-294\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrGdqYCt5tiZBgQziqpuCfbdjurE7cFXKSJW9wl2Fwk4kzo36D2PNXmXvMhXWhMGuKfA%2BQ%2FuHCchzrf2gG6uNtKJCxLHAq2v32VZdLc4TOcs3T1yq0I7krQn%2B4OOdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204dbde56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":660,"size_decoded":1489,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"a73c555118b5aa508867514427811a33","sha1":"8bc07090b646b9afbc15cc19fbacc13649b3a542","sha256":"ba612637486886f5ea206a86a36e7c8dfddb310627d482d5b56eb41e7b02b390","sha512":"8d5cac9ebe05a5939a16d32389124be7c33cf2d32eca060cdebd03f510da5c18f3e2378a7cc0e57651e3e2c691e82ce1d20cd677f291b97827ab0154bed19fdd","ssdeep":"","tlshash":"c1018393a30ca5b897fd1826a1369d0b9e2f30b3f9a8c01f142290150940392c98ca7e","first_seen":"2025-08-29T01:16:58.658225Z","last_seen":"2026-09-05T10:01:03.230103Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/amz.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.278Z","timestamp":1788602386278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/amz.js HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHndcPAwNh9PXQ%2BCT55xhruw7hJWGjj9Iuq4bvRqotWBwDdYcm%2BYesfSR9SSksnq%2BPlcRqsmy34U%2FjVBJzVKXCpPnfXTntly00vBw01YNh9pb1z3yVmhDe%2BqYx7t%2FC%2FBuloHM0ko5w%3D%3D\"}]}\r\nlast-modified: Tue, 30 Sep 2025 20:34:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 1684\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"ef6695fe351d3ed253b1ea3ebe1fe84f\"\r\ncontent-encoding: zstd\r\ncf-ray: a3646212388556be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10962,"size_decoded":3900,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10962), with no line terminators","md5":"ef6695fe351d3ed253b1ea3ebe1fe84f","sha1":"3b7b1dd042b5291b63014351e27c4e202fe93e66","sha256":"0262f859e5581f288a52d7e6214f51164053af590c79619b2a4399374d814fcc","sha512":"81db24c977a81b4c1f15c25c9c1448c139ef0521362344badf57ff8654b031e93f4400874c0fbad34619e18640ba3c778e9f35588724984bcb3427254ed8f0bb","ssdeep":"192:HZt10H12k/oymYiJEmhUhqp0Xjk+U08kkkzVBAyh1fsH7R5aiM:HZT+Uk/o9YiJEmhUhqp0XA+U08kkkzHL","tlshash":"2d3201787e4175eae7130d3b3302f999c24b366d36f5846ae2122d127910337b1e96f8","first_seen":"2025-10-08T18:10:59.896642Z","last_seen":"2026-09-05T10:01:03.23113Z","times_seen":40,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.423Z","timestamp":1788602386423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20496823\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-20496822/20496823\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPmU4ZpeXZQG59I3sU5OYXbIJ1B8yngqrXqI21wV0DmXlPN6ZsXE1vWaEAsYB4xpCWvecOyKONWDdtCUeMc688K2trVPMRrrLOIPtPo4p465qeiS%2B6K67j1RPlAtwXk%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fe8c3da5-c6cd-4e6f-b923-62d9b798aab8-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e61569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=505.798, imageryFetch;dur=505.421, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2359296,"size_decoded":2360998,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b309f2626ddb71207161e19c67a6b48f","sha1":"ac7270c6deb7a782bc101d3571c67b91df963682","sha256":"405fa375afd3cfa3610475c3fa52446252d93cf32ea3cca57361812572cdc563","sha512":"98a359dba93d58bc6d260848b075c699b475bcc4f0a59d8d5bbd0508637a37e36a8f6b956a35cf54304a06c7fa7279ecfa1edae8ece7d8dd0dda787d28b50428","ssdeep":"24576:VRW08ASQ3ioSfC48tHsJ5cAD+/J3M2hGFGl2JcZCy:4RjojIeMkJchG8ccy","tlshash":"6b25228ef7a9915bda641770a6ed93d377bac0a40737460b886c034cedc3b5c52e62e1","first_seen":"2026-09-05T10:01:03.232811Z","last_seen":"2026-09-05T10:01:03.232811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.429Z","timestamp":1788602386429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7905824\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-7905823/7905824\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCrfC5h7AViVe%2FyGCeRD6o4yeNgJUcV3t8%2BT0UyeL3mq6SmMMX2MOa9VE7mq6OhdfS47JDDfPKzWUbdqW6T7Yg1NVNMBRIEHS0WytILJREoXu8gVcPYLpcEy1T86Kgw%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 93006eef-8a39-43bc-ade1-d33b0b4b8b8e-1788221719\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 380666\r\nx-download-options: noopen\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e6d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=358.953, imageryFetch;dur=358.491, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150656,"size_decoded":1152357,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1fa80a8df9cdb0f93ec2c52cb4b4672e","sha1":"1f641636c507ba0f74939ab82216a4ae3f1b1316","sha256":"ea09666ae48cd2d945b7dbb1215c0a6a05d7c2ab611650ab66117afc9c738a41","sha512":"eec9ccc658bd61394fbe39bcc79bb116f66784f743762dc90dcb7ce583934f720e04959a7b83d2c1a2a795f70e2a7dfa843058fdaf5cb01270f847ec12bcc8b2","ssdeep":"24576:0acg2Ormu/iMtBkukFkSHkHi3YKQaMJ3qybYTikdkVi:2OrmCZ3DkFkti3UsWDI","tlshash":"92252366bba4d916ce7cfbb043f61b84b2b5cc395b0b57af8066520d5dc87a1b4871c0","first_seen":"2026-09-05T10:01:03.233977Z","last_seen":"2026-09-05T10:01:03.233977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/consent-tracking-api/v0.1/consent-tracking-api.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.444Z","timestamp":1788602386444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shopifycloud/consent-tracking-api/v0.1/consent-tracking-api.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7169\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Fbk%2BtVQxKA2buANPhj1eIaJ12WjWLAFoD0c2ac3g4i1WNx39uiO69v4o84NKPMSz3dZM6gc5D4YiX6FJ8S6FJzfpGZhdEVqIpJXCXd1EQ3ZsgCSS4LRxUWVjj97wAms1Q%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1800, must-revalidate\r\nlast-modified: Sat, 05 Sep 2026 09:56:50 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/consent-tracking-api/v0.1/consent-tracking-api.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: d4fb7435-67d3-44d4-ba48-fafbdaa60ac7-1788602210\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\nage: 175\r\ncf-cache-status: HIT\r\ncf-ray: a36462134e8f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=39.208, imageryFetch;dur=37.883, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22602,"size_decoded":8446,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22552)","md5":"53aa28e4925685a91377d8294b4ac1b3","sha1":"f95f9b06965aa299b4d56aec6ce3c3afb92ddca8","sha256":"ea9c2752def05f39afcca794de1cdf1bed29cbb3b892e62ded14403ac050b3c5","sha512":"d53004d27c48e585ced8c85c6d0184941a859b55653eeb152ae3a57b234514e6ba9d78541274333e59c6d03679afb15a7b19cec9ff0b6cfd2462efc35c9958bb","ssdeep":"384:3qjVYgbXl2FYi+rCK5fHgPOD5ioRd3xYL81CJ+qNASouItOwzUldlZ8Q3zhPyZLR:4YgbXl2ii+rh5fHgPbo7xYL8gJ+qNASu","tlshash":"51a208a976e2f4e407db143545bb9707f37d152a34acd040a3096ec23914a8b937bfad","first_seen":"2026-04-15T08:52:10.615143Z","last_seen":"2026-09-06T13:16:07.569425Z","times_seen":35435,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.751Z","timestamp":1788602383751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-11a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2615827\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIJ5NI1vikw8ANqXU1ZX4bTdSVPiXqv3SaxnqnrvC3oIglsnyLl%2F0fTZ%2BdxabKG6lA7F3ick6xZd2fl0y2sbRPgsBXMRdtV%2BpEp9s1avwk2d3Mu94rQtqP2pe%2Btm3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":1114,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"76c8d2c918e1da023965aacf86d76d5f","sha1":"2b6b66f869bda1be696a8158d6b5b9684a564d6f","sha256":"dc16ffdcc726c94521fa8a665992a9f0305977c9257e4fc9a14bfd64d98bc4f4","sha512":"9a679d04d2857b3c5f13ab7953f3725ad373272f2dbd68b5af1a23d6569fa5e6f2926b00e494367d3a120a4bad94e4d57fc043ed29b150baa9f54a999be7944f","ssdeep":"","tlshash":"29d02bea7175a569d54458f6e0e3176daca0678c973d0a12581edc6cb5f329840d8e00","first_seen":"2025-08-29T01:16:58.605676Z","last_seen":"2026-09-05T10:01:03.235758Z","times_seen":96,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.816Z","timestamp":1788602383816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1d4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2517507\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYj4HgXm4jjoWs53achQSJTe83k03uScOwiDNfVaa3q%2B0iEjlQw%2FGtQGSXQfCrH3t8xluRn2bMvK3g48irXvPPDqWydLsEgSuH8zIluq2hgztzQm4ArLVSGthhmc9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":1296,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"2188024a83c0544c260cafbc8b3422f7","sha1":"f009e680cf73b6131d60babf38bbb509313fb5f2","sha256":"f1aa5be028c8ebd8081e33f8d0b071549740ba9c2f5560b03c68da981ae7ea5f","sha512":"d91733e4b39c7bd53e0c8b16a4a983eb5b059f497a68afa7534e2d907744e5b02a78b1c2d0d55a0738afee7827e81c22f8fdb5d110aa690e5089da0c1cef00c3","ssdeep":"","tlshash":"53f054d332790cace8e38ab415cc0d968c7016704863044b676b68352ced11b8158307","first_seen":"2025-08-29T01:16:58.666227Z","last_seen":"2026-09-05T10:01:03.236718Z","times_seen":99,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/lb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.898Z","timestamp":1788602383898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/lb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1b0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2162578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Keh3jVoKM%2BpxE2OMMXUNqdH9nN6HT9N138fic2RTz2KmqwdgwmaMeD21DVtsHSWahsNIzsTfOh%2BObq1nwp2%2FTrlaPVbTATGbTp3Li4DtdGZqA%2Bd9b6fWtSX66QCYsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462035b6056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":1264,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"15f724966ba265428a26b96a2eea7e98","sha1":"8b5faaddf503f881fef83524b4126683fff6fe8d","sha256":"6cf8508c1b85f73e4ed7f002817b812a8bbb00eb0d11326eafcbbc7f528154a8","sha512":"621e35e4fc7bf7e0a8be7932a08416575c25e8d4c26a34d9adc33a93f4c5e961f63d70dd371c055aae4d0f0989540b5aa9e93cc052fb51dbc0fdcb52caf8c9b9","ssdeep":"","tlshash":"56e0239d1b60983034d35584ef0e2a72f51843c20040207b22179e2e9650885c55c345","first_seen":"2025-08-29T01:16:58.699313Z","last_seen":"2026-09-05T10:01:03.237588Z","times_seen":99,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/li.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.918Z","timestamp":1788602383918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/li.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-18f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 362204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCCvOjV3NG6pj8uZ%2B8XLIJ7pTlpbsy2PrWH6PwqXxtZogHkUPWWmYAPGwmL9Wc9KFVBiOCEY0frJX0BPBIu1jyGR5SweMGSfpE98ECq4UTexmGbqBOkJOMeA3P9%2FGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462037b6756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":399,"size_decoded":1226,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"0d47b9a913411e016d2596d17a86b9c2","sha1":"ee7d2b1c0079732703d375efbb7eb80cde419242","sha256":"973064cdad477f87b25d784fa32294755d712e2d5c7e7b10a3abe9195e1d5ac4","sha512":"abf0290fd98d69b97af056a6a4ce5a64e18e336d2ccb6945951700665949059ff625f025ddc673181970c8bc138dde64c644f4be88d4ca7e8546386c32470572","ssdeep":"","tlshash":"0ce0f1a72ba31c748629959f08681b00e5030078e3f089473119e66eec35aa1d5e8e22","first_seen":"2025-08-29T01:16:58.575138Z","last_seen":"2026-09-05T10:01:03.238437Z","times_seen":103,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.936Z","timestamp":1788602383936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-17b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxXv66syRJb4oKMqcMQsexEnVQWNmYYVWeuATYvjJ5kCEEO2uZIo68kI2DuTV906cJ7Hc0jHAjVnAMnDzokvQHr%2FRedxLdd90UfxEBbjCli4u905%2BPG9R82x%2Bms%2BmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462039b7456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":379,"size_decoded":1210,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"a78fd151402fc3833f27db9c9c6af14e","sha1":"d3eff5804874389f606ca5626588663e58ea2cff","sha256":"8744320da9562820fbca640b0359ba50df507071ce189bd38ea70ae598fd1e79","sha512":"cba5c40f8c67418eb03a9f30bc2ede425037bf4936568190d032bdacd0fce3a19930ad25ba681c5424b09d2c58d41e3eac506bfc3d4c6180a44eb551026bec9c","ssdeep":"","tlshash":"f7e060c3b7992c3dcbcf6e3e0ae001e0c4150f9910300c1b03839a3f43b2c495099584","first_seen":"2025-08-29T01:16:58.570302Z","last_seen":"2026-09-05T10:01:03.239221Z","times_seen":98,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/Screenshot_2026-05-09_at_10.23.16_AM_f39f0b66-78ec-4fca-b722-844d1cd1a63e.png?v=1788221426","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.175Z","timestamp":1788602384175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/Screenshot_2026-05-09_at_10.23.16_AM_f39f0b66-78ec-4fca-b722-844d1cd1a63e.png?v=1788221426 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78342\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sat, 05 Sep 2026 09:59:44 GMT\r\nsource-length: 2211330\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGwi9C9ujIdSfzKV128sebNgUY1hpmib5SAdz8V62W9f1s4lAwGCKcME%2FF0UJ25GwQjlaK5dUm%2F5fleIxgvnXeDDFTiMpYac7W%2FnRuTEfB2venkGvtq%2FSGxzdaCQhf8%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 15d240bd-2adf-4fd7-9e96-1fac7d199e06-1788221728\r\nserver: cloudflare\r\npriority: u=5,i\r\nage: 380655\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a364620518c8569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=251.092, imageryFetch;dur=56.059, imageryProcess;dur=193.992;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78342,"size_decoded":79580,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3189773a59b10fe707bf6453ee512ce","sha1":"8d615a54c6b76d297e6888226d07142a2056ff31","sha256":"e79ac84ff2fc67f0355906201fdbb286817172c1abd7c3a81bb81e20f76fd609","sha512":"1af3e4bc42354cd3a6036d98d516298dcf5f1f80fe6f3c9cdd22346c6de726c3249ff5be12018995cc6b8c90aa6ded314125df91432b1d7e161c7040cabe6683","ssdeep":"1536:SjnZ7iJvj155A0ztcY8SyiUuJ7MZunm5Huf1TPATe6RDK+HCuuiWbO6xX:SjZSj15q0ztcY8SpUOYZ15WT4T5RDKIW","tlshash":"e3730234ef6a3c90e586357df9ce817715242c5de893e8a9f3cbf19bc6728543688a40","first_seen":"2026-09-05T10:01:03.240117Z","last_seen":"2026-09-05T10:01:03.240117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.init_CBgoSaqI.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.027Z","timestamp":1788602386027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.init_CBgoSaqI.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 401\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Sep 2026 16:24:10 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.init_CBgoSaqI.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zi0JCi13PImxbX6i0ZFrmQ8G9Cerwjr1BONnQV0%2B%2B0MAJvdMD5tXP%2F0b3Is4AQlv8LtJcqZlKIznXZI0uVHQFU08a9iz0tVYB3qf7lkLUj8NBmwRUg8qngqp60%2FoJTlMng%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: ca518209-dfbe-4ac7-bb98-bc9f616bacf2-1788452650\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 149735\r\ncf-cache-status: HIT\r\ncf-ray: a3646210af432678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=124.362, imageryFetch;dur=123.926, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":672,"size_decoded":1611,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (619)","md5":"498330ede3a0317f0fb9377c8aea0683","sha1":"ccc48b66c0ea96b2054d9e57508051f7b1580fe2","sha256":"d728ef0c2c30f54db128533597aa60e5cb140eaa96bc542b25e697caf8f09425","sha512":"545fa5da5e4ed17154b37cbccae19bbfbae83950f67853935ffb55d666a5eafa8e41a13db8aca07e10a36cf169e848ec79e25a76498ef2eeb229be97dab2d483","ssdeep":"","tlshash":"170144fef797ecf18ad29cb8c0270127103d3392758a411c52fd4d90182a25b552e92e","first_seen":"2026-09-03T16:26:38.550575Z","last_seen":"2026-09-06T11:36:39.568723Z","times_seen":477,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.433Z","timestamp":1788602386433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20496823\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-20496822/20496823\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0%2FjpMsD8ftTK5WfKwmwjtffgsTpu3yeqyuGjNXF2VFe5LoBmj5ah0lQjJX7%2BbDLOLF2dtpUG5hsf7KoOMp5Sb9NHvEA%2Fo8eV4qERo9f464iVo0IVdf0Jcp200bJbuk%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fe8c3da5-c6cd-4e6f-b923-62d9b798aab8-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e75569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=505.798, imageryFetch;dur=505.421, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3072894,"size_decoded":3074600,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b309f2626ddb71207161e19c67a6b48f","sha1":"ac7270c6deb7a782bc101d3571c67b91df963682","sha256":"405fa375afd3cfa3610475c3fa52446252d93cf32ea3cca57361812572cdc563","sha512":"98a359dba93d58bc6d260848b075c699b475bcc4f0a59d8d5bbd0508637a37e36a8f6b956a35cf54304a06c7fa7279ecfa1edae8ece7d8dd0dda787d28b50428","ssdeep":"24576:VRW08ASQ3ioSfC48tHsJ5cAD+/J3M2hGFGl2JcZCy:4RjojIeMkJchG8ccy","tlshash":"6b25228ef7a9915bda641770a6ed93d377bac0a40737460b886c034cedc3b5c52e62e1","first_seen":"2026-09-05T10:01:03.232811Z","last_seen":"2026-09-05T10:01:03.232811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.zigpoll.com/zigpoll-shopify-embed.js?shop=igkqfc-ff.myshopify.com","fqdn":"cdn.zigpoll.com","domain":"zigpoll.com","tld":"com"},"ip":{"addr":"172.66.42.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.576Z","timestamp":1788602383576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zigpoll.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 23:40:43 GMT","end":"Thu, 03 Dec 2026 00:40:33 GMT"},"fingerprint":{"sha1":"62:28:93:82:80:D8:09:D9:61:8B:9B:60:17:E3:86:C0:64:A1:32:21","sha256":"D4:25:B9:46:F0:5B:5B:E7:34:A9:E9:7B:00:F3:17:EC:A4:E3:BB:6B:62:FC:E0:33:FC:80:B3:F7:6D:9C:E3:15"}}},"request":{"raw":"GET /zigpoll-shopify-embed.js?shop=igkqfc-ff.myshopify.com HTTP/1.1\r\nHost: cdn.zigpoll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 29 Aug 2026 13:41:45 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=60, must-revalidate\r\ncontent-encoding: gzip\r\netag: W/\"1291e4dea96ca8459987523032a8c0a0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 52d728b518bc6bfa3eb88710421b6f20.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: WozrePGjCmjXW2qVXJ0U7jxqkaSN9o-kjQWb7kvyGVQzy9LEQGZJlg==\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a36462017a195ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3208,"size_decoded":1922,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3208), with no line terminators","md5":"1291e4dea96ca8459987523032a8c0a0","sha1":"d5b30ee6e3e7c6efbc77f743e23054be5fbf7cdd","sha256":"30e28f6922196c251ba2193dadb232c990293ea5795ca9898f1dbc32e957c909","sha512":"a0b39cf8013f16dced4350f6e931b65f45d612c64f234e31fdba65e4069244765df9ee6cf63bd79c849fa0b0ebdb7358575f29361695921391696e40bb7018cc","ssdeep":"","tlshash":"f56165d65012fb7752e55868abcfa711b0f5762e3a20c443621ccb2d3428cbbf259dc1","first_seen":"2026-08-30T08:47:35.192391Z","last_seen":"2026-09-06T05:16:55.794921Z","times_seen":4,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":2,"connect":11,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ck.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.769Z","timestamp":1788602383769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ck.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-30d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwxsj3QSqi0XO2KZwRBiuPPsCVUCube3v1Mb6z9ejFe80JTZf0C%2Fm3nDGCa5mwwLH4LByii9Oky2wXVvuR7ICDGDhDMI8huEeJCYeBvSE6Ua9bFJ4AJCbCXHKsUVSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462028b0f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 781\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":1606,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a7c952efea2316d31108ee8f69c5379f","sha1":"5f8ab54492d3cb2657cbf04212367dde37cd58ae","sha256":"91121eab433ebe3e51c429af55f92aed36135629a9339f319683ea783cf30237","sha512":"774a6568d6345f34ca6c71f6a52d37d93fd2d17baedd29cabcf3c078f027f6715760db8ddb6188396e1e54c1f9ce9a84aa7e0209f060ef39463ec8e432e566e1","ssdeep":"","tlshash":"9401baf79d459c04e725a163c1a92e98e730040c16a30dfc04c0b6dfd294714a2063fb","first_seen":"2025-08-29T01:16:58.557217Z","last_seen":"2026-09-05T10:01:03.242076Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.833Z","timestamp":1788602383833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-42e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 359159\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVajpvQEgvlA9hbv7jL4QeHs1Bxy%2FTRQtFTjMIO2zK6MqaEUVW5XoB10vy6anrF82XRq%2BF7XoqQnM1dBTbd%2FrjhjCDaEITnvFa0fNXFtzu%2FHO3KTPEjr5LFXP3PC8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202fb3b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1070\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1070,"size_decoded":1904,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"7aa215b076962b1d75f676d44d9aed62","sha1":"63fdbd73707765217990ef079a7aae4d16db6984","sha256":"1dddcb6150bc6787b8e1f014710a43a029ccb4b6a9fe1a75a155bc8283159f36","sha512":"c3393876576ef282dc5d4dc206d3eb73d1ee843b96269c6b876fec9ac5e8040297d425e03914ca8403c5553148aa587295695f0f21596138a7ae67a875df55ea","ssdeep":"","tlshash":"9b11e9465e6b44c0c4bad9b513fe500b528287367bb06baaf889c456441720688d195b","first_seen":"2025-08-29T01:16:58.620922Z","last_seen":"2026-09-05T10:01:03.243079Z","times_seen":99,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.007Z","timestamp":1788602384007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-162\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdIi8yUgY3cunx2SMr464vjSyFXkMDi21isnrF7%2BgLGBmsy5DkLshfbrgCRyHTxhBg5rCIQYHTH9QTiVtCwpftQhxU07FDyiOAIQTRmGgpp6e%2BdlXVdVIk4ndOuIjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462040ba956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354,"size_decoded":1181,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"43c4d92355ba817ad8fd382fed0bdd6e","sha1":"1c4aacc5c2eae562b0513eb03e5693cb42e17673","sha256":"a99506c879dd6e6d86d9b75e79ff9ec63c1ff7948906ac9b91c8b0e09390f5d5","sha512":"4a837394998cd32412cd1ada9da21198434a187811a081cca2750397e3f5e5ef6eba51ebf95dd477d0378c92b56978ba6fb7f3247872d8a546ffba80b3e70080","ssdeep":"","tlshash":"5fe0c0b385c81f6aeacf17934d79e131886301bad239d7591922a6b1197c2c804dd723","first_seen":"2025-07-08T00:55:32.382707Z","last_seen":"2026-09-05T10:01:03.243942Z","times_seen":188,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.045Z","timestamp":1788602384045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-12b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2162578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCj5NhD%2FZPbC4lIIQielpB5yG210vrja277kdjhZ5DfUMw1KEa1bljio80IFLPluCTsy6K7dMaS8XhgXjD2IvgJJNqMXyI1R%2BymbOO5MoWTj0UeX04BOEa3Uwvnr4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462044bc056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 299\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299,"size_decoded":1127,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"69b183fc5b1a6ab2c5de3c58d4ccf0c8","sha1":"abe9b6dbce93bbd104690185626289f8e4c8fdc7","sha256":"8a64e056f6a0dd1b7e22ba1cd9cb511c7247264b0715d836ae734f622b4a3e87","sha512":"f48109332601a4be366c685a40973a5252a9f7efaa014cd2d885e343594fa3ec062070f168d6ea4dd8dd4717d732c8434f212ea7b794a566ea187193906c6243","ssdeep":"","tlshash":"68e0e7f5272c5d08867502534c98d860f51632ce6b365003030f444cda397c4d554113","first_seen":"2025-08-29T01:16:58.528244Z","last_seen":"2026-09-05T10:01:03.244471Z","times_seen":98,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-accessibility.avada.io/scripttag/sea-accessibility.min.js?v=1788602386854","fqdn":"cdn-accessibility.avada.io","domain":"avada.io","tld":"io"},"ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.877Z","timestamp":1788602386877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-accessibility.avada.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 16:09:19 GMT","end":"Thu, 22 Oct 2026 17:05:18 GMT"},"fingerprint":{"sha1":"96:21:05:71:CA:22:5E:9D:15:9B:F3:84:8E:00:80:50:AF:3B:17:CB","sha256":"E0:AE:C1:D4:8F:18:17:EB:0A:A9:80:81:6C:80:F5:0B:EC:2A:C0:72:FE:45:7F:1C:4E:AD:C7:AC:73:04:E5:22"}}},"request":{"raw":"GET /scripttag/sea-accessibility.min.js?v=1788602386854 HTTP/1.1\r\nHost: cdn-accessibility.avada.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fl4b9lbFQElIjEJ9Qq6CG5jT9s5kjBnv3HchFtPjRYZc1SFd5PushbZnPyudZ12Uum8Vn7LXQJDzVrM6HSvoIEO82GHemscGYWO8DmYm2SDbXqqaarrqnZ98TEgIa3P6Vumor0cv6muA9VMaEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"78d4a14f6b6347fcb352ca6891df7d56\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15552000\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: a36462160ce21525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178060,"size_decoded":54974,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60317), with no line terminators","md5":"017026fe9dcabf36c3ecefabbb34bfc0","sha1":"3f33389d8218341cf0b0785fc9a847550572ad32","sha256":"e8375c9984876787c2a505b15e1b6d8fdf2fbcbd5a22d12dc75a18c9fcd871e3","sha512":"1776951312231cb45dbef967b62b6dc4726a95eb23efef237f5d3e2412465294b234aae22f6f1718a56ff77d1273bfc330120007ad9bcccc78222c1fea00de8b","ssdeep":"1536:WJihLerVoZDfRv9ZLboI5IAs+29Y2JU8BJsB1/O/4x3E8rBLozehk:WJihLerVaR9hLyAs+2C2UY2/mM3E8rS","tlshash":"83044d1bf9ee391503d7a376f48d723542384a69f5a0c0f1ad28c86b25ddf92422af35","first_seen":"2026-09-05T10:01:03.245429Z","last_seen":"2026-09-05T10:01:03.245429Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.alia-prod.com/launcher/users?path=%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026url=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026is_mobile=false\u0026timezone=UTC\u0026country=NO\u0026market=international\u0026language=en\u0026release_tag=v3.8.24\u0026new_session=true","fqdn":"backend.alia-prod.com","domain":"alia-prod.com","tld":"com"},"ip":{"addr":"172.66.145.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.987Z","timestamp":1788602386987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alia-prod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 12:18:35 GMT","end":"Mon, 09 Nov 2026 13:18:33 GMT"},"fingerprint":{"sha1":"75:99:C7:51:00:93:3C:13:35:03:7F:70:5F:85:9C:CD:98:76:67:60","sha256":"8F:D7:CB:F8:E1:CB:62:84:D8:A8:D2:06:D4:C0:9C:43:BD:85:3C:04:48:A7:2E:73:18:D8:94:A0:54:AD:C8:41"}}},"request":{"raw":"POST /launcher/users?path=%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026url=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026is_mobile=false\u0026timezone=UTC\u0026country=NO\u0026market=international\u0026language=en\u0026release_tag=v3.8.24\u0026new_session=true HTTP/1.1\r\nHost: backend.alia-prod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/\r\nx-alia-shop: igkqfc-ff.myshopify.com\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://tryrovina.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-alia-jwt\r\nx-alia-jwt: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsYXN0VXNlcklEIjo3NDM2NjY2ODkwLCJpYXQiOjE3ODg2MDIzODd9.ucBMuo_YIwjw5Y9M8KED6KG5AMXS-lGfE9FXZfeMnDI\r\netag: W/\"c78-Q9IEC/VMEnVEsQZ3fy9yMSj5D3g\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a36462181a33b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":3192,"size_decoded":1988,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"372cac3444b9e46b464e3a2f849fd4ee","sha1":"43d2040bf54c127544b106777f2f723128f90f78","sha256":"af11f8799adc9b1d6268c2267c787d0704e0834398243055411b14e19121350d","sha512":"a73f6ac787a72c53828dfea99009af316ec17fd84591a53e56e241b7245b8de0037b18b45114f36d22c79c89e2b30ffd3eea9aee961053f92aa6a0369098ca7e","ssdeep":"","tlshash":"4561542914089cbe7ec5ca84f8d73d07c69ce43bd5c89424d9d8cf2c82df6ac5251a6b","first_seen":"2026-09-05T10:01:03.2466Z","last_seen":"2026-09-05T10:01:03.2466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.790Z","timestamp":1788602383790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-27a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2354329\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yxk2gJp6ToEjj3lFS3wc6auaFU9YrLE4n%2FaPwHMs84RnecsUmYNh5Xoxak1jpxLYjx7n9ByhwfwsaaPvjwF%2Bnicfna1iCon0fX5AV6PijZfh8fnFd4MJdDtOVRpwcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202ab2056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 634\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":1462,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"9bb9774718847c5facd4480ac21841cb","sha1":"00fbd990f850fc0a0e319762cde09062b5d82dff","sha256":"41cc448712d87ff0207c2dfe57dcda24b21af3db89b8ce51468e0871f36ba0fb","sha512":"706bc137534748ce15361cea75ff30ac1590dd1aa3737acd50f306498d90770830fbed93a33b9554a77b496796daafb702d09971f5d56c51e284fd1e4ab2deca","ssdeep":"","tlshash":"6ff062f62f7aceb8cce263420a48a2cc8e4081e37b96a59613374919e0702600ef8294","first_seen":"2025-08-29T01:16:58.525153Z","last_seen":"2026-09-05T10:01:03.24769Z","times_seen":100,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/et.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.809Z","timestamp":1788602383809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/et.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-23b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNMtx5t7ZKEZVssOLUlJ%2BjnJPAjH0QixsHya%2FUfgrneKx9t1xhNoDXhyMY3reD%2BaY8i3adHc57i3U7dgLHV9SOShZxq903e3UItdG%2BlKJUe6w5FZATKSAbp8%2BYUt2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202cb2556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":571,"size_decoded":1404,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"f2a68e0e4d8b413909906493aaf53a43","sha1":"7b63a775c8ba0b53dca103b6abc36c74f9120cd9","sha256":"5b3ff5e7872066515801cc827688988d998f26ad90a5d6a0145d76a54a1ff909","sha512":"2da648c6dcfdc9209f3206b0790073305e136a0a26338e93ccdd04ac4f61d3476fddcde92e108d902ad1668a1b0512ed1f44ac0bb71cd2f8654f108432d37b55","ssdeep":"","tlshash":"15f096367f3cbe6091eaa13a84d260f2dbd408e07fd90d51019089175cb382892f4112","first_seen":"2025-04-25T03:41:10.123285Z","last_seen":"2026-09-05T10:01:03.248609Z","times_seen":106,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pe.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.977Z","timestamp":1788602383977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pe.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-6b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1632680\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqPWciPK7gKwWtMc60yL%2FPVxFf3ATsDCiIp6e%2BVMrgGG1GQJtbYb9niYXfaY%2BFetuUoDwK2NdlvRTiAh4SnrJJU6BbmEJp%2FOGpt7PCEvZC4MTnpzkueibKo6ZHE%2BNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 107\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107,"size_decoded":940,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 2-bit colormap, non-interlaced","md5":"bc02c208c16541319873cbe0577a0011","sha1":"271984c9fa400f02b49764d0097e605b029b44c5","sha256":"41282776c7f57cd127e6577cbc380f3e252049f976bcf566ee77d4578e50ed57","sha512":"7a506305d708bdfbe2f487d500bd7f990938f2bcca27a40a81128960e9aa9f7df097458f0349c1c990a5a0d70cc2bfa576a50ede8d37970ceb08d3110b9ed8b1","ssdeep":"","tlshash":"b5b012c5f7915cb6c3c05d7362752289a921331513b1850b2006e7202b2828893843c3","first_seen":"2025-08-29T01:16:58.431865Z","last_seen":"2026-09-05T10:01:03.249573Z","times_seen":117,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.982Z","timestamp":1788602383982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-37d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 357894\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JUwXJBozFqdp0M6tZkXvP3tfZs5sb8Syj1SLSpsFtG5Bq5vnBtdlSKp0RclLv3ZFpSObzCaL%2B275%2BPGVJj8maBrJKIRsGwE9Y9VpzuTr5MxBgFAo4cSXL1Md%2Bxxh8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203eb9a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 893\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893,"size_decoded":1722,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"f271c4cf14ad3929231032902b6d384b","sha1":"649a8ee5129a4cfdffadd583f4bc827ce34fc2a1","sha256":"0006bee743a0d81fc4dcea7ae2fdc2bb17e560792b9939fb10ec05d76dd828ef","sha512":"445ad9f02392bf42f593f7aa1c165b8f6c17f866f3d3f5b7d171d9423dca07bbd5be3707dc3afc0e25e9ca320dd7f75b09ebce06dccd17efd8506ce2d63253d7","ssdeep":"","tlshash":"ec11b3ee0e10f91cd31549ea2ebac848f320e1b8160346622a18cf53a402e91a081593","first_seen":"2025-08-29T01:16:58.445561Z","last_seen":"2026-09-05T10:01:03.250594Z","times_seen":252,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/client.shop-cart-sync_CjCQxSNu.en.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.032Z","timestamp":1788602386032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/client.shop-cart-sync_CjCQxSNu.en.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2673\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Sep 2026 16:24:27 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/client.shop-cart-sync_CjCQxSNu.en.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKBzm7%2FeNjjJbgIsPxMh%2BrKmUYXC2UkmtH2hPM%2BDka36kWckaPA4kQbQ30hh%2BuyugGuRNR0CVb4eH4%2BXaZUvqpVlY%2FXBG4JvFDpeSDF0cQN%2FuhXHvYW5GICRpS1tn4SyUw%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: b454497c-8c85-499d-af7e-9a4a214cd9a7-1788452666\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 149718\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf492678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=100.824, imageryFetch;dur=99.978, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7355,"size_decoded":3903,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7288)","md5":"d487bc8e76242d3195f74aa9d52cb7b1","sha1":"2e618a137c6ad15ecc4154c3358790646f7b7411","sha256":"fc3471608ce87c4eb5d33af942f06738b9fb64eb104e41bc21de626c295ce888","sha512":"c551b953fb2ad8278386594e7c713b59e9549611baa48b697084c025b2a8bc36c5bb5212235792bba92fc35c58dd6698e7ae99c412b6885b31dabc5bfb086fdb","ssdeep":"192:IVPETeH4pxeA5NjbgK1Yex1NocoOEGdIrJe9RSr:I1ETeOxeA5Njhiex1No0EeI9e98r","tlshash":"91e1d8aab581eab14643c9fd9072121461283e1478d6c0a0c3be8bd52e9b1cbe775f1d","first_seen":"2026-09-03T16:26:38.56399Z","last_seen":"2026-09-06T11:36:39.599007Z","times_seen":375,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/am.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.700Z","timestamp":1788602383700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/am.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-79\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2604218\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IQl7N3LVfmlcYS3lxumq5YGygs21xrt2CYIiX994uS%2B8kcug3ZbC2Q%2Bgan894QugojR7UcFbsHAYLQ2grMtcOMCEntz7rLW76Wwd%2FN969VKczK0gwC%2BYhc4ZviuKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462022ae356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 121\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":952,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"82f7a14d94b7ceddeab5bd6e57dd11e1","sha1":"20807ff6fe5d15fab28792b54a13c466e3c6d000","sha256":"3db065ffb4f32c40b721beef135ac748c8bf8ec92f5aacf86ea4901e0e9f2c8c","sha512":"c3935f26b71e6025f0bd5b89b28a35bd3c172dd7a2ac75a23ae0e5930e832bd95b210e039c1838b417e70904a8aee2accbee5b48ac9f2be530e55cb224889093","ssdeep":"","tlshash":"e6b09be3f3e45c51c773513655144015dd331099452745570943d571075127f78975a3","first_seen":"2025-03-09T09:20:42.224928Z","last_seen":"2026-09-05T10:01:03.252097Z","times_seen":106,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.714Z","timestamp":1788602383714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-149\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591670\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kYoqokExk1a0Q4t%2FrfuUIxdA4BpLsrne6%2Bw8wb14R4m8OdT9XMd7A7yeu3CcZ1d67%2FHPHejcsXeVwUhnUKZTjUClCIztCYzKrjaW8LECHBivVMi0P1jF3lFQjHp4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462023aeb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 329\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329,"size_decoded":1158,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"44a58be8e7262c472c8277621b1adbcb","sha1":"04935796fa9042f1e485f9107e8c78a925651b80","sha256":"71cb00a8b7070d702abdc8a98d8c5f68b66b1c500b7730c56fc5c6070174b84d","sha512":"4bc34fb3330fd41bc7431a5182b935edb5937129cfbee2e5f2dc5c5bf6c55a179f97586d922695e4753b782bd7fa6dc0634ed804245693255fd64c8d037a184c","ssdeep":"","tlshash":"cee02de26aad9c30d0b2662b5e6c6eab48740008855f1d01922b183f4210a4cf31a262","first_seen":"2025-08-29T01:16:58.555314Z","last_seen":"2026-09-05T10:01:03.253076Z","times_seen":102,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ml.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.932Z","timestamp":1788602383932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ml.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 357894\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJRUHQk7dGh9pEQPVy24ruiEdA66lqWHcEnej2XkVXHcU3cBdVl4Y8rp2JcLmEyeVVuRiKULuIkdNXwT1sE9EYP9wjob1XCv6HfwaP5cGrdDcWAY%2B2HAoZN2A4ZYVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462039b7056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 123\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123,"size_decoded":947,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"ddfdbaf0514db57b9a36cc8c3fb74b1b","sha1":"cf3bdd9acc526faec3b44e3cfda69a079c9ff71c","sha256":"a70210ab927c180381cd122ee32f65b4612fa69f641b5fb04d17deeb96779ebe","sha512":"aaa87a6713794bba8307df294234f0d6298d9c421035919dc3a3c142d319a8c6da957f102d889205ba648b35f60455cca23268af00ca087ad70fe19fa05d044c","ssdeep":"","tlshash":"d6b012f352944f39dfcbe57383a462d1f9b6031e223c335a2942576d094650a634cd53","first_seen":"2025-08-29T01:16:58.569312Z","last_seen":"2026-09-05T10:01:03.254409Z","times_seen":96,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/om.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.970Z","timestamp":1788602383970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/om.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-105\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511926\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqEV8aTGekGi5mXGmuztDAUM6hAMJTw7omc6ssFm7OktoSQzt6iznRZXgyuuljcCulwVZhedIwqWUcAyc8hb6%2FBM2CTLf2c3MGB2gCZVOppNIGg1k3kkohwD7IPP5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb9056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 261\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":1086,"mime_type":"image/png","magic":"PNG image data, 80 x 46, 4-bit colormap, non-interlaced","md5":"d9f8f17a286224cdbb666f54d3989e5a","sha1":"3eec76af1249cda4a2d7616a708632db5731a168","sha256":"c2edcf47f4d0e9b20bcd23a373ed494eb0a0c5dca3d49905966c419be0511bb2","sha512":"029c8331a8db6fe1604ef5fcbb815deb6d6e628334ba9932afcc6981562c8fa614fc60e542b8391771e7e74e2375a980c8ed8d4a516b3478bb07f2fef0975a2f","ssdeep":"","tlshash":"87d02b97d3c96c70c548807392640a647957030db2454f9f8513ae5e58521004a6aa62","first_seen":"2025-08-29T01:16:58.697418Z","last_seen":"2026-09-05T10:01:03.255432Z","times_seen":103,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.999Z","timestamp":1788602383999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-236\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jbOoDYVtcvDbSV84B%2Bh0sK231chBD2HvcI9NgzbX58Jb5EX7fr9X1A1Wn9Q6DDalhcvhWvL4F79PJG0i3tFxplCTMF7LUBbMVaLu7d2nEFea3anC48FU2MBoZSLISQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203fba456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":1391,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"8a0bc3befb437fa4f01d94a786317e4c","sha1":"131f5a4b91f2ed354fba998879e3e969e2e21eca","sha256":"279bc6e2da48470081c4c754c9c6b880465fa425d70319fcc786b06a4e01821b","sha512":"b58757060dacd2c9b8e1e6506c7b53b9e53101efd63b61763c680b56adf37fdb04a05eb881a9a9a51e0ce35591a020d4e524b23872b5a726b2e529d69a33aced","ssdeep":"","tlshash":"b9f0e1c969b2992451d0c5c44eaa6b0128f2461750e4a44ea843516d29be4b964df568","first_seen":"2025-07-08T00:55:32.465121Z","last_seen":"2026-09-05T10:01:03.256302Z","times_seen":161,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/s/trekkie.storefront.ce2a643c30d67cd7b828f2dda8cfc17d1d88fbb5.min.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.552Z","timestamp":1788602385552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/s/trekkie.storefront.ce2a643c30d67cd7b828f2dda8cfc17d1d88fbb5.min.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29583\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E94SQqZnTEFhavQKKGt%2FSEa6jlY7g4enxG8ow1hKjW93hB90GIGpkgfDtAYKv9BdEVdnSbRtIFZUuNRH8MMwZXkiv3B477xg%2BiV%2BGnSTNkv0qxfq4nOUrCnwahpVnkdaiQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 04 Sep 2026 18:33:20 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/s/trekkie.storefront.ce2a643c30d67cd7b828f2dda8cfc17d1d88fbb5.min.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 684d9f1e-cebc-4971-9718-e2bb590be73e-1788546798\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 55586\r\nx-download-options: noopen\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a364620db8b9569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=135.192, imageryFetch;dur=130.877, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117335,"size_decoded":30894,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"21395db23ffefb3e4cd73ac9c5d1ee33","sha1":"05f86253352f3a02990775c7993d0d22998ff191","sha256":"891f4c7be533a1ff42010d2c573380af750c36a64c48515e661d544877162773","sha512":"3fdcec4eadd503157309ed5564d803f8999ade9110af8de8e08005be0a65bf938433b2aacd0890ae68e705ff32c6692b15088ac24752f7b0e0b653fa050735f5","ssdeep":"1536:89Vj8K0t12smMK7BV9DOHfZwBjwx74M8/hFrRb9zR6WPht9G3KLqYMegCjgH8:O+Qu4F3198WPe86eg0b","tlshash":"7cb3f8c9f1a2b4b003e354b5453f6206f33a7a6e60589064b34aede22c6464b9377f7d","first_seen":"2026-09-04T19:09:52.288795Z","last_seen":"2026-09-06T13:16:07.548604Z","times_seen":329,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/checkouts/internal/preloads.js?locale=en-NO\u0026default_configuration_id=3545039069","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.543Z","timestamp":1788602383543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /checkouts/internal/preloads.js?locale=en-NO\u0026default_configuration_id=3545039069 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate\r\nstrict-transport-security: max-age=7889238\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Z8yWW22tesdCNGFtkbTf12WtlL5MrnjBrIOyuOOF4kjNnj2E3RxTOzsE481eYHG7BPgccGjHdOVQBJYjz8ZU8XtNLkyPJ3%2FU5FllX27I8uhWTYyCv2DsRDK5w%2ByAbw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: none\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a36462012d50569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12701,"size_decoded":4124,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7653)","md5":"2e9c086bbeb4518511115e03ec09300c","sha1":"bba8ed819765f6396dddedc0a8875dc9a05a1fab","sha256":"a4d19fa832e1d4f83aef819f0601bfd99baf087e11a4076cf90f7188ba676fb2","sha512":"bfa8b1107c5cda5f40152063ebb2e71a506f6ba9a848200eff5948cb7ddb030d7ca96192e5b01ee8c76dc6ac5c680828c7326c0647137058ce0e4d977765965c","ssdeep":"192:qh76o1UD9BpoSybsAS65SmcKIGcQfpI7+Ibk6xr:q4o1ipoSwSmcHGcgpvBW","tlshash":"22426600045b97ed2ca638346d7665c0a2604607af26caf973ee037c7b56b7a08dfd76","first_seen":"2026-09-05T10:01:03.25734Z","last_seen":"2026-09-05T10:01:03.25734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.010Z","timestamp":1788602384010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-20c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2522811\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGWiYcDyvbzFoAuuBZDdLF%2Fn7vndnd6mm9ApcdmOjl8w9oIXM7%2FO7tl0h3xhTf%2FiuFyJ7sUADheHAVBdFWeto1tg%2FkXttqDHKDs2UCWKorzt7axC8Hqae4d%2BAFzCiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462040bab56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":1358,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"f03fa6ad39be47bef349adea66f83bfa","sha1":"4cee77301694f05748d35edfbf73082406d7d4d4","sha256":"bfb0ce5b40660048a0e13fdc9089c26d872a4cc41f709065276b80bc15fca0ca","sha512":"dc86cb6b808614569c4a9199a5c3714cbb60ea6fbd067bfa34cdd2f12f679ed83f4d5a8b9481ce2c968ec067a5026335a6fdd56fdae405e56be2a8b4dac7d0f8","ssdeep":"","tlshash":"02f075d252321fae86f6b1a3e91250c0e86cc4ee41dd21151c7bbc250cc0c71ccc3022","first_seen":"2025-07-08T00:55:32.39091Z","last_seen":"2026-09-05T10:01:03.258207Z","times_seen":153,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.063Z","timestamp":1788602384063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-c0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mug%2Fb%2F1NR0xXltzkfYYyXGpXYFLf78d4lY22G9WHO0tqgGMwsnuToSUBHjRaNU%2Fb2evXFYs23OBEP5VheEiyEGAXL%2B5VFHUa04j%2BwKLP7wufdJDqo6gsf0G2isHgNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462046bc356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 192\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192,"size_decoded":1024,"mime_type":"image/png","magic":"PNG image data, 80 x 58, 4-bit colormap, non-interlaced","md5":"3afab54f2d4f9c42b9532c2c95806b5f","sha1":"0dfd3cedb2b093a6b8451d3d41da81fa7da2e9c3","sha256":"f58edc8912be7c7f5a462809dae326895a9b529bd841475a4aedf0ccf26e6d7f","sha512":"3aa16cd52d0e9c1944e8af08a6e5a8c7c4f030f77fb2ad117ff3159a0bceb22bf87b912a54f71838a87cb3783fdb513d8cc90b426a429c46915653b7e5a16dc5","ssdeep":"","tlshash":"17c022d3f3110fbbf2b90072224c0aa0841b0a2e1bb8200a242ec4e9105001491c024b","first_seen":"2025-07-08T00:55:32.394227Z","last_seen":"2026-09-05T10:01:03.206609Z","times_seen":243,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/uz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.137Z","timestamp":1788602384137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/uz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-f2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psS8%2FK2sFgfVS5zNJmLAX3MzaV6brShTdeMPTTST61s%2FePHqpufs4l9mIpxt4wmQPJr11oLJ8TAwkHgGu%2BvxEW0yjgnSJNmz8VIrOqdEP2QSYjFBr%2FRdRAb4lcBi6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204dbdd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242,"size_decoded":1072,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"511f285a7faf41089ca94340d5bb9309","sha1":"7d6335014fd271538cd7f681779e52e8c5a1ddd4","sha256":"25570b17f4a0c3ae9de90db0714fe74e1efb87963cdbf143587df2aec36a6e10","sha512":"4ba0ef46cc38291e88a5b169887151f13c05be34dd301e98ddbf6573526812f05a31e90ca4481bbbd3b7d4ac7ed603ce679d1ce5d72594fcd7353f4f9a2227a7","ssdeep":"","tlshash":"efd095f2fb515f341b80a02dd00c005d9b3c43459213c1ecc46e542c041371c21444f1","first_seen":"2025-08-29T01:16:58.521733Z","last_seen":"2026-09-05T10:01:03.258649Z","times_seen":105,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.alia-prod.com/public/launcher.js?shopifyUrl=igkqfc-ff.myshopify.com","fqdn":"backend.alia-prod.com","domain":"alia-prod.com","tld":"com"},"ip":{"addr":"172.66.145.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.322Z","timestamp":1788602386322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alia-prod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 12:18:35 GMT","end":"Mon, 09 Nov 2026 13:18:33 GMT"},"fingerprint":{"sha1":"75:99:C7:51:00:93:3C:13:35:03:7F:70:5F:85:9C:CD:98:76:67:60","sha256":"8F:D7:CB:F8:E1:CB:62:84:D8:A8:D2:06:D4:C0:9C:43:BD:85:3C:04:48:A7:2E:73:18:D8:94:A0:54:AD:C8:41"}}},"request":{"raw":"GET /public/launcher.js?shopifyUrl=igkqfc-ff.myshopify.com HTTP/1.1\r\nHost: backend.alia-prod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=14400\r\netag: W/\"8c81-f6/MwU8goXnebDnUyk3tvK1Ahig\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 google\r\ncf-cache-status: EXPIRED\r\ncf-ray: a364621308b3dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":35969,"size_decoded":13180,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21773)","md5":"430e3486a40665a409c365ebcf42d025","sha1":"7fafccc14f20a179de6c39d4ca4dedbcad408628","sha256":"7f015353cd0c1a54b5c50ae6df747f41391c2ab30df9cc5f4a59e6099710f73f","sha512":"8c81970f12036dcd2aa5d028baeb899c7003be33692aad33b8c951c1f6738a65b43d042b82aef5d1b8486b3155fc792cfe261075bd0305ebcd3d9c755146d0b0","ssdeep":"768:G3cQsT1pA+xlDPBMb3McuwfUgY9R/SKy9yWPNBNjUvPW/NDU9tjrFdtUrqR71eeJ:G3aHwIDopCgNuz","tlshash":"f5f2d88db1fbb125a3e254f9507b0009b13c6e203849c480f0adad9e7a7ad5586b7f7d","first_seen":"2026-09-05T10:01:03.25956Z","last_seen":"2026-09-05T10:01:03.25956Z","times_seen":1,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":30,"connect":27,"send":0,"wait":166,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.439Z","timestamp":1788602386439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 31529835\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-31529834/31529835\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVYde36edDKoNIXmieybt%2F%2F74NvRV9EpSmaxaWC%2FYDl894LWsdX54z29B9dm9B7cXNNgB7AZJAgcnuLUovPl6ISAj33U5hVptJNr04QLpvrYyDdiYBQVxtFN%2FmHmrXU%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 3f06efda-f997-443e-8d10-4ba597ad1c6f-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462133e84569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=645.631, imageryFetch;dur=584.892, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3449376,"size_decoded":3451084,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f6cd289b36c0c980b73509ed79642ad3","sha1":"e8141c0b0a98a57c58d9f75e63812536489bedae","sha256":"7b412d10da6a93ab295360a312e5120b48ba6d5c7e8866ae95cf2fafc3ff6988","sha512":"00487243c8632620a7f06b0894d6acc2d55e695f49a2ec60edeb448ebf8e6e345c6e52de47f404d5ab7079354af13b605f830cd0b8ac9ecddeda61878c127fa1","ssdeep":"24576:BHQ7FHQkXbkwF2q9LGmmHJFzbTRwiBZigQ+Lv5MvFfGYGA/u3:q7FHQkXbkwFH96muJVH1YgQWevFuoS","tlshash":"f025235df314422bda3557b01ee99785b3b9d0b1931b0b3e0aad63189fd93ac3c49ac4","first_seen":"2026-09-05T10:01:03.260764Z","last_seen":"2026-09-05T10:01:03.260764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/fo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.811Z","timestamp":1788602383811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/fo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-bc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2623725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OX%2BjNCMFb1fEQKAbHNhuqYMV2qKCSXEb3VhcOKAyOa1Y4XLAk%2B8BjCGNeXwy1N4L%2FD9XrfJYyAl0LNB0u57vRrUw6lhxXlBrfNEv%2Fhse6YlkX3dGqZZdYob31Ni4qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188,"size_decoded":1019,"mime_type":"image/png","magic":"PNG image data, 80 x 58, 4-bit colormap, non-interlaced","md5":"bcac5e8ed62f02c250e027143b2cf17d","sha1":"bffe342e877b227c1d654807224d921fe5871274","sha256":"fb9d2d8424d9bf9993c0df44c9bd24f9374e21f0500d5c32523b4ebb782a2d1c","sha512":"0f14ed4b65d9592993db036b5e721a5e8f02f89bfdb8e02e92c035b308f02a4985c67abd875df9aadf4b9f71ba133911cacbb09dd9f3dd9c7b0150979b5c282b","ssdeep":"","tlshash":"d4c022e1a2070fbd49e99024054012c0e53b08309225160e200c992a2425f0b91802c2","first_seen":"2025-08-29T01:16:58.559676Z","last_seen":"2026-09-05T10:01:03.261766Z","times_seen":100,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/lc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.034Z","timestamp":1788602384034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/lc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1f3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 290531\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6M53Ejiph3e2NGy5rENB3CddUOdm%2B1%2BkhiuyWVznKnYb8TwgHH3v9eud%2BwBxlcKyHFPj6yOWbCNpDOz%2BrVtyO4x6%2FXTFWypyeSY%2BDrEzt4%2BeukRkPCRLjjjQnduKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462043bbb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 499\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499,"size_decoded":1336,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"114a04cda6d4ee203891a116da720bc0","sha1":"a6e9d2a1b59d23821d7b4200c0eee3a4c92869ae","sha256":"605f03273666ac06127e1b9342e81725be525f4674397787951146d471ce32b5","sha512":"05ee336a81ce3d5a9971a29879a7773abd0a91e9cf2ec7565232525547bc06c77d2afd7b63f618a8b278b2387176159323b3e667f35bd0328ebbd88485716583","ssdeep":"","tlshash":"05f0057371aa5638c9471c25c0c7659746c4af4829f1044421111d76d353ece82c458c","first_seen":"2025-08-29T01:16:58.698324Z","last_seen":"2026-09-05T10:01:03.262697Z","times_seen":99,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.config-security.com/first?host=igkqfc-ff.myshopify.com\u0026plat=SHOPIFY","fqdn":"api.config-security.com","domain":"config-security.com","tld":"com"},"ip":{"addr":"34.149.60.135","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.430Z","timestamp":1788602385430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.config-security.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 07:15:04 GMT","end":"Wed, 04 Nov 2026 08:08:17 GMT"},"fingerprint":{"sha1":"F6:56:AC:38:48:9E:2E:F8:3E:44:53:FC:6C:EB:21:15:A7:B8:AD:11","sha256":"43:B6:A6:19:A7:47:87:37:34:01:7E:A6:65:7F:5D:4A:06:DC:2A:22:60:F4:1D:67:7F:F5:7F:52:D8:07:AC:EC"}}},"request":{"raw":"GET /first?host=igkqfc-ff.myshopify.com\u0026plat=SHOPIFY HTTP/1.1\r\nHost: api.config-security.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nx-tw-trace-id: 0e0c7865b52fe06b50f2d8cd0bb663d8\r\ncontent-encoding: br\r\nvia: 1.1 google\r\ndate: Fri, 04 Sep 2026 14:08:44 GMT\r\netag: W/\"25efa-jY4yt6Fe1SOFyawIuAW5x8q0I34\"\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-length: 53194\r\nage: 71461\r\ncache-control: public,max-age=86400\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":155386,"size_decoded":53624,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4da5caf74e19321bca8b3f29164e6ff4","sha1":"8d8e32b7a15ed52385c9ac08b805b9c7cab4237e","sha256":"33b01c661fdbebe0817ed7e03909d060b4b13c38f55acbb86e7953873bfb628b","sha512":"ee817b454731b025afe95902edd087075df64c709b3529b78bffef963d3db9b7a845c65e9ce76ccc5eea20ca82b106df39e1d5a7fa4fba6602a47504729b2957","ssdeep":"1536:tcMDqDVHcNdYlpE4jQ2/dXfMMvDQQsyjrw/4ORERw/uocm5qRV13Cbcp/m/q2aAH:tcMWdcNaE419h1RFmIVWckvax8UGkThK","tlshash":"e6e3c9c97ac3f04d8257e9a8227fa2dbf46f1da6245c7002e592ec923974339d5a3d34","first_seen":"2026-09-01T15:58:50.226184Z","last_seen":"2026-09-06T08:49:10.200439Z","times_seen":78,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":14,"receive":18,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles-api.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.964Z","timestamp":1788602385964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles-api.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5816\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 11:36:00 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles-api.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3347Dehfvk8t1BCymiagyqheQdECoY8JcK%2Fi97WElYmwPVGywwTz2o6UZ9KZiVwlKHAIiaywU%2Fe57HWENVvp8o6bPFSGrHL2%2FM%2F8FJ54SyJF%2FIUc4mZbK1h2y556VQVeA%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 5bd4b67e-7bd2-422a-ae4b-bf0dc386654f-1788521757\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 80628\r\ncf-cache-status: HIT\r\ncf-ray: a36462104ef82678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=65.057, imageryFetch;dur=63.568, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20201,"size_decoded":7055,"mime_type":"text/javascript","magic":"ASCII text","md5":"604cca67fafa011b59f557f8dba5b33f","sha1":"aacc2a79766a89eb246be03510fb0d79c5286f0a","sha256":"0a9fc57aa415d768186290362e3ee874fd723ed7aa9ab2450a3f0872604b63c8","sha512":"cfe13266deb1fd8fe508c47a4024fadbbb384119fe2b523f04082f03f31536aa73a6086e9b73120c2facf28c5aefa1e4fa0c77bf94fb7c41889112e01e860f71","ssdeep":"384:Z5HAk31y1EqnNhL6BHHUCSyudFqxAEZP9VLeBtIgq1hL3GbAFvpylL:vp1eHqHHUCSyBnSc1hL34Alp+L","tlshash":"9792a441a2f225385267e03e1e1ff85a732da84b268dec55ba9c52444f4d13dc6f2fca","first_seen":"2026-09-04T12:32:16.212686Z","last_seen":"2026-09-06T06:24:29.352762Z","times_seen":13,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/Upcart_Trust_Badge_1757374905690_1_1.webp?v=1770781699\u0026width=535","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.187Z","timestamp":1788602386187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/Upcart_Trust_Badge_1757374905690_1_1.webp?v=1770781699\u0026width=535 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: image/avif\r\ncontent-length: 4225\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Tue, 01 Sep 2026 19:24:43 GMT\r\nage: 1330455\r\nsource-length: 11184\r\nsource-type: image/webp\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKW7mAMpD6dm5tKicAuqr4sLTkDJwze2fXKS6%2FLwd0rcJEoKzuF1ogsWeaqsPwRGG9S2jkN4EnashQr4QqeEYSifmtZwNGpWh9gzlYrGCXMbpdQmDiDA4H9Hd%2BltAe8%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: abea6819-2424-40bf-b14f-ed20fd41cb53-1787271930\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\ncf-ray: a3646211acb4569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=252.811, imageryFetch;dur=140.414, imageryProcess;dur=111.625;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4225,"size_decoded":5459,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"034589e2eeaf48fe5047b2d0ff7afc6e","sha1":"3007a577c685085d924f74b0b71f402de76e5ea7","sha256":"c73aabf06e37f52ce47ed8b2ddd9f3ebbab8089a884b301831595965d92a0e67","sha512":"317fc897882f27776a621b8186ab9f17535d6960338f73d11634025745d0b4f1ef1da4975d3e01b73a95fa1064c143daffa97313103cfb8aca5911eae393cbe9","ssdeep":"96:rGB6pv+Il/Xdr13Ya2xv93R2NUpv4t6FMgl1DGb/y/JMd3:rGBWtdr13axv93RB1NM8DGbIy","tlshash":"35916d61d720afadc01d02bc05e80396b31275f4419495168469b33a7f5e9f6bcbdec6","first_seen":"2026-09-05T10:01:03.264677Z","last_seen":"2026-09-05T10:01:03.264677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otlp-http-production.shopifysvc.com/v1/metrics","fqdn":"otlp-http-production.shopifysvc.com","domain":"shopifysvc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.147Z","timestamp":1788602387147,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /v1/metrics HTTP/1.1\r\nHost: otlp-http-production.shopifysvc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tryrovina.com/\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/fr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.815Z","timestamp":1788602383815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/fr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 98543\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DF6VCn5Mn%2B%2Bz%2FYFLtCios8RHfL4zQhMVbNK8NjngCwvTg0YcPcXJpu3tjczZagjVVSeMFlJHJH0%2B%2BHu5YiUyShrFwHksU9s80L4blZUhepEvPjGkJcjyVSOt0VlPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 123\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123,"size_decoded":954,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"ea88236cab2242c37f12aa634aabff00","sha1":"194907b10fcf3475dae7ad48d759863f3350f96f","sha256":"2a539c1a42f160aab68730f4caaa322bd6fbccf42145015bb7544961671a9cbd","sha512":"9f00ed6a3341648976dc1e0d3b898fd0b29ae373cc10d67c6e27523ff0de0cd8c0f51eeb186c900acb86c5fd1205640e0f728511de379a14d397902d8d262302","ssdeep":"","tlshash":"c4b012f3625cfe29efcee96b45d89694b8791378639066d71c8b917d1300230d448153","first_seen":"2025-08-29T01:16:58.596905Z","last_seen":"2026-09-05T10:01:03.265696Z","times_seen":316,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ro.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.987Z","timestamp":1788602383987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ro.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sNpd%2BQhpkAy6GVTYiatOVdoH6DuZB50Z56HajfrBq6yJ4AZYxrI76Sa%2FhGnsG8bG5Ui5KY1B60ex8mmNigTpjAhgejTTFnpmkhg8EWnpoEyYkjnnhGBb%2FSvhaXpMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203eb9e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122,"size_decoded":950,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"0e11a687f714fd9128ae4d1064f7ad2e","sha1":"92bc250df2e7b8c67ea9520f4816c567e65bd91f","sha256":"8c5a6a64e197aba1acadb221486790c1b04022de391c72be5da8023bb2391a1d","sha512":"fe5f1ca0919fc2783498e5c0347eeee5fca435a121ac8e97785d1d58aaf8385d34c9bd721cec2534783c3993c19c76b8805ce2865419d390e3fc31dde20fec87","ssdeep":"","tlshash":"9db092e28661ae76cacaa4ab01a896a19ca263552262839918cb416e0305256a08462b","first_seen":"2025-03-09T09:20:42.277921Z","last_seen":"2026-09-05T10:01:03.267276Z","times_seen":151,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/so.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.013Z","timestamp":1788602384013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/so.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-108\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KN%2FPOggZjucnXDaTkrREGTVJ7iO9nDY5ZsVLqoGB7Vn9FvW6%2BmxMGcWyhSU%2BMfOp2bnlL29Zfu1z5SEEquI7YMvtBMmL7QoC9vhYWqHZwxmM%2Fz6hQBbXO8BpX6wsBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462041bb156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":1095,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"222a996a28acd2affec836c5519b7d42","sha1":"7615829588dba1e20cad4886478b3a6bb264d7f2","sha256":"7ee3f20feb414f327ae69c3d4c3a54e989bc2410616fedefc1de453c1b6d329c","sha512":"cd7c6ee4caefaf5fc988c2d6fdf9fd70a3de762c541aebab47b1fa26d9fd60c7d066ea0c7b99faf6f88f4da381d02d703356304469a0da05ad00cdb19c1ac9f9","ssdeep":"","tlshash":"8fd095ca22344f5557a73d7f1109d401fda3fb6032481d1e428b876f1713803500ab57","first_seen":"2025-08-29T01:16:58.471198Z","last_seen":"2026-09-05T10:01:03.267893Z","times_seen":97,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.083Z","timestamp":1788602384083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-241\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDrnvTA4OleH%2FHpI8xg29UD7tV8P7d1Ko20tiLSEnUqe2i%2BOTCdagb4MbE%2FERPyATRqeqlqyO0QVJ85mrQvR1Z%2BEn7TDwz9O7692VH2UbLofJQSnbZ8qXov5SyDHjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462048bcc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 577\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":1408,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"db35158ac2a0a55c493a0b5ff76eabe6","sha1":"3eeda971f5815d31ddb62f13017e4dc3e2423e22","sha256":"274edad9704de6b6d92cd9e90e25263d4c79cd31d82157f1d79f6469bf454e7b","sha512":"1679bccf8bde962f2247ffe2719fd219363629c0e068eb8c3347a895ed9f7d30ff2f9e7c428e90af84ab6a438032c8e6cc7f8c614577fba93f78f90b7b96933d","ssdeep":"","tlshash":"79f041c3f2d8e666ab9c899718b3439ac4dbd0c892957742001f1e041a1d21dd8bc281","first_seen":"2025-08-29T01:16:58.473765Z","last_seen":"2026-09-05T10:01:03.268844Z","times_seen":95,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.validators_Cj2qrO-d.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.047Z","timestamp":1788602386047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.validators_Cj2qrO-d.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 522\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 26 Aug 2026 05:56:54 GMT\r\nage: 1623429\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.validators_Cj2qrO-d.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoz3cHkSqyW7XRSFHukbdsEe%2F%2BcxF2XBsx%2BlVi1wZi7%2FF3cUvQo%2Bfz4DXjYJfsoA41uMduE%2FzMd5CVyI1I2HyPsO4MBnSp6onNzcmbnwuO9RrdK8vMedbElMH4QTMBR%2Ffg%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: f8226e1d-49da-43b8-865f-4f5e8980c141-1786978956\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210cf642678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=31.768, imageryFetch;dur=30.632, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1058,"size_decoded":1743,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (999)","md5":"42c2e1e914365614298490746e0fea42","sha1":"cb61514b807b9c60cceebc4c24a44ef3b181d946","sha256":"bed1ddf1165218aa77717abbf1ed160838193f7481a2cfa3c1b8cf8e3abfbfab","sha512":"3f238e51ad129c7f3889de3f6968959013ed7b2df9a990154b999f95698db458eb97414b32a398666f489413674d8bbca4be9e2a813165b947770a04cf07edcc","ssdeep":"","tlshash":"671120cc6eb332f26ab715ac00523404e3f909ac756e0562b8202850bf30c7b8f34e8c","first_seen":"2026-04-14T20:08:13.991508Z","last_seen":"2026-09-06T11:36:39.576545Z","times_seen":79999,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.tracking.vaudit.com/track","fqdn":"pixel.tracking.vaudit.com","domain":"vaudit.com","tld":"com"},"ip":{"addr":"34.36.32.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.163Z","timestamp":1788602387163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.tracking.vaudit.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 08:28:08 GMT","end":"Tue, 24 Nov 2026 09:21:21 GMT"},"fingerprint":{"sha1":"FA:AC:BF:CB:C7:3D:A5:51:D9:D5:05:44:D4:D0:68:BE:F9:1A:DA:74","sha256":"67:AA:01:C6:47:A2:81:73:3B:A9:CD:9B:FE:B7:A3:77:C5:A9:08:8D:86:57:AE:B6:42:C8:80:C8:FB:B9:10:5C"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: pixel.tracking.vaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6784\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6784,"data":"{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"platform\":\"Linux x86_64\",\"screenWidth\":1280,\"screenHeight\":1024,\"colorDepth\":24,\"pixelDepth\":24,\"timezoneOffset\":0,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"currentUrl\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"previousUrl\":\"\",\"mimeTypes\":[\"application/pdf\",\"text/pdf\"],\"touchSupport\":false,\"hardwareConcurrency\":8,\"deviceMemory\":null,\"siteIdentifier\":\"1f19779e-104b-6d60-ad5b-fa027f11be6b\",\"timestamp\":1788602387114,\"sessionKey\":\"cc4e96f0-bfa4-4d5c-ac6f-b735b0f96c53\",\"thirdPartyIntegrationInfo\":{\"verisoulSessionId\":null},\"fbp\":null,\"fbc\":null,\"ttp\":null,\"selector\":null,\"canvasFingerprint\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAASwAAACWCAYAAABkW7XSAAAQuElEQVR4Xu3cC3xU1bXH8TVDXoCALYSHoCKoVOVRA1JQXjeoFwkPsValykPJzCRaKhWkvRdbqXrRVq4iWDNnZgjYCnoNt6BQq1UKBdQSCIKgoJioiKK2gcgr5DEzXTMkICQiuNNtoj8+n3xgHmetfb5n5v/ZZ59DXMIfBBBAoIEIuBrIOBlmHQpEvRKtw3INppQrIHzeG8zRqn2gHMAGfgC/yvAJrK+ixjb1QYDAqg9HwfIYCCzL4LSrMwECq84oG04hAqvhHCtGeqwAgfUt/EQQWN/Cg/4N2WUC6xtyIE9lNwisU9HivfVJgMCqT0fD0lgILEvQtKlzAQKrzknrf0ECq/4fI0ZYuwCB9S38ZBBY38KD/g3ZZQLrG3IgT2U3CKxT0eK99UmAwKpPR8PSWAgsS9C0qXMBAqvOSet/QQKr/h8jRsgaFp+BKgECi49CQxVghtVQj5zBuAksAzw2/VoFjgaWz99DIq654or2kKjrY5HoCxLMyoyPzuO/XcR1q/5f9/P1+S0SkRkSynryhCOfEPquNAo/p78X4GKRiE+C2fPF60zV7X1av5EEfR2/1j0/mea17cPx21W/RyRN92usBL1PnUzpr/M9BNbXqU9vE4GaMyyv/58aMg9oWM08pnBmziBxu1dIuNF5MjfznZNu6vXvlGj0rnhgxf54nUytr48bQGBV7+Tx+1DbznscDXnXJALrpD8Z1t/Ir5exTl7nDWsEVvPJ9+7u3/+JLWe0f2u32yV7tOMGp5fMEQ2ssztuXjFwwO+fbNxkf7NoVN7XedLTTpqsOtGokm6b9eGQq+a83q5tYam45XeO3znn3M5rZ6QPzn1Gg8sduEQm1Ple1XHBGvuQJsuPb5F468OfZGTMyW/dpqjSFZGHnd4ndqnjIZ5SOWZYp8TFm+uRwBfOsLy+rIujLlkU7CmL4+OtmmEN6Lcg44ILV2Xrb4DzBnrJLp0x+WLzJv35TH8S9bToNzrLWHZkH6tmJ15P9iBXgvwhFlixGZbX54v9Grnr44E1IecyaeR+QE8XG+n2TfXUc7GcsesemT49UsPK479VZzL36ntir/1RAj6fxE/LKj/R5zvr4x06pslaa4rWKpaSA5dI3h2lVTO723Sbg7ptikSi9+tp7aJ4fY+zUp8bqDPBF/TRs1rnV/q4jf77Z1pvlhy/D7PnFUhieUhPn9O1R5Fu94C4XI/GZljeLO9QV1hCBFY9+pRXDYUZVv07Jqc6IrPACvr76hf2UXFHvi/+7E/FE7hIXJECiTS6TEKegvhgviywnODduv1b+s4bNRyWyI2zm0vTpFf1y79AH8+odYc8/ligXC2BrLTDgZNzo7jcT2hw3Kanso8d7uu8IAfKfiQLfrpXfP5r4utzUXeajuvd+Dglul4ikctlbvbLVe+fqQE6Wp+fLQfLc6RJ0i80hD6tNbBy/Ddr/y5SmZguuRP2SaZznz7WkHTdTGCd6kfQ3vsJLHvW/65OtQeWiPuKy52koqK0g4WFvQ9WNU+JzTqOmWEFnGUaEn/VkLjTVyBDIlEZsu3N/iOTkg7t69Rl3YTgxbLuSwMr4C/RL/oIXdM6L7NALnBHZPzOj77Xa29Jm/7f67LmltDz4YUyPT6bOvrH66SddebmgvT04JKkxLKDGzdd1SU/f+QnyckHE8aOu6P0jTfSJ7/yynWPeiZkBVxuGfX29j5DVq/58dLwYz+d4F0vV2qhjLff7nOVTtKSOp2Xf+PcS+RlDbiZffvkebp3fyl2iruhdH+zjYkph65PSKho+pcXvX3fLbp4SmyWuLu4w7OLFt+Vp/s9dsxPspc0rpCJ4cqEXm9uHfjDgwea3/2DvovPZYb17/q4mtUlsMz86sPWZjMsxynS06KPO7TfeuCCC//WZvWqMe8dKmva4jstdr173fW/PlDpkqlzHf/K2KL7F54SBp0OOquJeL1ZY3SG44+4ZWbIH2iVkFi2dPQN0xakpOx9Nthbnq6B5XE+vLTv/z130UUrS4NzH7tQI23OGe3ffjoj45Hlmzemb/77+ms/1NnRbG++3JM7b86dlZWJ0z2erNW67jYxUiGTQrnOnc1O+8dNo0ff9bL2vCvkOLG1tDSPx/eEyyUDom5ZqmtRf9YQvnb5S96HqgPrrW2XbvjbmnGP6Hv7eL2+fjrm9nsqZFrePGfnoEHznzz//FfbuaLySH0+JawPHzzGgMBXEThhYMUWxbVofIa1b2+rth/t6jK04zmblqQk70+oOCS+3MedQg2bezy+rDa6QL/J6SnzqgfhXSf36Rf/H07Af+cJAyvgP1NnbuFMT9YibdZb17R8eso2TINw6fChM7Paddg+eE+RjM67TsLH7KDHH2jZcmfnoVfNabxk6ZRV+/a2vuf73Z//7KyzXs8r2duu66qV40aOmej5NKVMpgaD8dsppus422mNwmDsIoLOqPS5G7yerBx9LjEQdE7TcXb1eLOeVpR+uj43QccVHb9CUhYumlVYXp48LRa6297q99qq1WNmtW1VmD5i1G8n6dTv4dAlslLXwYqbNi6+46ax/32thueDBNZX+TiyDQInFjCbYcVOCSW6Sb/0LTSc9uhCfMnu4vZnl5U3ad6u7fb3tPWOQNCf/SWBVaLBMNybmfVUbCFdA2t6/L4vl9w3fuzEK5JTKqZVuDUc0+SjYwMrMELXy57KGDrrg7Ly0+ZUpq73hz/ot23Hjm5bu3Zd0Te1xbYOyS2kt4ZuC8dxpuskrsDrzW6py/oLg2ny/xpYejEhmqKzrrzYjCoQcPR2jiOB1VnHMe1Iv8+tw1WfEnbunP+LywfnDqiIypTcWbN3SdPkz3Q9b7TH6x3h1pkigcVXD4G6FzALrNiieyQ6f9z4ya/q+lEo8Njc5yWhUq+4RX8mTtbh2x1OctF95MjfLm3TunBbIGfu/+oVv1c1sBZ6sn0vusPyqyNXJD+//16niYZRcfceL5b26bPo4YhLnnlzc/qktWtHjRkxYmZhaur743S7/tFK+UNonv8yDazQ+LF3rE1scigUdPxbddv1Eo5e4cnK7qKncAMCoaOBpbPFs/VWjrtrC6z4lU5ddE9N3dHj6qt/84FEw5OCIf8tug43RX9uIrDq/kNKRQSqBY4GVmawu16tC+iso6d+8T4aPmxmedv226fGb2vw+Cfqc9kaIhektnpv2xWXBw6e1rx4WPy2Bk+OZ8CAJ+4/cOD0koINwz/UK3E5sZsnR/zpnAGbX7/SebcorZMG2M5RIx8ofqew98bNW9IH60ykwzmdNhQN/o9QfqhPeJzOdvp16/aXea1T32+2fLlHb0+ILpH2H//akzF9mM5+bqr1lDC2Bx7nuY4dN5ZdeWVOWN/31y1bB25+efWPV/3wmntzW7Xa+breK3aGzpR+Ht/Zw+P8n/37W+7b8FqGLvTrzbEBX56euk4rfKfXkOUrPJ31uSbdur1U3L3bi8sWDCq5/fDtElV361ftQ+t27/2Xo7c1NG7+z/kDBz4+9I03B+34YEfXh2K3QiQmHNp/zTUzSk9v8cltzLD4kiFQ9wJf+H8J9WragmPuw6rqrc93041mfH7W48mXS91uuT1cKZNDfWTnj16Rxqcnyf26YB3SK3Bb4hOtfJkfn51U3XQZv1pXfR9W7PX10iq26K6h+KAG4dpYje8kyoMaOqtqXXSvGs/E7ZJcViIL9eFn1etOWitDt/PoovniwA/k8Wq22Dg12Ca6y+V2nXN9qu87S3s+pIvuvwz1lK3xXFsnt9SYYVXve819mHxk0f1SKdV649RmlK5hPURg1f2HlYoI1AisrNekYyQsP9Ev/Ln64m5ddi8I9JTfxb/MBTJMT5+G6vNnamAV6WnYIv2ir46/tlb+U28hGK7P79dQiMausMW+tLeskWYJKXK3btNJXyvWEFum/07Q9wzRv1vG6uwpl1/m6Rfet0Eu1L7j9EfzT5L1tb8HlslTNW5rOO64eQv09C0ixTqb0ps3RW7eIKlJEckNV8jUUN/DQXQktGLjbCRDNWjKNJCTdAyLNOjWxF7PXCdjdVyDdR+TNTh3lkdk5vze8nFt+6AL7c+M2SRNY7c1aK0esQsM+vfzenXxBh1Laewqo85Oj95Ay2cNAQSMBfhtDcaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxwL8AXGtV4s+GMlEAAAAQZGVCRzU5NkQ3MEQ4RTNDOTMyOUNVSzSyAAAAAElFTkSuQmCC\",\"event\":\"PageLoad\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\nset-cookie: vid=1f1a9108-70d8-6087-877c-b26164286c18; Max-Age=2628000; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-cloud-trace-context: ac527b7037f16a361dffdb624fe186f1\r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\nserver: Google Frontend\r\ncontent-length: 42\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"1f1a9108-70d8-6087-877c-b26164286c18","quoted":false,"path":"/","max_age":2628000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"vid=1f1a9108-70d8-6087-877c-b26164286c18; Max-Age=2628000; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tryrovina.com/KIT53949","fqdn":"www.tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T09:59:39.451Z","timestamp":1788602379451,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /KIT53949 HTTP/1.1\r\nHost: www.tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/fonts/plus_jakarta_sans/plusjakartasans_n4.d80b0f185669787ac4b44bf52c1a511eaaf37245.woff2","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.559Z","timestamp":1788602383559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/fonts/plus_jakarta_sans/plusjakartasans_n4.d80b0f185669787ac4b44bf52c1a511eaaf37245.woff2 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13220\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SZmaMnP7Nyjs8Dd0ND5%2FjMyUtD8TnOTNLj%2FhrW5GhgUhhsEq1%2BHT%2FMdBmj0du5psMJfwTAbuRWbRqcpBBFPfiGXi66rpx56WDaJDAtHtTcl%2Fdmlr1znV1XD0WjlQCapcx10NMFb\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 03:35:57 GMT\r\nage: 2121976\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-fonts\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: cc672282-c8fe-4f1f-9f6e-9d097de8bc65-1786480406\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462014d73569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=57.040, imageryFetch;dur=56.698, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13220,"size_decoded":14699,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13220, version 2.4653","md5":"ffc4a65ef94365cd5bb55393554f99ad","sha1":"d80b0f185669787ac4b44bf52c1a511eaaf37245","sha256":"c5b916750e1898d7545588a23b92e7687f91154cebea22c179290c8bd2ea8326","sha512":"d5ece1166bc8d65bc873eed11aef3580c249c299947645308e5d2fb595b43c041a48748897b25ef91fca83ecd9ca89843ac264587b392e2accc2870e7e40dc9f","ssdeep":"192:aGeGXNJGbZAQoSitLmSN2365vcohoA78le0aomDhzQj8uz8ImnakMhrikRFDiP7m:aGeaLmSN23zol7d0aTQjxzf5PRvDKDA","tlshash":"2452cf768796d927f1f41ceaf0d8c830d665269cb01024a58e50ffdaccb771ae266683","first_seen":"2025-10-12T17:09:33.604338Z","last_seen":"2026-09-05T10:01:03.270248Z","times_seen":124,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.817Z","timestamp":1788602383817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-285\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374726\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxIYkt9pgldaPf3fVg1sxZMRsXcG%2BVd8rK8Azx%2F73oDykpffMwqzCwpIQB9JJfYbQwwwlUjZWCNWSpLkFzeDUxJCgt24tlhsaIC1v2UI41xaHIk4xb5mh21s7Gs%2Buw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 645\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":1474,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"6536c6d418019351291c069ccedacabf","sha1":"4682cd031810d1366243b4d34b7f0093e6a08415","sha256":"c78a808b5b68e4a3b229b6f7f27e150a19ff0c36d00492c44a21e98ec4497926","sha512":"698e034dda9f73495a4f4494b552bd9182f01f64cf346b0cb7aad082ba8743b5f1aac7c0fcf9535e5673ea8ffefc6bb0b8ba1ee5791057c86544cefb0af451d8","ssdeep":"","tlshash":"e2f0c858ebd8033ed1d2819196cc4769d430d30394f38113d46bc00d15da384493030f","first_seen":"2025-08-29T01:16:58.533846Z","last_seen":"2026-09-05T10:01:03.2712Z","times_seen":99,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.951Z","timestamp":1788602383951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-298\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M34yOJKaY%2FB3%2B8jQxjVgUz7Tg3Vmpk5v1awhUIPFogPL23og9d5S3qdIuT7Y%2Fp0eiqG9EuGK%2FdtA6%2BIbgTCXLH%2BB54aPTp%2B4xUHH7qDjJELDVq%2FiKmQE6M44CbASew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203bb7f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 664\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":1503,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"c75d83a28a670f52ed26406bf9d33dbd","sha1":"ee9c8dc8e5cf2324d6dd50620b3d249b94065614","sha256":"d83fc8b9e5948b9ac72d735800fb26e79b166454d42501e74b19b88cda8fa55b","sha512":"ec712d2a5515109d01d324c014faf96d1f3d0c637ec2f45f1eb9af0a5c8d134fae79fb1843bd6e9fddf1c0bb68b3c763821b257438f0e42e50b96e0ed29418c4","ssdeep":"","tlshash":"980168e605e794bac8874393285c4016def907192e5c7de170cb455e4ed13e7baf7019","first_seen":"2025-08-29T01:16:58.628812Z","last_seen":"2026-09-05T10:01:03.272112Z","times_seen":100,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ng.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.965Z","timestamp":1788602383965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ng.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2522050\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iz4UlXBz%2Fs%2Benf6%2B4b5X0DyGpgwvVz2HBY%2FFflkCCpZlRjgOYc4pXrMPmkgEJA77RCDeW4xuCPhXofsNqybvCX7RIGqGbNlBo783Euxu0Lc9gddD1OBVAssT52i19g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":936,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 2-bit colormap, non-interlaced","md5":"f67dee97a244ab271fbe05039533f4d6","sha1":"8e0b5aced6ec3b9f14daa2e63edccd06c1b376a0","sha256":"6076be1144054cb5cecb1fe958b5f0bbfd23d6a1894146300c60fc54a09b15ca","sha512":"18a932b0f24db5686a7349e0fc0e1189352a5d053537de710406d853db85a311befc5c76c83a86677418102fcbc8db6a9b0640dd35742c03e67e5c4fad6ae4dc","ssdeep":"","tlshash":"70b012f2a3d4ec7e81044937998c011ae715b54c23f129cf9e27f0642621104f2cc762","first_seen":"2025-08-29T01:16:58.670413Z","last_seen":"2026-09-05T10:01:03.272938Z","times_seen":110,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.132Z","timestamp":1788602384132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-18b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 358013\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L25%2F4%2BcbkzK7NHXk1XO%2BKzeW9yn6pJZVVU%2BB3A%2FYdZPz1jSb8bd6Yk48z%2BVxekiQRhfn%2BCS5e9LHxIGE0MCkZZ%2BM%2BmiScoW8bf7HrItTROXlBihiYzwLk6ak3C%2FCYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204dbda56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 395\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395,"size_decoded":1238,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"74d947e76be53ddb5003b0ddfcd8089f","sha1":"7f2612902c7d862f530196c90bffb89b6460eb7f","sha256":"94f29281d0b2b67b035dd279a4b43b18b8be9e889f5287af2b2c5e3723e0c810","sha512":"3f5e9d3b5918938d48d2f89885acb8eb4433c9f19b201b5f98d1b492f88ddc9160fa756d9b9feefd9f5590e0b6528102492a6d78e62810b857b80a22dcab490b","ssdeep":"","tlshash":"9de0f1e33169e83cd4872712d654de75ddc1272544b8141a125b805d9a8a409e08c173","first_seen":"2024-08-20T00:21:37.61896Z","last_seen":"2026-09-05T10:01:03.273796Z","times_seen":356,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dashboard.heatmap.com/preprocessor.min.js?sid=5686","fqdn":"dashboard.heatmap.com","domain":"heatmap.com","tld":"com"},"ip":{"addr":"172.67.69.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.827Z","timestamp":1788602383827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dashboard.heatmap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 21:13:23 GMT","end":"Sun, 11 Oct 2026 22:13:21 GMT"},"fingerprint":{"sha1":"55:74:B6:A1:C8:AC:27:69:27:6F:3C:4A:E9:EF:16:20:17:C9:EB:E9","sha256":"0E:9A:C7:33:53:C2:81:0D:15:92:E0:EC:AA:53:E2:73:B1:01:2C:94:33:43:FC:74:40:51:B6:A3:71:FF:82:BE"}}},"request":{"raw":"GET /preprocessor.min.js?sid=5686 HTTP/1.1\r\nHost: dashboard.heatmap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a364620309c5783d-OSL\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, s-maxage=31536000, max-age=600, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yw7MupwARg3IbzniyQ17rPYC8ivx%2Frs9%2FefaEMm8PQw8zULeCVIqHg87RnmAtDmJAXJXR4V2Wzs2XlWKOe7zemVZSZ8giJCqURa4l971FaTdTv2BRXs0BRHBFCO%2Bni4%2BQzaT9355ng%3D%3D\"}]}\r\nlast-modified: Fri, 04 Sep 2026 11:21:00 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache-origin: cloudflare-snippet\r\netag: W/\"2c837ae8ae1b2587fb46e9102096126a\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157161,"size_decoded":47366,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"2c837ae8ae1b2587fb46e9102096126a","sha1":"b91ffbf888a024ca7c2b3a292160b101edb850d6","sha256":"a6dd5e693d96d13644a2097bb25b6326c6d42bd8c912efc71d8c541702f31566","sha512":"fb138039297f03a5e93be87bf1c485b51ba2ad02939738d56dca618457b7de0bc00dbc81299072b73a4e68b27e087db28f5547fd449a3a4fa72238995a0f6f61","ssdeep":"1536:xGnETmfidxI4efya9hnjxWksjamZF4bouNZ6ZMPsqi5Tf5n+4DjIo5PDLamBY5Ks:DifidUIYou76T5+k2sYa2","tlshash":"5de317a17766a07203fa21ad73277304b379626d74088890721c5c953a6dd8bc3b7fee","first_seen":"2026-09-04T14:52:37.082768Z","last_seen":"2026-09-06T08:49:10.204828Z","times_seen":22,"resource_available":true,"data":null}},"time_used":1603,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":1584,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=11\u0026frm=0\u0026apvc=0\u0026auid=681753161.1788602385\u0026dt=Rovina%E2%84%A2%20%7C%20Science-Backed%20Astaxanthin%20Supplement\u0026tid=AW-18051184874\u0026en=page_view\u0026dl=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026scrsrc=www.googletagmanager.com\u0026rnd=762964696.1788602385\u0026navt=n\u0026npa=1\u0026did=dN2ZkMj\u0026gdid=dN2ZkMj\u0026gtm=45be6921v9248324961za200zb9242263463zd9242263463xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938465~115938468~117776796~118897920~118897930~120213116~120385423~120469145~120469153\u0026tft=1788602385561\u0026tfd=3163\u0026tids=AW-18051184874\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.313Z","timestamp":1788602386313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /ccm/collect?rcb=11\u0026frm=0\u0026apvc=0\u0026auid=681753161.1788602385\u0026dt=Rovina%E2%84%A2%20%7C%20Science-Backed%20Astaxanthin%20Supplement\u0026tid=AW-18051184874\u0026en=page_view\u0026dl=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026scrsrc=www.googletagmanager.com\u0026rnd=762964696.1788602385\u0026navt=n\u0026npa=1\u0026did=dN2ZkMj\u0026gdid=dN2ZkMj\u0026gtm=45be6921v9248324961za200zb9242263463zd9242263463xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938465~115938468~117776796~118897920~118897930~120213116~120385423~120469145~120469153\u0026tft=1788602385561\u0026tfd=3163\u0026tids=AW-18051184874\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":542,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":16,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otlp-http-production.shopifysvc.com/v1/metrics","fqdn":"otlp-http-production.shopifysvc.com","domain":"shopifysvc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.167Z","timestamp":1788602387167,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /v1/metrics HTTP/1.1\r\nHost: otlp-http-production.shopifysvc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2367\r\nOrigin: https://tryrovina.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2367,"data":"{\"resourceMetrics\":[{\"resource\":{\"attributes\":[{\"key\":\"service.name\",\"value\":{\"stringValue\":\"trekkie\"}}]},\"scopeMetrics\":[{\"scope\":{\"name\":\"trekkie-otel\",\"version\":\"1.0.0\",\"attributes\":[]},\"metrics\":[{\"name\":\"trekkie_feature_usage\",\"unit\":\"1\",\"sum\":{\"aggregationTemporality\":1,\"isMonotonic\":true,\"dataPoints\":[{\"asDouble\":1,\"startTimeUnixNano\":1788602386239000000,\"timeUnixNano\":1788602386239000000,\"attributes\":[{\"key\":\"feature\",\"value\":{\"stringValue\":\"fetch_or_set_cookie\"}},{\"key\":\"result\",\"value\":{\"stringValue\":\"write_blocked\"}},{\"key\":\"cookie_key\",\"value\":{\"stringValue\":\"_shopify_s\"}},{\"key\":\"is_new_token\",\"value\":{\"boolValue\":true}},{\"key\":\"is_server_side\",\"value\":{\"boolValue\":true}},{\"key\":\"has_consent\",\"value\":{\"boolValue\":false}},{\"key\":\"can_write_cookie\",\"value\":{\"boolValue\":false}}]}]}},{\"name\":\"trekkie_feature_usage\",\"unit\":\"1\",\"sum\":{\"aggregationTemporality\":1,\"isMonotonic\":true,\"dataPoints\":[{\"asDouble\":1,\"startTimeUnixNano\":1788602386239000000,\"timeUnixNano\":1788602386239000000,\"attributes\":[{\"key\":\"feature\",\"value\":{\"stringValue\":\"integration_load\"}},{\"key\":\"integration_name\",\"value\":{\"stringValue\":\"Trekkie\"}},{\"key\":\"integration_has_consent\",\"value\":{\"boolValue\":false}},{\"key\":\"source\",\"value\":{\"stringValue\":\"trekkie-storefront-renderer-browser\"}}]}]}},{\"name\":\"trekkie_feature_usage\",\"unit\":\"1\",\"sum\":{\"aggregationTemporality\":1,\"isMonotonic\":true,\"dataPoints\":[{\"asDouble\":1,\"startTimeUnixNano\":1788602386240000000,\"timeUnixNano\":1788602386240000000,\"attributes\":[{\"key\":\"feature\",\"value\":{\"stringValue\":\"integration_load\"}},{\"key\":\"integration_name\",\"value\":{\"stringValue\":\"S2S\"}},{\"key\":\"integration_has_consent\",\"value\":{\"boolValue\":false}},{\"key\":\"source\",\"value\":{\"stringValue\":\"trekkie-storefront-renderer-browser\"}}]}]}},{\"name\":\"trekkie_feature_usage\",\"unit\":\"1\",\"sum\":{\"aggregationTemporality\":1,\"isMonotonic\":true,\"dataPoints\":[{\"asDouble\":1,\"startTimeUnixNano\":1788602387063000000,\"timeUnixNano\":1788602387063000000,\"attributes\":[{\"key\":\"feature\",\"value\":{\"stringValue\":\"first_party_event_emission\"}},{\"key\":\"event_name\",\"value\":{\"stringValue\":\"Page View\"}},{\"key\":\"user_can_be_tracked\",\"value\":{\"boolValue\":false}},{\"key\":\"integration_has_consent\",\"value\":{\"boolValue\":false}},{\"key\":\"source\",\"value\":{\"stringValue\":\"trekkie-storefront-renderer-browser\"}},{\"key\":\"modules_supported\",\"value\":{\"boolValue\":true}}]}]}}]}]}]}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.vaudit.com/static/js/pixel.js","fqdn":"pixel.vaudit.com","domain":"vaudit.com","tld":"com"},"ip":{"addr":"3.164.230.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.521Z","timestamp":1788602383521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blokid.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Fri, 08 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C4:9F:FC:15:18:38:63:2F:79:65:5B:1B:EA:AA:CC:9C:86:8D:90:0B","sha256":"FC:E4:98:4A:2E:8F:0C:17:5B:A4:84:50:FF:E0:B9:16:A9:33:57:AA:1D:02:57:AD:A7:1F:76:3D:B5:BA:5B:94"}}},"request":{"raw":"GET /static/js/pixel.js HTTP/1.1\r\nHost: pixel.vaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:09:48 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JemPe0Wqgug2vS6FBtDykuQJShJtCh53\r\ncontent-encoding: gzip\r\ndate: Sat, 05 Sep 2026 06:16:08 GMT\r\netag: W/\"f96a81d155b0dd39ee46c84115bf2eaf\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3ed36d9549564152ef96812502a86608.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: ovH8we9w_K05j2zpNJg152ypd-o4aYdY3elEThJIJnJdJ8PeK3KdeA==\r\nage: 25502\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":18559,"size_decoded":5273,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f96a81d155b0dd39ee46c84115bf2eaf","sha1":"2c6337f3f36e2f3f8c12c5693cc77660158434c7","sha256":"caa514b8a90bc9e2ea711a6f919d26444b2d206e7a528372916cb45f904d87de","sha512":"21c9f5bea0dbb810e62a31767635cb6c7f141fb58c86ec5bb22ca38e360dc65f62b19c743f92e93f1da3997e74d380ab8b05a73ff575ef8eed486f7834493857","ssdeep":"384:eS/v2quzOfwkF5vKSMuryKnVNs/IZ3YWxY4pGX:H2q+Ofwk/T8GxY4pGX","tlshash":"508232496af3143590b771bd8b2f51457236908b3a4adc543e4d9ac02f09b3ea2f5fe8","first_seen":"2026-08-29T03:23:42.601426Z","last_seen":"2026-09-05T10:01:03.275284Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":66,"connect":8,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ca.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.747Z","timestamp":1788602383747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ca.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-194\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyeDwgaquu%2Fygu6sJUNDXgR%2Fr9t4LtvSCmolugrh3vx2%2FqjIh9AL6vMQiE0mRywAKgoylWzQG8EcPnPQkOQdhd%2BZwB%2FB2oD9UX6rlN8%2BXIRumgEWY2BmHRy3aG0DmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1239,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"cc00eb304b28c4fb9b0f8a22e88d79c3","sha1":"e4afc850d598cc45a6376677b53ea6e313a82f57","sha256":"c6a0b1b087f62170a41cd9d0b35bd532df0286608cc7c1c5a8c3639937b6c867","sha512":"10bf5ccbde466d817c47c53109b1e71c091b41c365d2a9cc77c76f2d6d79227783160124db30496c0e52ceda6ac6a676eaf416acbcd8287e6b9718d933b38ecd","ssdeep":"","tlshash":"f9e0fa5452181534d651e934b2155213a639086046c198f3013557e75377d89558cf1b","first_seen":"2025-04-25T03:41:10.110464Z","last_seen":"2026-09-05T10:01:03.276543Z","times_seen":318,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/kz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.867Z","timestamp":1788602383867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/kz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-228\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDceX5mZ0rv97I%2Be5v%2B%2BlZu%2BnMJ0%2BaR2YjhviaoPfhwgP1%2BFbBg8xG2Ymezkqp29KCRudMkfpMCIwXypaioCmJ0RjrCpeQ2s51RmLdmIMwx85lAXihrsza2xxPCuyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552,"size_decoded":1389,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a0f46fcfc88b9f0a05217bcd633b954a","sha1":"5b38cff8c3662e13836b92ebf80198351748d234","sha256":"9dd15436c71357bfe6059992a9a83cd60e634a3ae99200c7d67a5410e986b9d2","sha512":"4cdcfcf74e072e3348139f28de62d9f3e89469b27a69acfbd162a54dab7d3370f17e4a7437efaa3083559c48b65022159fd90ca8ec7baa48e7e805482c672f73","ssdeep":"","tlshash":"5cf075e27e7afd7fdcf1cdb5681684d5a72c110086154217027b50b0d521279a7dc780","first_seen":"2024-08-19T15:25:37.907002Z","last_seen":"2026-09-05T10:01:03.277037Z","times_seen":103,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vamp.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.281Z","timestamp":1788602386281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/vamp.js HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cYtEqjKckjE%2Bt23mazML40SiX1%2FJcekIH6Ld2xZtb0xr68tNrGBnsInUx8iUnovQmuvTHXw7%2BmW4zjmvEoQy5M5YZt6aIR9BZD37MrHGKr%2B1XcNV9BczzYuJXTLI01yTC6PZ55u0w%3D%3D\"}]}\r\nlast-modified: Wed, 05 Aug 2026 16:42:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 918\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"757cf4544efe7c590ef169d87dd4af2c\"\r\ncontent-encoding: zstd\r\ncf-ray: a3646212488856be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141571,"size_decoded":53724,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"757cf4544efe7c590ef169d87dd4af2c","sha1":"3e20e059d98a4a9557a1a09677b68082817a82c9","sha256":"3b635f845fe5a87856264fd47b194b6fa1e6d1936eacf700ff1bbe40ba8d71d4","sha512":"a53056dd59251eaabf57adb929eab7c64a4493262b981176dc4f8579f43841a986734958d9e909ac9e0a7d2eadee86161505c185d0536d7ec6ad122f21e7a399","ssdeep":"3072:ydmK6NMmNcxM4K0D5hsoCknOZ9oRMfPH/gfsRvyxZ4I6K+q7xvf/rYlQ11ZPE:ydmK6NnNcxRK0D5hsoCknOZ9oR0PH/gi","tlshash":"d0d383c177c5b85123476b37731bb1e9e42a8ced7498449bf100bc98f5e9612fae0ab1","first_seen":"2026-08-26T02:18:06.822795Z","last_seen":"2026-09-05T10:01:03.277945Z","times_seen":3,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.426Z","timestamp":1788602386426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 31529835\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-31529834/31529835\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWOW%2BdRRdgRMQr9s%2FUmOqUJSudjiCQnAY0SAeg4xjVVN%2Fl2vbGHacET%2BNKkA%2FUlmi2rO5bOdYGUYXlMszlm59kjg5itAVyk9%2FDtbk1WNCWGWxYZcJJNazzbgDKGgP14%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 3f06efda-f997-443e-8d10-4ba597ad1c6f-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e65569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=645.631, imageryFetch;dur=584.892, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214254,"size_decoded":1215968,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f6cd289b36c0c980b73509ed79642ad3","sha1":"e8141c0b0a98a57c58d9f75e63812536489bedae","sha256":"7b412d10da6a93ab295360a312e5120b48ba6d5c7e8866ae95cf2fafc3ff6988","sha512":"00487243c8632620a7f06b0894d6acc2d55e695f49a2ec60edeb448ebf8e6e345c6e52de47f404d5ab7079354af13b605f830cd0b8ac9ecddeda61878c127fa1","ssdeep":"24576:BHQ7FHQkXbkwF2q9LGmmHJFzbTRwiBZigQ+Lv5MvFfGYGA/u3:q7FHQkXbkwFH96muJVH1YgQWevFuoS","tlshash":"f025235df314422bda3557b01ee99785b3b9d0b1931b0b3e0aad63189fd93ac3c49ac4","first_seen":"2026-09-05T10:01:03.260764Z","last_seen":"2026-09-05T10:01:03.260764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/af.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.684Z","timestamp":1788602383684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/af.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-4fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2278048\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BG0fthlc9flqdCbT%2BWjtDQ%2FWEJvrrz0AXUzJf6UgrIdi%2FbrFaNocw%2FO%2BOCEeJwqRyUwiXMNVsDPRPcAaznT4s5sqpJNzfDgfCVUoxeowKXCJxIJA8qdszMJ%2BPd8aZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021ade56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1278\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1278,"size_decoded":2117,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"e137cd4cb256e4c9a465383e1f06c14b","sha1":"387b55d5b45dc41fb6d647eb6cb975865d7c106b","sha256":"64c94b21efd5a1498677ab5c968a53a803a5b7d54b15cd345f35c48a434acd0e","sha512":"344aa23f61e2a506eb8895060cade029d00dfd3e924000a0ebde3811d660adb72b1c1f635df4f644ca6043e6e15d0e29a84d57c694f9d3ecdb1aaacb4d10c0b2","ssdeep":"","tlshash":"5721989dd237345d2ab4986fa13855cbf9a5d34717224d967a23072d15df03eb1a2103","first_seen":"2025-08-29T01:16:58.708785Z","last_seen":"2026-09-05T10:01:03.279256Z","times_seen":98,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/be.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.720Z","timestamp":1788602383720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/be.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xd2erYWQsatuoCrV4GRZB1wLqfjKUZH7oaehi77qw6dy1XViYRQeGwcVIfztivB50tZNtu%2BC7Hs544WjZIe5gqWDgiXgsS481uLKlj%2FeKE4FZmJ5YZ0DpULMJ7Usww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462024aef56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127,"size_decoded":953,"mime_type":"image/png","magic":"PNG image data, 80 x 69, 4-bit colormap, non-interlaced","md5":"bcaece6fa6d857a9c13aafa4a8513d49","sha1":"6c1d0146fff56f1cd4b6acccfaedd287b2c50b3b","sha256":"4bb0a14682b00ccb8912a25aee9a44a5129362d0c09e3cfdb5257879bd23adb3","sha512":"4bb0434cc5fbfee166b700f7bd24d22616146a06ff29c117857d133709a639684408817abae7612d8c88e905c53dddbcc3b0eb320a29afbb3b73b5b66b0e3ea3","ssdeep":"","tlshash":"77b02be306180c64844084775100000ce9237d34032650c9d5c81c103402404cd84233","first_seen":"2024-08-19T15:25:37.908802Z","last_seen":"2026-09-05T10:01:03.280262Z","times_seen":235,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/dj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.781Z","timestamp":1788602383781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/dj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1fa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZO1m1gkhiMrTL8tyT%2BJ5hd5LHRTSg%2BRKLwbG6exnAjm%2F7Zw%2Bb9TGgIkXrzXLBYfjm2ADcadL%2B5jDKr3qXekWB7SCwEmH5BUq7X4%2FZ5diaMetOrwQ9SY%2BdMTVVcMPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202ab1956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":506,"size_decoded":1343,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"d3116abf3887fd9d46e1e602cba04036","sha1":"dcb352a5c2e77bdea887d6e44a2b75e4ae823b6b","sha256":"d62d587194a32738972059019aeaf86caa5192c419be2a2bf5e3047609634694","sha512":"3b907f553ea26ee46352238b0e04923a3d85bd4d8111ac14730540fc26e9167f6b76163e3b9f3e2012c033fa4d05e93156229bb1d8ebda31d56ba7e7d26e7c6a","ssdeep":"","tlshash":"6cf00eb99241ef78d4e528dea2432e16ce3081ad1722699cc78762a68b300065086db2","first_seen":"2025-08-29T01:16:58.459929Z","last_seen":"2026-09-05T10:01:03.280796Z","times_seen":99,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/fj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.813Z","timestamp":1788602383813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/fj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-387\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 380272\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0vjz2Omx%2B6vPD8uBu8ZPPf0XczLwbZ%2BGd8Q1JIZ91a2cwJ4FZ2qzA%2BQqrgvSerf1JrZLaArgxTEZZbxHdPDWao7Re18yng3n%2FUVdscGf4EGbdWRbdUGgqZH2kbR3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 903\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":903,"size_decoded":1734,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"f7c251c93d3deed87a008ab66d592ed9","sha1":"8593553307fccc960167e6311cc59786d2ebcd91","sha256":"50cb3bfc445efb91587b72aa29f5e6ea8e531344280036667b8ad3cb733afa2b","sha512":"e491feee7f4f73d2574403a0b5db3cf01a53807b7b81587c7e8fbf41abbb597032ba3faa014ae8ceddedaa88d98513b93d899e05d20ffef59ecc366537f6e4ea","ssdeep":"","tlshash":"7111b7c4ff597473696a7e332d881194001b5f1493ea864d0f388584df5da2ac047274","first_seen":"2025-08-29T01:16:58.514943Z","last_seen":"2026-09-05T10:01:03.28185Z","times_seen":102,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.926Z","timestamp":1788602383926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-268\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3e6cnkKgKIMPQ%2FPEjTejvKTA2VPYdvAwhyUWrSuTkQKcoI9FN17%2BB5r6rDoIPAwW7o1djY8RoueRr6Z%2B2SsXEq%2Fs5z33QwfHrlFQCmVbtXBnb16JlN9LgONJpCeN%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462038b6a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":616,"size_decoded":1449,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"3c5b19562abae38bad5fa3e23256118f","sha1":"7d81dc7cbff4e36fdfb5ccfc2379caf109ea4e46","sha256":"dd6a112317d93bd9ab7c6563bc7e35ba7c5de7d5a79e3984ba0cac313069c8c9","sha512":"ab2eb072bae2ab1a3f65ae69f4805b2b826aaaef3923d145715527ba5817a6271c3381a55734a11b0eca09896684fb91eb7169a6fcf742e3fc10fb93b8b42a6f","ssdeep":"","tlshash":"2ff0021c1fbb4c3686c81be1c3bc5769f9a6a1091375869d685241e8898065274847fa","first_seen":"2025-08-29T01:16:58.592663Z","last_seen":"2026-09-05T10:01:03.282769Z","times_seen":98,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.981Z","timestamp":1788602383981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-5e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2611684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YF9QpCs9kSaiyRALrkuGNXEjHxUaimN7SFP%2BsYlkUQmKHIxzq34b9LRvKZt3xOlhRi%2BWJdFX6CFhdgBvEfPw%2FYO3hhp6MOyc7qXm5yq3x4Ef3dZUo%2BUovbdVUFRuHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203eb9956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94,"size_decoded":924,"mime_type":"image/png","magic":"PNG image data, 80 x 50, 1-bit colormap, non-interlaced","md5":"a1262c8fc85e18e5e24d60dd0496a402","sha1":"082bc9096fe35186c629d8af9447fbad8bc07c73","sha256":"bc81e9a8f5f9482d3b266a434f5f28441b8df90b29c6f7e8d08d120d8dfb97d0","sha512":"44beaab45be96cb6c2a96c0d5132421e4fcb2eae9e269ecfa0f522ce356b43bc6b9d99cd10cbcf44475064b9853502cb4eb51f65261fff20e95e4496ccfcce99","ssdeep":"","tlshash":"82b012dd19507d71d74d526b51164001ec15015801218507d01244b276724445a82282","first_seen":"2025-03-14T01:36:40.067891Z","last_seen":"2026-09-05T10:01:03.283911Z","times_seen":250,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/rs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.002Z","timestamp":1788602384002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/rs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3a6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRoxc3cVx%2BLv9Re%2FlZC6qqf3jmniOCeHBR2QVQO9sB5rBzrohbcCqD4GPHu3EFu4siPwip8%2FqfHxG86IKOePPKErxx5YpTfrXKbwswEVufTA2aje0%2BTpoF2EiqqZAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462040ba656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 934\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":1765,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"71195fc2818b8a754c50c7cddb18b005","sha1":"b3be9086e3c2bd0a193c6de4b260432e3a5b40e0","sha256":"5a2996144f6c1415c6e680f36d21f6b7fae66091fc50840cc1b848da15a31d16","sha512":"803e3893eb8702f0a2ad640ce604eaa9caebec6e77bbab8eb64f1e2812f2401118c45340a79c9873bfe0d7ddb9f6207b64eae16284a7b977154ceb05a8ffa0b9","ssdeep":"","tlshash":"f911c80abce8eb7492cb419a015de540a2e45556cb315b2e545df6d5604c31ec0c4343","first_seen":"2025-07-08T00:55:32.472434Z","last_seen":"2026-09-05T10:01:03.284922Z","times_seen":110,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/vn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.142Z","timestamp":1788602384142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/vn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-14f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2521691\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQLI5g4D7tdEUCWKYdTIr4fvNYMPoCAgl74wgK3ftrgPSZB35b6qIOpC69KYlv3MZDYj5EFCCMn%2BbMYOqAgSGAQZOsRAc6%2BLRhTnAkljdBrg5Vpf54JD2Ixr%2FeMHaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204ebe156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":1165,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"e702121b1c8aae9eac79de86ea585944","sha1":"c208384fd1c8911035b7fcad82c44f72bb2d64b0","sha256":"78168f022ff2f2a1a97441797776cd4170f7e4cee8a68de50049d21ca6f7e710","sha512":"2d10d2f37c73da230125ea9f98fb919a4089b679b2e6fb4da87a4b2f386ff78381a0f7cb2a287c3e6c1cee250d215837a20b9c27f8c7e633c9db8a3fb4e73b99","ssdeep":"","tlshash":"a3e02d12cff14f32408f6913017c0b90b2ee8388378c475b84da107d6f2022c91ac703","first_seen":"2025-08-29T01:16:58.455852Z","last_seen":"2026-09-05T10:01:03.285461Z","times_seen":113,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/loader.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.580Z","timestamp":1788602383580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/loader.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 108\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 11:35:59 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/loader.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UklHxbKlDOrRAUaItMYE184%2B%2BBea2SyOt6%2B6cnzlsWC2rAH62KN%2Ba9pXpkKuCFgMlgLLJGZPVOeBFNFHJlq%2BCbotPG5N6N5Owi2LwjzQt1WepvHsGLyL0D%2Bd4D4L6GTg9Q%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: c928314b-5311-4670-89c3-5da9fa6fcd43-1788521756\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 80626\r\ncf-cache-status: HIT\r\ncf-ray: a3646201696c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=134.719, imageryFetch;dur=134.402, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163,"size_decoded":1331,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"46bec5fb246f58d44043ad0430b00480","sha1":"8459a2ed5a8dff84f85387f831f980dc1fac6ca2","sha256":"d989f7dd356fb66601fd58cca4957fdc564cd81b1b51b7bb9bf29c4604dd921c","sha512":"708d389d6f7904e1f616cfaebf76bf25ecfd00c0a6f47411fc13abaebe134208c722a03f057ce754de1ff58729632678c4ee4d228ad2e82f2b8075c4d6e49eed","ssdeep":"","tlshash":"0ac08c1d54ec3829609b795e223ab0f809bb0a463214cc52040dabd2cf1a3ad2fa2688","first_seen":"2026-01-06T16:52:12.091972Z","last_seen":"2026-09-06T06:24:29.321594Z","times_seen":3229,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.711Z","timestamp":1788602383711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-11d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXhwn8FaqbmTGszWuF%2BqgEt484IQrqXNxeYnioCVr30s1wwI3MQIr8UCAtFQtAn9yJK5UBXtaGF2pgc6XUv8cps3zVrc8LL%2BOzYBdu3MS1BiaXRFZ4UWmHZvj2r6FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462023aea56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 285\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285,"size_decoded":1112,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"f405ba378af6e49a58d591de3dd3c157","sha1":"b9919a758f37da78b57e5c52dae66a6cd2abcfd5","sha256":"7d336ee5627660a269b4a1f3dd3917c101012e06d0c36ff3bac0ac43e9e4cd17","sha512":"d723b5987c67ccaf75c89feb8e4d5a9ca6f28a64da100505776f796e60edbe4aafc99103ff1803d0759d4e521f77283de37d7cb7ef0bfa8248f7edb014f0597c","ssdeep":"","tlshash":"bad02bdf35790da88d46cba68509cb06fbd35b230710d41f294ee2766500d5ac2e556a","first_seen":"2025-08-29T01:16:58.510396Z","last_seen":"2026-09-05T10:01:03.286902Z","times_seen":101,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.724Z","timestamp":1788602383724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-73\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 443732\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBh0cNeOlF3CKmYPLgpBNkZqfD%2BeHqWJ4qLjoLkLGTTV6IObn68SfS%2BltRvx2nO0UVXPuywkxrFPP3tYlMZdWJRBR%2BCQ1IqegRy193x9cFbv2mQCUQJzcGIePANq7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462024af156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 115\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115,"size_decoded":943,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 2-bit colormap, non-interlaced","md5":"d44d7c6b5ec5533441c475984d36c4d9","sha1":"17046def53f582dc42f2b376c70a274948e3533b","sha256":"bd930349392a8d2827011b247704de9eea2167cec49f81e511a24b23c66958a5","sha512":"d729f02f13c0c0622a1b265a63bce6cc4b75f0469311695268f8a4d6c6a492cb5968b8dc200c919960d237f388b7680c31045cc69dc0057b730eb8f1a697bfc4","ssdeep":"","tlshash":"7db012da336acc39ca450b33713ca1c4be74126d4719018f481fdb7b58142c592997d3","first_seen":"2025-08-29T01:16:58.546694Z","last_seen":"2026-09-05T10:01:03.287915Z","times_seen":101,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.935Z","timestamp":1788602383935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-162\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8reE6CvD459tw3D1STWU1zoD3Wc9JHhpVj%2B%2FZjpSbOjMsY6Qo1zGMmVozfsZvwbYRosdI3XzHyqfXPyY641O7BRrvVBaitAaZC3zRXQdIu%2BqaufvTe9%2FscVbtIOGLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462039b7356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354,"size_decoded":1185,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"203593c54336e784daad4742eb78d9f9","sha1":"3977ea118f1535717f5ea2e68dfe327ae7e3ae42","sha256":"c1f7b89efec09f64e422d2f9b76be8c0ec2e241bc121d6e7fd01fc1994659a38","sha512":"71dfb5b6b40f74ddd646c1ce8d8958a8b88e4cb6a7399d573068128ecbd01da37b06c619beb4a3ac0273f503f73733a98d247fea23bd51f6a8bda0089983d821","ssdeep":"","tlshash":"81e0c0f391115f73e7dc0a1710146b24ee6dc7a47a60c1043c739aae757c00564d9984","first_seen":"2025-08-29T01:16:58.449762Z","last_seen":"2026-09-05T10:01:03.288929Z","times_seen":99,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.943Z","timestamp":1788602383943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-130\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTvuaP67SVOwRPEeN4azdPakf6jcBHEB2fBelnFJmTCgeXsuhlMlVs1JkXXjF9qdcgk9bWOkiegitvvLnsc0DNZ8bq5DCdNvVOvoEN21YvIUKOkcURMsdx8ZZKZ%2Fmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203ab7a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 304\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304,"size_decoded":1129,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"a9e8b77af24fa84c956172280a7f4d59","sha1":"7184abb53fdb76643f5fcc71291e4ea981fca7ff","sha256":"a0712260fd394e74be80bb5c742db06664148ef3aae99f1202eb3626a25a88b7","sha512":"f22151d5278067ea6e44657bf9311becdc07828dfa7982bd0999563c38474b55d304a5b5bb08de84a78179f314d9623226095dddf9de9f6391ba05aaf388cd1e","ssdeep":"","tlshash":"f8e07d5276b90c1c97e099228a82109158f103706107111ed679d8a5321915691328a3","first_seen":"2025-08-29T01:16:58.680312Z","last_seen":"2026-09-05T10:01:03.289846Z","times_seen":98,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/Untitled_design_37.png?v=1776211077\u0026width=1250","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.188Z","timestamp":1788602386188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/Untitled_design_37.png?v=1776211077\u0026width=1250 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37220\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sat, 05 Sep 2026 09:59:46 GMT\r\nage: 2451131\r\nsource-length: 604706\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3CUNYpEckD2R1%2BX2VJ%2B0rXOgd25rLwifax8FfxA46WXYej%2B9mwSMp%2Bg4ELQQzFdPZXyiMVIwd55ZWmeGCNnDvMyiWay146EQ%2FgfjgQd8xkSKrdNmXM7QsUMmMozZDvw%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: d9f48e6c-2de5-41b2-a1f4-502d25358b75-1786151254\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncf-ray: a3646211acb8569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=308.486, imageryFetch;dur=189.203, imageryProcess;dur=118.127;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37220,"size_decoded":38455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a21218d17641db2417b31bd485ff739","sha1":"648698be6d3d792f0376eb1647ad43b64dc3568f","sha256":"e06b21837eae84518f6f28411da147c07f8dfb71067ed5f1ae99c58e6eac591e","sha512":"47561706641db8388ebffbdee480544f83a3c71b8adbadd49f0a0576e9b587bb4551a0766e0e7c89c4746c87d1d68336b20ee3f27900613415a542813208e2cc","ssdeep":"768:B3xvMvTgPNJN1LLDgdYoBcJFA/eBR7HIx4ndEL4VD/S1jydaRo5:BBvMvTghRFoBc9Bjdfq1ecR0","tlshash":"abf2f17c5e4bd014ef8722f28db226793500ca55e24fce4ea635f305793e9b356510a6","first_seen":"2026-09-05T10:01:03.290878Z","last_seen":"2026-09-05T10:01:03.290878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/.well-known/shopify/monorail/unstable/produce_batch","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.520Z","timestamp":1788602386520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"POST /.well-known/shopify/monorail/unstable/produce_batch HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 205\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":205,"data":"{\"events\":[{\"schema_id\":\"trekkie_metrics/2.0\",\"payload\":{\"metric_name\":\"serverSideCookieNotSet__shopify_y\"},\"metadata\":{\"event_created_at_ms\":1788602386234}}],\"metadata\":{\"event_sent_at_ms\":1788602386234}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-allow-methods: OPTIONS,POST\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-max-age: 86400\r\nx-request-id: b510204a-1204-4104-b4aa-278d1df9c4d9\r\nx-robots-tag: noindex\r\nx-shopify-location: us-east\r\nx-download-options: noopen\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwvdxkUgQr0yRy1KfN614qdb2HwiUQww6i1C3kGX5NE2xH%2BfEX5lrpc8wj24vArRheqJ4OubeOn74EZ1fYPNbIex4Btr5BeTtHzx%2F6cVacFYwXdhP24o7ArQJxJqyXHoEOqohxGtipCssgnczEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a3646213cf1c569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3191,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/hn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.847Z","timestamp":1788602383847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/hn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-e9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374726\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JY2dku%2BstyhvhFTcOdkFftFriImnJivt6ioyRQTaPr0qO4zAOlL%2FZbC%2B0jqEoBsCz8Na84sbxigxa3Ig19E0FZsYXEIhR7F4NaRgmTaCPDs6rWaSPjnO9IQy8S3VbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462030b4356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 233\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233,"size_decoded":1061,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"5e3620d1698a1db1d861ee8b545dab34","sha1":"8edc35646f6f6148a674bb44c78b20712010ef5e","sha256":"40b0f52cb77ec753d5c119a47eded0d673470537d0401f8b5c1231429a1a20fa","sha512":"46d9d12b2ff9d76a46e6c9a6adae4c52783f30ac67d17246000da11d4f7f1cf25eafd900fef146992285d12d3b430d2dc3ebb3bd32454a0237559d1e33eff7b2","ssdeep":"","tlshash":"17d0a7e5f5c51c3457e5903a62697522eebb1215081341152656906816d478a448dff2","first_seen":"2025-08-29T01:16:58.673143Z","last_seen":"2026-09-05T10:01:03.291664Z","times_seen":103,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.931Z","timestamp":1788602383931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-f3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 443732\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyaofT15RgjX7N5q2FayTkg6ZJ6BIAAM9u2xZUqKaZF77qGidg3uaUjd3pcU4u1hkhBvZe9YTVbHMRpcqmKbjM8LMwkeN6TwveekcJ7%2BNaG%2FHROutrXvPtgdbLyyrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462039b6f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":1069,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"2045a3ffcacc775dafb2d71a0c25c3d9","sha1":"873eb67c1c4bdbac72df19e001b3b256ee88dcb4","sha256":"5556b719ae8879eebc9cff61813b1aa6a6632efedefb6b2bb2de080cb6df45c9","sha512":"5949e5dc161998ed4717c318ab781ca5027d71a5c5d9c68e4e89c06f1fe245962beba2a4dca782820943a0e01f8fcb2854d3609164e3c47ef2639bfbbc3e6c9f","ssdeep":"","tlshash":"0bd09793c44a2c2b8e9a242788409c612dfb4320bf0a950e08339e3f1b368474095194","first_seen":"2025-08-29T01:16:58.677866Z","last_seen":"2026-09-05T10:01:03.292553Z","times_seen":101,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/lk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.022Z","timestamp":1788602384022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/lk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2a1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2436129\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VW7gXlVfB%2BCPRXZhpd2OT7oPkL7%2BcMwbt4uWcGK%2FKxPnM9UKUWne8I%2Bh6ZcKdkU%2BrEiSgol3HjlkMsPes6shjUhbLYJceEfjfKWywARbqo2KWBGFm%2FJeffMxg8DSOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462042bb756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":673,"size_decoded":1509,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"b19fe98a0c01eb63cff886f279eb8982","sha1":"00d9b4da4337dfd0b81b1e16bf893ca64c231d6a","sha256":"9313b9f86445835ee2a1a026bda52ee079a9b8b203dc43e11396fb5d25f70e91","sha512":"418073d0c4ac600dfb4820454c92016191d1a7783f50e8ce6ea90522664ec5f4148f21c34551d346a9f57388bfe46d3e2a3bb8b1123dc0eecbef93143f54b639","ssdeep":"","tlshash":"050183a3417d2cd8c18de221676d2270ae7ada24914220e21d6fcb91538324204cef0a","first_seen":"2025-08-29T01:16:58.479131Z","last_seen":"2026-09-05T10:01:03.293559Z","times_seen":101,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/.well-known/shopify/monorail/unstable/produce_batch","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.522Z","timestamp":1788602386522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"POST /.well-known/shopify/monorail/unstable/produce_batch HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 241\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":241,"data":"{\"events\":[{\"schema_id\":\"trekkie_metrics/2.0\",\"payload\":{\"metric_name\":\"navigation-PerformanceNavigationTiming-navigate\",\"shop_id\":79356199133},\"metadata\":{\"event_created_at_ms\":1788602386237}}],\"metadata\":{\"event_sent_at_ms\":1788602386237}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-allow-methods: OPTIONS,POST\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-max-age: 86400\r\nx-request-id: eca4db7e-f07b-4632-b6ac-4862f8b16114\r\nx-robots-tag: noindex\r\nx-shopify-location: us-east\r\nx-download-options: noopen\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vl2VwdGhnwUOaUakCUvw2nLlerKQfaYKfrODkT7VxI%2B%2FN3rEiPMs4ZNQdVINITzeS%2Bg3iEZhScgLJ7w3BnLYg2mk3N4p8zy60NrzZCgzNB%2Fdycjj%2BS2SAFGphSEnLJkMTKaabR%2Fjoj3U1%2FdigDs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a3646213cf20569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3237,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/storefront/standard-actions.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.803Z","timestamp":1788602383803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /storefront/standard-actions.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4462\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600, must-revalidate\r\nlast-modified: Sat, 05 Sep 2026 09:37:30 GMT\r\ncdn-cache-control: public, max-age=1800\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/storefront/standard-actions.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEwMbpThIhCNq%2BFG%2FPe%2Fkwm%2FEIKaNA4MHQKj71tIVgZssrs1YP9IYyI7HOUEH8cCc%2BMB3LNKgKuRNEIji3TpsVrSDNTRbImSBjU4NC7FrC7ZVhysygLrCP%2BOl8znWrWyxQ%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 40a16c21-183c-4ffc-bc39-20553dcd43b8-1788601050\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 1333\r\ncf-cache-status: HIT\r\ncf-ray: a3646202cadc2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=37.536, imageryFetch;dur=36.621, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11267,"size_decoded":5687,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11214)","md5":"dff74a50ff1fe8027bafac748d47b33b","sha1":"799ce13526065808719765c653b7fde13bce0557","sha256":"f726c36acddcd5ae627e5786f31e0cf3dca02c4b3c38ff0ceec3c1b32edb7eb5","sha512":"a2a6f8a617cb8aecf422af6af1f920c628c8cdf1e341069bb9b066025dcdb3462d3a55bd7d8e7c83b448c452fb78816e873052c405b4cfc4c5ecbe7528ebacd8","ssdeep":"192:vm+8XnNYlQeVV8wjdnHWY8NnHwGzBIWTXYeX0wHPw7AXBQmv:v5KNYlP8whnHW/x/M/wHQAXBQW","tlshash":"8032d9a07392b9724bfe5016b06612c0f67465869c1e1434e1a9ce5b27bd2c24ff1f7d","first_seen":"2026-08-07T00:20:59.638496Z","last_seen":"2026-09-06T13:16:07.532483Z","times_seen":6708,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/rw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.993Z","timestamp":1788602383993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/rw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-119\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2603634\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsZwJqAILYgg6ZXJMoYCTHj2bBPZ%2BF4kNLYdKl%2F8bcOrJG94heWWMgG%2Fzo2f%2BQPqQCwmlmHnmNINuOUtwYcxPuc4cJ%2FYytSTz2JzO%2BL5Yr2M%2Bil1qFiU5kVOl82mYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203fba056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 281\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":1119,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"3c262db719449b114d68f389f1e82f99","sha1":"b3aafa1e12b5fd38ab4a2847d41f5a3694296f31","sha256":"254565a00c8d28fb3fa06b4c2881df2d7797983e9eaf0e6dca01ce59aaec354c","sha512":"673eae27711c0dd34a29094a38d6b4758c2c82a0d77475ac970d29d2e1b5fda0e2c95a25eced62b3d7683c2405c08e9110fb38e5d733c11a4c88847bb3e3f537","ssdeep":"","tlshash":"80d0ebb7d31cbd00a63ef3df05a060a3c4b6a3ee65650103112285982606f9a64880a3","first_seen":"2025-08-29T01:16:58.454029Z","last_seen":"2026-09-05T10:01:03.295079Z","times_seen":102,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ws.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.995Z","timestamp":1788602383995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ws.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-f0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2277730\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGKwA8YegbfFUrs1n07vAxIqrull5IsY1lSs4%2F3io8buOVnnMOmCJCHrValZ2r6SqTRyfSnhSPuHHpsVDgdaxmIeUm4LRQzHs87Z8y43rR3resIUm1dEgD4LWBn3Ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203fba156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240,"size_decoded":1065,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"9c91008fa7f87ec15f873ad9ffe20e6b","sha1":"727381340466b0f0966a66e64bee330710a6daf2","sha256":"41e9e3b473f4f7300dcae528233c1203f0a713eaaccd4fd7dc16e9251cbe330b","sha512":"fba5e6671b6596c941aee5090940f441d2d10819eb445cb010ba618c5ca8bbfdd2d76c01f75a7af289f754327494ec85551d7c3c37220b3ff8b2d4e40aed8c16","ssdeep":"","tlshash":"8ad097d9f8b3dc72878a985fda8c1130e8602018a7235647082ae8299c02e0e868646a","first_seen":"2025-08-29T01:16:58.458449Z","last_seen":"2026-09-05T10:01:03.296013Z","times_seen":99,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/wf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.144Z","timestamp":1788602384144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/wf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-137\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6y8cS%2FkQDDIQHGkQmwaCCNxYjI4g4LKwqPDBWLJfwAHg8eLLDTt%2BkCoNMMwFVyhaG%2FOzntfG0o7O%2BbmZLfgAdqTVgxHs%2Bf4hvUvuiFRMxvlW52qMv9swPI5CT9Oztw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204ebe256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 311\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311,"size_decoded":1144,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"26d068befe64cb470fb1f6498ce3054a","sha1":"64160803f1fbe27f685e4bae15832266803260bc","sha256":"60d7830025a9935c3c17cf1acc8680bf26bdfb12a761c851f48d9d59c4a891bb","sha512":"6ade586b6b10b1cd26f0ccc21fd135678683717f156af07c0ca164fb6494d961a8429ad60d108657e794292136b7fb74cccb23d59849540c21f491d2e142c5b2","ssdeep":"","tlshash":"18e07de3e164dc75a45401b1652ddd73b932e3af641ab05a15c9553165650190749209","first_seen":"2025-08-29T01:16:58.702516Z","last_seen":"2026-09-05T10:01:03.297158Z","times_seen":95,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/wpm/b80079e4cw22952a98p55856082md4f1b6b4m.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.545Z","timestamp":1788602385545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/wpm/b80079e4cw22952a98p55856082md4f1b6b4m.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 72826\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Q3ojFGPtAJlvIFWksVVED9TuYEIvCWKypb8AqpcgKH%2BaXYtLl2QrnYDwDiKn4jRcyV1c9Lud76F658ZbEBV9RZQLvNwGmLgG3azKfDIBx8mJJWtxcDTx4k%2BwIBqyEbQIA%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 03 Sep 2026 23:08:15 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/wpm/b80079e4cw22952a98p55856082md4f1b6b4m.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 8efea7c8-00e0-43b1-ac27-209c86b0eb0c-1788472294\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\nage: 130090\r\ncf-cache-status: HIT\r\ncf-ray: a364620da8ad569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=149.447, imageryFetch;dur=135.057, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251234,"size_decoded":74078,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"e2e04365b6ce95302e0f085de7c76982","sha1":"1c8afcebee5043d819d849adc57ca82d4b2395f3","sha256":"a311188c217b98f681d75d49ddf5a4028b833c04ca1cecd9a03ad1671cd1d6aa","sha512":"e6139e962f04af73f193a6baf21f5952ab18257dca8aae99d382f673e8f4fd8f37c007493560cad8f6359827e936aaa4c3e92d5fbba6f30683b30e86e128ceef","ssdeep":"3072:dSmPCRUXccYoDMd8AkKcr0/yraN4NGDCZqsKUgBFwpH:kmPCWYj81HyyraiNMCGZFG","tlshash":"66342a98f2b2b47107f711e5903b0401f7351965b84d84a0b39eee992da598a83bff3d","first_seen":"2026-09-03T23:22:50.088199Z","last_seen":"2026-09-06T13:16:07.587192Z","times_seen":465,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.window_BV7pwtSs.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.031Z","timestamp":1788602386031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.window_BV7pwtSs.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 532\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nlast-modified: Sat, 29 Aug 2026 01:56:16 GMT\r\nage: 2338909\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.window_BV7pwtSs.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOjyBeaZBwEksKyb%2FwwbUyqU9Lda%2BwqNjf7l35swGDdXwY92pfBgzXRfj5wXjjc0E2LGulqmLkv9BkKGPFfnG7lEcT%2FdlbqQBgsVh1lgZJGyX7HcUaChTq7ABw%2BzH5VGCA%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: bdb034c5-5be1-467c-af92-a9944befe742-1786263476\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf472678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=46.338, imageryFetch;dur=45.892, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":1749,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1215)","md5":"ea947b9e8858eedf10e14bebffbc6cac","sha1":"e87f37e1499f0385fb72b6d301d253c75362ad96","sha256":"f2f2b61eafa7c2970e23d78d10c99216fd9e57a56c8f19557c55c18b663d2db8","sha512":"300bf0bf7a639e4371b622b699a5c84201b501264806cc1cb89d3ed61a312cf726d0b4ebed8484a5988f831328c44075ece46813e335bbbfa642b09083b4ceb2","ssdeep":"","tlshash":"5321a0b7c3932bf614674ceaa521b5d1c33104d574681760aa0e9c222f89f4e3718c46","first_seen":"2026-04-14T20:08:13.913696Z","last_seen":"2026-09-06T11:36:39.469606Z","times_seen":80105,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/.well-known/shopify/monorail/unstable/produce_batch","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.148Z","timestamp":1788602387148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"POST /.well-known/shopify/monorail/unstable/produce_batch HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 556\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":556,"data":"{\"events\":[{\"schema_id\":\"trekkie_asset_context/1.3\",\"payload\":{\"build_id\":\"ce2a643c30d67cd7b828f2dda8cfc17d1d88fbb5\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"app_name\":\"storefront\",\"shop_id\":79356199133,\"monorail_region\":\"shop_domain\",\"source\":\"trekkie-storefront-renderer\",\"visit_token\":\"00000000-0000-0000-5000-000000000000\",\"surface\":\"trekkie-storefront-renderer-browser\"},\"metadata\":{\"event_created_at_ms\":1788602386239}}],\"metadata\":{\"event_sent_at_ms\":1788602387063}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-allow-methods: OPTIONS,POST\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-max-age: 86400\r\nx-request-id: 684efedd-646e-4486-8f41-468ea9474716\r\nx-robots-tag: noindex\r\nx-shopify-location: us-east\r\nx-download-options: noopen\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxKqromYHhhvpn7G8eozVgcTsO4g4xnaDlq4e9MUTLJdb7cIcqAsvEe93ypWb%2FWNzj5G76TYIQUBMy5UjWOxG%2Fr11VEsCF1W3Vth5BIyH0KPJfifElA40JXZFB1h%2F18581cDZUTiaaaEFnde9cA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a3646217bac8569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3544,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/t/27/assets/secondary.js?v=63522464628986351641782994699","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.538Z","timestamp":1788602383538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/t/27/assets/secondary.js?v=63522464628986351641782994699 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 26786\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Tue, 11 Aug 2026 23:00:15 GMT\r\nage: 2214597\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/s/files/1/0793/5619/9133/t/27/assets/secondary.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQBS0mRbU%2BFhjyspA1i1rZehHJPB3%2FlaTsjkaVQHzoazXeRaDoXkFcozKzxfNRNr3acezorMLQ9IVx7pWkkWk0KvQgbksFiW%2BDr6q3ythbVDypOM8qg0o5UtBzyR5vg%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 0c00ea95-c92b-474b-b298-52b4b967b744-1786387785\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462011d4a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=236.300, imageryFetch;dur=133.465, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96233,"size_decoded":28068,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"95f46a6b4d5e1275368ed65fc54eff04","sha1":"b2745a5a7410270f48326719faddf0392b816af7","sha256":"bba17cd2705e6ab9dba221bdce6b2177e4974e537b307e82c8aeeb51c0e3dfc5","sha512":"497c985cec167c10c7072b0ddc1ee14e9b808b75388f3e6dc8eb37da054fe2a3814cc3b097d7d370104a143f70a73d9423b6363c16703aae6a79c3c03aee73d9","ssdeep":"1536:AkgQOgpe1J6yXqe42MBaUU5TsLRgrg2up/Kovat5ZavZD1goJb0Rs63wRyjZz7zA:gz6gTMBTww/pvSHKyjZz7zrzhpZJ9TOF","tlshash":"e293f9d5b210753502db92e7909f4582e3b530999406841cbdbcccee7d6cc9923ba7fa","first_seen":"2025-11-27T22:50:57.752758Z","last_seen":"2026-09-05T10:01:03.299065Z","times_seen":371,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.770Z","timestamp":1788602383770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-18e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2141387\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2W1CbdLsnRTAPhlKHxWTkY9sbY0g76m%2BLYrNeXbBAFwWEbFOUC2VIvi3%2BKn9dL%2BLh4KnUT%2BoylgBCazpnuEiLIwjWgclefmUirarnPWWBlSV6meL69NvfTiEUj2sIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462028b1056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398,"size_decoded":1230,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"412d6eb9cc44c0e8fc297b7d0b64dacb","sha1":"77524912178d81cc1c4251239de49c0955a595be","sha256":"aed03feb8e13cbd79cb0118741182306f30878d44a58b095cd3758dfb4f75138","sha512":"396a603e8629aff2e221d7554f080d234fc337bf7923e7406df25ea3d6883e3a2385d273952b31fe441482988e67b972a8cf83d4a5d9e110ed40b3cd87be3567","ssdeep":"","tlshash":"d5e0f1f75809cd0c5dd0dc0a995964dbfc25814df7404a4d5015c8073eeed104308354","first_seen":"2025-08-29T01:16:58.523666Z","last_seen":"2026-09-05T10:01:03.299785Z","times_seen":111,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/fi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.814Z","timestamp":1788602383814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/fi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-86\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkZzdC7vipAkgUJe3rgFwDnfBAdQMSFWREXR8AoZ6j%2Bs4Dph8mUomB63XskGd%2FhjLsF%2FceSGCxT%2FxoWvVQfM2p%2F4ZOpZJwSB7vTX8RiCHvHAyJIhaqfcRWq7EESZ4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134,"size_decoded":966,"mime_type":"image/png","magic":"PNG image data, 80 x 49, 4-bit colormap, non-interlaced","md5":"c11c35c355a89b170654c70690c87dc7","sha1":"765d4726f704af62e16c41ec0e27fcacc0a1adf3","sha256":"0450ed61fdb1680a727663e3a922635e03e4cb3fa019c258b8a1e2e2a6e73701","sha512":"9facbe72643b90ea8aac7841e92297afd840504473bd301dac052943602e15bb6f7a94e3ad86a21d09427aac765a39a598685aa994e745e5586234712768a061","ssdeep":"","tlshash":"cbc02bc77f434c39c3c1003b53500934f4c2080461b301251ac644361a3529540e9503","first_seen":"2025-07-08T00:55:32.395848Z","last_seen":"2026-09-05T10:01:03.300719Z","times_seen":219,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/lv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.877Z","timestamp":1788602383877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/lv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-5e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FbggH9SDXWCaERtHN9CR%2Bi0wTbR2yZxoZYH%2FuQeztojyqAj%2Fmv86k8evDx0knQtb%2BmDmewJ0yD3tkphvCbSTwqcqA61rEpjzU9fjf%2FXG%2FDCY81VCmOJZ%2F5X9S6oOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462033b5d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94,"size_decoded":929,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 1-bit colormap, non-interlaced","md5":"6ae36ff36a769a4dbe010ca704581433","sha1":"09bc2e0883fe1df605563d31dd27a417f83c8c67","sha256":"645630d51b2968c8aee6ca8ea1d4823b774fa54a2e8fad4c05ae6c7909430c28","sha512":"b699eb535263454bf3d3913b023294a4b53951e9eb0ef0d926d04b178d7ab84efef412fc92fd6f166b5b62b999612fe25ba9fe47ff01e68bf8a9cf9d9390845c","ssdeep":"","tlshash":"efb012c22d900c62d14a196382564001e62a84980605070722c588301a30048b0ec191","first_seen":"2025-08-29T01:16:58.551471Z","last_seen":"2026-09-05T10:01:03.301276Z","times_seen":141,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/us.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.134Z","timestamp":1788602384134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/us.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1ae\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPd9XwfERrvTBQn7MoMZJfM4UqKYKqLnj2Fpta2mszqeWVr00AAvQsp1%2F2QjYXA%2FxJr9%2BcJk%2FVpMGr4p3eLH%2BTcGRJ5yF6g2CWUwfNWK2r82xS1Ek3LNn13z2tJi6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204dbdb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":1263,"mime_type":"image/png","magic":"PNG image data, 80 x 42, 8-bit colormap, non-interlaced","md5":"0534161a3d82678bd6153188af83ecf1","sha1":"7703ed22d52e1f6da00372e418a7f8eddbb7c565","sha256":"59ac434b97e6db8b4fcee5c8e1996995562747e76875625f0886f1936488b7c9","sha512":"194522c7dbda1e8967969f26574909448b3a7cca43660d40c9041b5768e226286ea527f9c34a34a7b5710aeb2eaaa45276f07b712b57cbb3a0688e01c2310ade","ssdeep":"","tlshash":"f7e0a375c3d049fb87ff292521074bc1b5832919d1e71b85734983512117ef0445dba6","first_seen":"2025-07-16T11:11:00.957382Z","last_seen":"2026-09-06T12:43:38.440432Z","times_seen":417,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.578Z","timestamp":1788602383578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 37350\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 11:35:59 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zG7asNANfsT0kScqcfmYNBo4laWoNTcH2zaSSQczEh16kYWzYhmx%2BGXNrk%2FBwbA6A0r9ZBMIhhI9%2FRB3sLkdtDq4RxlDiyQWI%2FsLSaqXPgpL44c0c7xMiLR%2FLu4T67LSfg%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 8b8b2be6-57f4-42d4-99b5-1f1a883f8491-1788521756\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 80626\r\ncf-cache-status: HIT\r\ncf-ray: a364620159652678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=49.786, imageryFetch;dur=40.697, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160611,"size_decoded":38586,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1199)","md5":"ee3ce82b0a89f74a4c5fd37b6229abc6","sha1":"b232d39e19dc23ab76467b1e54beac4957afb17c","sha256":"93f4da54aea7ccbf18a0ac71927f56d476187d60c0fb7c3c01fb99abbdff303d","sha512":"be26428d90b06bec4d66e829e4b0b3ff9c7db596057a0557a297bcd61da3111debd906b5aa4b8969b0a2976745f41a459b0bfad5c0df73ba9b542fa6c3ff848f","ssdeep":"1536:/2ZHTk8ACTn8JXTTtNYRBNkUARogQ1kprxTN5oGIJOp77DwIznu4TJc+5lH9y59M:/2CTTG/RAAkprxZfhp77DwkkH5eeY4D0","tlshash":"29f3b585e2fa10365297a0394e2bf497b618641b268ddd087a8c53dc5f4d53883f2fee","first_seen":"2026-09-04T12:32:16.136104Z","last_seen":"2026-09-06T06:24:29.257807Z","times_seen":13,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/perf-kit/shopify-perf-kit-3.8.9.min.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.585Z","timestamp":1788602383585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shopifycloud/perf-kit/shopify-perf-kit-3.8.9.min.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 23710\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hMqIm58bXmWkSDOzo5dD1yLFX%2Fs8FY3bwUQejY4LAKYOh26%2FY19kCGWkz0RGXI23NQDLQvN3Wvmalxqg%2F8gF4x1fo0ZY2%2BgfkgJHp7wzRHwJyQHqYNqb7SwB95HvZVeKPw%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 01 Sep 2026 13:09:00 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/perf-kit/shopify-perf-kit-3.8.9.min.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: f7782d15-1fc4-4665-b05a-6f2dcd1222b4-1788268130\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\nage: 334252\r\ncf-cache-status: HIT\r\ncf-ray: a36462016d8d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=84.718, imageryFetch;dur=71.912, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75153,"size_decoded":24965,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"7c7b886b1e06be95ed09f4b2e9370858","sha1":"507910d932920cb4f80ed6bcfee4d51bc898956e","sha256":"59de499e88b31fe683b893e583dbc89b555e7aaf77cbac70cea9cafc47165d21","sha512":"0678b02fc94571c0d0385e04bf192cf1966415ec995896252cfed921ddd135b9fb2b00f4c394a4538d3790e78e84d6238b7a25b94e8f0f77e0722cbc8bf3e551","ssdeep":"1536:Gtj204yfcYBpfBYOD+ujgngzNZJycFOIXS0Yd/6q7/:sTNcYBrKrgpFOIXStp/","tlshash":"87733ac57241357267e746f6407b2202a2386951389aa1a9f23d69cf3d6239703bff3d","first_seen":"2026-09-01T13:34:00.708185Z","last_seen":"2026-09-06T13:16:07.585353Z","times_seen":757,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ga.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.820Z","timestamp":1788602383820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ga.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-6a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgsOSnrwiqrGC%2Btu%2FVh5N3z3A%2BUI%2Fiu2l3kgsvzLuiNUiG%2FVrrPx5gzGiZPy8Bq8NT34%2BecPysgfFnaYAeuNGCtnrKEpP9rL3o1j1d2ubQVbsko9OVggsWWA%2B0rbVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202eb3156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 106\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106,"size_decoded":942,"mime_type":"image/png","magic":"PNG image data, 80 x 60, 2-bit colormap, non-interlaced","md5":"9bec75f3508ec4e77e685eae47255074","sha1":"adeea389d6eefe2af5bc7076dca8cbe794556214","sha256":"ad6a998bcaca56cec2f3d18d95d8c1033ed2ba1922638c752e2a7a5b5aa87bc7","sha512":"70b0f79987d85617326360000276e944aed4d61cc6f28d3b9ff2803ea2f98afa9ae6599716216d2c2d0b3300b3201f8a8439db0b87738fa075d01dd2ba26838d","ssdeep":"","tlshash":"8ab012c76ff15cffc3851237862402c1ba210334133263273843c4505a656488244353","first_seen":"2025-08-29T01:16:58.597977Z","last_seen":"2026-09-05T10:01:03.303303Z","times_seen":101,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/xk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.871Z","timestamp":1788602383871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/xk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-22e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1990262\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yw39qVrxuy4yBaJ6YSKLwC7Gc9CewrP3QB6dZPOiiW4xNkJXijDMj%2FjkykLYdH55FTFjr1MY%2BdZORF9j53qc5kHjwt4vDYRzmE8DKV9xesXNeUM0UBmZhn5vTRCm1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462033b5856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":1386,"mime_type":"image/png","magic":"PNG image data, 80 x 57, 8-bit colormap, non-interlaced","md5":"f083705011263a9938898f79e2ad105b","sha1":"4813d5a1415d83b7e5108f83ac7cb37b5eef200b","sha256":"452450d67ea2a07d004a8d19fd3402291fef0c0ed10fd032d17b1d61f2654c72","sha512":"83853ba2d0cb8479491cbad00fe44d9fbe2abe8dc75cbbbd89100e8e98c91d8602329e90218a56ba1503152b06644c269b784113d86624592e5e770cbecfca3a","ssdeep":"","tlshash":"02f07cc5f355045cdf552fd50351827405f4dc27cc959d8f55674d005571d11dbd0799","first_seen":"2025-08-29T01:16:58.637034Z","last_seen":"2026-09-05T10:01:03.304179Z","times_seen":98,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/nz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.962Z","timestamp":1788602383962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/nz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-218\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwLsnB4oVYak9B7ylqwTeUF4pexgHy9NQtZL59JUqB1Cmyob1U6aVHI0gcTBfvddUIuW19Iy1yT9rwC50YfGy4H4N9lTGk685h4Ep7y7Ytq99rWExDTpy92p1OZ4FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536,"size_decoded":1359,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"bc43f66ed2fadefcee73c096eafe8eef","sha1":"56c30b5a7db17291cd952c15ddb4a089fd4f5586","sha256":"2a69d660a346b756b26e5faba477f8033901b76b2ccf35d00463620be4a794c4","sha512":"c64d384000924a7972531600309c561bf9b0ce6837f580a7eb389fa72a7bbaf3122eb1abc9df28e49685b97120bf8a6bbd03fb7da1943c2221edd1ca68968124","ssdeep":"","tlshash":"ecf075e30350f9798b7546de0882cf48eaaac8443d33642902025cf8b0d05fcd7261e1","first_seen":"2025-07-16T11:11:00.925693Z","last_seen":"2026-09-05T10:01:03.305122Z","times_seen":217,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.074Z","timestamp":1788602384074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1ba\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTudb3wjjGByLiZ1RSBA8%2Fy7QnyjFs8wxP4GGn4QNPDB%2BuUVR7EOa96ZnLcTweCzYH25G4Yv26PvvLd4DazvW8z%2BJJ5PUc%2BLpa%2BQPZ9R%2BH770Z4%2B7cF99%2BOkVj7WiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462047bc856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":1281,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"4c98373384ae8837324a5af6efb86a1e","sha1":"1a7c7e18d08c11a8ff1ff57318447f7f1d8c5ead","sha256":"f055c70902ca984d6428de9753f220f192559ac726e49f1d5ba72b7a19795324","sha512":"65e92cbe523329f4358bcc890e4c72a5fdb3049ce8c1c79b3de788e7ea917fc6f2b45d15ac182a16e085960574a78e162b6d74d6ca58b9e0624eb8a04bd8c4e6","ssdeep":"","tlshash":"b3f0a3863350ec29b18810541235e075dcd5a15b4615679e8b27e8b51d6105521f6126","first_seen":"2025-08-29T01:16:58.664175Z","last_seen":"2026-09-05T10:01:03.306011Z","times_seen":103,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.v4_CSBSzmbm.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.040Z","timestamp":1788602386040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.v4_CSBSzmbm.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 478\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nlast-modified: Wed, 26 Aug 2026 21:23:58 GMT\r\nage: 2749521\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.v4_CSBSzmbm.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9q2WsE%2BvQO2MyOaNIYbFxA2rXgB%2Fwr0JEYF6C6QIhFyFsiHb6icDijEibkeAiMD1Zhuyc913IOn9u2KuNQfOBeB%2FvXUEa1Kik%2FNs1ieUOlntASg8%2B7%2BRXlSFYbt%2F%2F7wng%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: acf119aa-9049-4522-a076-699bff63ca49-1785852864\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf5b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=30.869, imageryFetch;dur=30.503, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":950,"size_decoded":1699,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (899)","md5":"1ffad383f4562077a039422045939fcb","sha1":"378957922c75ef6c24c841b93d3a06ab7dea8cb0","sha256":"0c7c1a4c48aca9bdb7acc19fbb689bdff42d1ccf9c4d65a09cb87cf54a18edc2","sha512":"65b413f865b450f609e3e6bbbf0719dd7204077a14dc26585096c7ada030949f5989e0faa414f936b9796dd7b15f92304c9026028c7cd836c266e59b7a2bc3b3","ssdeep":"","tlshash":"3011bad6bcd57b3e03d01ca9177ef90aa762b020b2659e1fa30408570db0dbaae1780d","first_seen":"2026-03-20T17:05:09.137387Z","last_seen":"2026-09-06T13:49:10.328716Z","times_seen":96617,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ao.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.692Z","timestamp":1788602383692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ao.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-226\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prUhOBfC7I7pkSzIWa1LPEi5yw3KxZJOZN0gDDhOONqguP9qa5P7BSiVNBb%2FAtN18B9F%2B9U55ZpKtJNde0cMfmyBneMaTGBrBZY5O%2BOzTKrpxZUb4eW2oBIDelaG8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021add56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 550\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550,"size_decoded":1379,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"8d5df3b0fdcd5b91b07ff488b4be4132","sha1":"b56739f051f69dc8dded2421acd62b8cdc30faa3","sha256":"871d83191dc7c42b2be09e8389e58c786d6c0128b73a425ffec3ea6888812f45","sha512":"8846ed7854b054c0b8ebc7240c9a26a93ed96da12327f70748524075cb99195f93b94bca74e6e6d3fe7a4658f5a036ef67a62dfd14163205aa2974f1a04d975c","ssdeep":"","tlshash":"38f026dfb3411e97cd153933d5a9c5abe150a1180c52744504f34f6d0c4c1869314833","first_seen":"2025-08-29T01:16:58.567282Z","last_seen":"2026-09-05T10:01:03.307201Z","times_seen":103,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.749Z","timestamp":1788602383749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-376\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374726\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VjeNp1OHanNAaDKNCm%2FqEaQLrHl0Gyb1vNjD0RfPSLYkxfRqa19wkTqn8h5c%2FRfTmglGNlbTvSKZ1V%2FcrRpyyr7TCimuC5cLayDqN%2B8Myy0Q4NWB3dt0nmLyc48zA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":1717,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"12abe062bec199bb6d88a153781ec44d","sha1":"c68ba1298f6a83e4909bf5d8217118236373401a","sha256":"38896734bbcc39abb741da8c7a3a8a5b959fb37fb510154d6e7ff01b4b06a7a3","sha512":"9d2cec3a623e263ace159a7fd75fe14dedbe24837b91e4702bd94956847642ac6d6a0562393e7984672ee6834a07599dcb0e6ea8451f3ffc3b7dfa63d93a9241","ssdeep":"","tlshash":"37111af022e7b7f5cb4e2351074a7020fa42b1dc11c705a844a32cf83b8aa0db38490f","first_seen":"2025-08-29T01:16:58.421613Z","last_seen":"2026-09-05T10:01:03.308636Z","times_seen":101,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.storage_BGV5Ustn.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.043Z","timestamp":1788602386043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.storage_BGV5Ustn.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 268\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nlast-modified: Wed, 26 Aug 2026 07:15:46 GMT\r\nage: 2325627\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.storage_BGV5Ustn.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbo0EQrrAbeh4ozXlSBvNJsDXXIpXRl5IxGp%2Fv034RItHr82Fo%2FqZ0Zgc76UJUWKk9bvLpD25IX%2FRjL51qH42odiNhhcleDGkrO2ZK4J8xX7rXlHlDu3qMq2acFYxxS3%2Fw%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: e8dd9776-fb09-44f6-b75e-d98ca566c2b9-1786276758\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210cf5d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=36.939, imageryFetch;dur=36.603, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":570,"size_decoded":1480,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (514)","md5":"6bb2af0b10714bd6b955a82f2291c75c","sha1":"0d423cccb03de712d8dd055fa643975e541c93e4","sha256":"f0fa22cd1528db027ebd2d2e3cd2e097c3240f8f2a8149036cdb484f6f376b47","sha512":"bcb8bf2b823ff2727068cb0be2e14abc3c7385b5d76568ff8124e1701a7b9a03135d903270d46fcdcc6ca7013f64f1b5fb317669c5c8b3b92a4fc73a607c5f80","ssdeep":"","tlshash":"70f04c9d75e728f4139055bee06e2621c73c10c1729f018090759b853f6d9af87b68ce","first_seen":"2026-05-22T13:32:45.379579Z","last_seen":"2026-09-06T11:36:39.35859Z","times_seen":55685,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/api/collect","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.263Z","timestamp":1788602386263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"POST /api/collect HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nContent-Length: 156\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":156,"data":"{\"v\":1,\"s\":{\"wd\":false,\"ua\":false,\"cf\":true,\"be\":true,\"nm\":false,\"nc\":false,\"ka\":false,\"sa\":false,\"ta\":false,\"pt\":false,\"mp\":false,\"sd\":false},\"r\":\"change\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nx-download-options: noopen\r\nshopify-complexity-score: 0\r\nshopify-complexity-score-v2: 4\r\nset-cookie: _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\nx-frame-options: DENY\r\ncontent-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYK1RC4R9oxnBsJuKwDv2KZe9KcrFQgcRaXeMB1ZxMlGil7lT30JZ2OFCgdirYJFiJqg7a9VbETPoy2Fe7i7wIWd3G8tIHI6S3OBe2UmmiaqITTo0L9xoyPkkFcvB1Y%3D\"}]}\r\nvary: Accept\r\ncdn-cache-control: no-cache, no-store\r\npowered-by: Shopify\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-europe-west4,gcp-europe-west1,gcp-europe-west1\r\nx-request-id: a0d28bed-2c66-4849-903e-0657be339b53-1788602386\r\npriority: u=4,i=?0\r\ncf-ray: a36462122d2e569c-OSL\r\nserver-timing: processing;dur=8, db_async;dur=1.967, asn;desc=\"50304\", edge;desc=\"OSL\", country;desc=\"NO\", servedBy;desc=\"r7t5\", requestID;desc=\"a0d28bed-2c66-4849-903e-0657be339b53-1788602386\", _y;desc=\"00000000-0000-0000-5000-000000000000\", _s;desc=\"00000000-0000-0000-5000-000000000000\", _cmp;desc=\"3s.amp_NO02_t_f_VMd-tVneRiqZSstfYtRzPQ_%7B%7D\", cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_shopify_essential","value":":AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3441,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/visitor-label-script.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.570Z","timestamp":1788602383570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/visitor-label-script.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 197\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 06:23:11 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/visitor-label-script.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqD6ZLiWWZgzDM02a7znowI4bIhvMMsYj4E6hWLOiW7gg%2FmDN%2B3rfF23lo9snmbCO4oVMGyudvRWGNtIoFu2j%2Fe0oysgLz2cXmOOraCMhhxcGn96KHmSkWwPQ10eJ5D1dA%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 47309026-10d1-4568-8028-5609c9adf073-1788502981\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 99401\r\ncf-cache-status: HIT\r\ncf-ray: a3646201495c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=132.969, imageryFetch;dur=132.681, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":552,"size_decoded":1423,"mime_type":"text/javascript","magic":"ASCII text","md5":"1c9f1a0da3d433eca8741fece3eb36a4","sha1":"0f6edee84b6399954de2d383217bdb69976d5d8c","sha256":"9ccb91df361c27b5607ee773acf0d5ff255641697e04da6e2df52908716c5fa9","sha512":"a736480fe03582b5ef780dcd4fe0cea1b9e72f5f341bef933bd862832d4fcfdeec67fc6c1a2bf07785ab707876f3ea4af2216a41236c1fb4d0b44d55798334af","ssdeep":"","tlshash":"3bf0621e00996f809b6b14d8bd571108b323b1c3b4ad86993a0d97043b9262b43b1fdb","first_seen":"2026-02-08T09:13:17.494373Z","last_seen":"2026-09-05T10:01:03.310165Z","times_seen":103,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.788Z","timestamp":1788602383788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1df\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fy%2Fa4yyTn%2FE1u1UFDURDcZB%2B0L0z8YLoHUdNGGVjk6ybG7bWdbgyqwMA7C3ZT%2FgFspCHw20%2B%2FyMLVEKtiavw%2Bf8FLZhs1n4fednuE5z4gAkKusWm9nNjeR2KCKNFUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202ab1f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 479\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":1316,"mime_type":"image/png","magic":"PNG image data, 80 x 45, 8-bit colormap, non-interlaced","md5":"13333398baa5c8674c351fd1cc35c82d","sha1":"26897ad6f348b68ca10ba7a9734af0b06287c26b","sha256":"0325efeb9cd30269f18a30faaf848d0e6ee83118dcb0effbb821b0facd087862","sha512":"9d675597a4c0f96ae2db8d44795e982523e389da1647f2f9ba82f83d36e59a5a724484281ecb2fb9a5a0e2ba4fa11ed319a72a2e78f5379840f26ddd5a4e85eb","ssdeep":"","tlshash":"80f054f6323ee47a5f487a312c2949e8d81f1b30d1503c8d243bac21422ae68ca8815d","first_seen":"2023-09-24T08:31:43Z","last_seen":"2026-09-05T10:01:03.311128Z","times_seen":107,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.437Z","timestamp":1788602386437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7905824\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-7905823/7905824\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tuOZBkPUa73cVi970AZwxtPIlQhg7PXCD%2BSyPfZN9nE3FcQM%2Bsj2PzDPTU5nJrkYqWMZt1Hef8Z7hT0iVmglgteWn%2B978OzLCzDiJrxdx%2Fl4YhMW2PtTmc%2BfsnTScBE%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 93006eef-8a39-43bc-ade1-d33b0b4b8b8e-1788221719\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 380666\r\nx-download-options: noopen\r\ncf-cache-status: HIT\r\ncf-ray: a36462133e81569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=358.953, imageryFetch;dur=358.491, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2359296,"size_decoded":2361003,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1fa80a8df9cdb0f93ec2c52cb4b4672e","sha1":"1f641636c507ba0f74939ab82216a4ae3f1b1316","sha256":"ea09666ae48cd2d945b7dbb1215c0a6a05d7c2ab611650ab66117afc9c738a41","sha512":"eec9ccc658bd61394fbe39bcc79bb116f66784f743762dc90dcb7ce583934f720e04959a7b83d2c1a2a795f70e2a7dfa843058fdaf5cb01270f847ec12bcc8b2","ssdeep":"24576:0acg2Ormu/iMtBkukFkSHkHi3YKQaMJ3qybYTikdkVi:2OrmCZ3DkFkti3UsWDI","tlshash":"92252366bba4d916ce7cfbb043f61b84b2b5cc395b0b57af8066520d5dc87a1b4871c0","first_seen":"2026-09-05T10:01:03.233977Z","last_seen":"2026-09-05T10:01:03.233977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/kw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.872Z","timestamp":1788602383872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/kw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-e9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 380739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d05l4K8TvRGfsiOBc10x7lEf0HiTyLmqNHr4u24cRPadmaHRGOQoTDbboxHvx0w%2FxDKr1hCoSuNDwQw5QvfIeS6KvHchGfipbBAgp05zpdIl1GBUOwenrFaEJw4rOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462033b5956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 233\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233,"size_decoded":1057,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"852cb6f9b201a73491bb1d82a2740fcb","sha1":"6bc88da4ea844ac2a1cee869dee92641644861e2","sha256":"6015e3d991364ac735eac1cbd45550c19edd63309e9a07961cc0ea6a37f3096c","sha512":"9edbe157b41da3dba309f409a18ade022c1f9b2cd79a7c802785bf1dd92b8b2e83cc846a8b003fa5dc573a1689f37bb2aaef0852b465014c1aecb87a31ff40d5","ssdeep":"","tlshash":"4cd097a682626e729828083127a036a2d8e1088c02b6030d43b3808a2628203a0cc5aa","first_seen":"2025-08-29T01:16:58.600344Z","last_seen":"2026-09-05T10:01:03.31218Z","times_seen":109,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/np.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.958Z","timestamp":1788602383958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/np.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-408\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZrNLO7d6xJ0rA2PMcmDXG8mt85EH2VRmyBKjORY8DjzL8dB5y6dvxzk5BN5gfk5MKfvm0RGBFRCOu8atgt6WsWg%2FidkFSfqdocdR%2F36ajOkFhVY9Gr4gegJ%2Bz8ANw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203bb8556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":1862,"mime_type":"image/png","magic":"PNG image data, 80 x 98, 8-bit colormap, non-interlaced","md5":"c894afca92a194e8fb75794ffe335c43","sha1":"86ef15ba017e73700606afe5d2e909114e0d75db","sha256":"35dac648e44adfdd7f3d37c813b12d2c45391e9556573a6496599355bd80f5d4","sha512":"abfa3933388303e9ef8f56ccd87e2b1170b06c3f75774ac1c956713d3d3c9b5e16cdf9edf308b5c078118e28ebac30ca290200d6bb8518b0ee34ba3b73571c58","ssdeep":"","tlshash":"7b11a846d4b149396ff232a16b5f91846542432f1b8b21260bef5826684926a0af9e16","first_seen":"2025-08-29T01:16:58.512746Z","last_seen":"2026-09-05T10:01:03.313255Z","times_seen":103,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.087Z","timestamp":1788602384087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-28d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 443732\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cj2wzEbA1bN3MqgBdtV1b52%2FGrVeBr7SVzAXOlDLtGF4t55pyDkMvO9ny8ts04CBOtnKdd6Rj6kWN8Mmv6JSDEpHlyZs8D8P0%2B4uTwj3ACffsMq6NCGcX%2BjgcF94JQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462048bce56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 653\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":1482,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"cc300a2c113fecc1aae781f3b0484047","sha1":"d0dd2dc7b7d67c222430963bcdea9397138caf17","sha256":"22243a94f33d3d307980935b449c78c26f742ab383a66660f8dd0dee5354e5aa","sha512":"76090748d80860136c4ea8569a33a085a269ab92fdcf1f9c588ee6d9505b3ae0cdcbf04fc30646c32c02575931581adac38a64eeb8433e0fa0e797442b6cc99f","ssdeep":"","tlshash":"ebf023bfeaa54428b5f54ec1fb2314dd4be0c12f8ba0124e40edb5b329526d52573590","first_seen":"2025-08-29T01:16:58.516967Z","last_seen":"2026-09-05T10:01:03.314241Z","times_seen":100,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/uy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.135Z","timestamp":1788602384135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/uy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1f8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYtko5mYaT1Y3rvNFRglgfvF74AuV5aVUIv1Hvi6afePx%2FH4Wbr7kpv6Q8AOI0KgR6sSSpH6wcvfALxHd4x%2FHLstztwJxG0jt5yWTac3uq1celD08%2BlyQw1lotcpLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204dbdc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 504\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1333,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"052731659284fd8965461bbd7aebf41b","sha1":"4a0515ba66bb7702aa8b82707068d74e5ee6cf31","sha256":"f446f4d253f26719bdee356b97231594bc2c01577cb7ddc26cca1652b0b330c1","sha512":"c9d4d79e95dcb80e5528a071d0f8851d0b31751a5e038d997a4b8d0a47f5d71f8f9030448352544975f0cb8b1f888b401930539177ddbc569564f95458c628a2","ssdeep":"","tlshash":"cbf075d2ff00ee3ee15895663411f0204159199827438c7d03aba035a735d0043c5305","first_seen":"2025-08-29T01:16:58.461777Z","last_seen":"2026-09-05T10:01:03.315171Z","times_seen":110,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T09:59:42.987Z","timestamp":1788602382987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 88789\r\nx-download-options: noopen\r\ncf-cache-status: DYNAMIC\r\nset-cookie: localization=NO; path=/; expires=Sun, 05 Sep 2027 09:59:43 GMT; SameSite=Lax\ncart_currency=USD; path=/; expires=Sat, 19 Sep 2026 09:59:43 GMT; SameSite=Lax\n_shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\nlink: \u003chttps://cdn.shopify.com\u003e; rel=\"preconnect\", \u003chttps://cdn.shopify.com\u003e; rel=\"preconnect\"; crossorigin, \u003chttps://code.jquery.com\u003e; rel=\"preconnect\"; crossorigin, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\", \u003chttps://code.jquery.com/jquery-3.7.1.min.js\u003e; as=\"script\"; rel=\"preload\"; crossorigin; integrity=\"sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo=\", \u003chttps://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200\u003e; as=\"style\"; rel=\"preload\", \u003c//tryrovina.com/cdn/shop/t/27/assets/base.css?v=72514207947921368001782994699\u003e; as=\"style\"; rel=\"preload\", \u003chttps://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-runtime.js\u003e; as=\"script\"; rel=\"preload\", \u003chttps://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/theme-clear-cache-script.js\u003e; as=\"script\"; rel=\"preload\", \u003chttps://tryrovina.com/cdn/shopifycloud/portable-wallets/latest/accelerated-checkout-backwards-compat.css\u003e; as=\"style\"; rel=\"preload\"; crossorigin\r\netag: \"page_cache:79356199133:IndexController:99dfff8c32812120dbeb8de5ccc02abe:62b1a0a3e6f38515e1ba729bee211379\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nshopify-complexity-score: 2310\r\nshopify-complexity-score-v2: 231\r\nx-frame-options: DENY\r\ncontent-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;\r\nstrict-transport-security: max-age=7889238\r\nvary: Accept, accept-encoding\r\ncdn-cache-control: no-cache, no-store\r\ncontent-language: en-NO\r\naccept-ch: Sec-CH-Viewport-Width\r\npowered-by: Shopify\r\nserver-timing: processing;dur=235;desc=\"gc:15\", db;dur=38, db_async;dur=28.455, render;dur=96, asn;desc=\"50304\", edge;desc=\"OSL\", country;desc=\"NO\", theme;desc=\"163170025693\", pageType;desc=\"index\", servedBy;desc=\"q2r8\", requestID;desc=\"d31abeae-8a6b-456a-bc8b-082f3ba18438-1788602383\", _y;desc=\"00000000-0000-0000-5000-000000000000\", _s;desc=\"00000000-0000-0000-5000-000000000000\", _cmp;desc=\"3s.amp_NO02_t_f_VMd-tVneRiqZSstfYtRzPQ\", compressionLevel;desc=\"5\", compressionTime;dur=12.361, earlyhints\r\nx-dc: gcp-europe-west4,gcp-europe-west1,gcp-europe-west1\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8UOUyE5%2F8tR%2BhF0rKJRbkyf1QZp%2BkDSYaSdd3I3edAe1kYE8m2ppce1fqa6BS2sp7k2DQDts7ZHXL2uZnoTxsoGTkGB9IGiKvHWK8mnkf7K7tXsB62JPKJdwf9b7fg%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-request-id: d31abeae-8a6b-456a-bc8b-082f3ba18438-1788602383\r\nx-permitted-cross-domain-policies: none\r\ncf-ray: a36461fdce80569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"localization","value":"NO","quoted":false,"path":"/","expires":"2027-09-05T09:59:43Z","raw_expires":"Sun, 05 Sep 2027 09:59:43 GMT","secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"localization=NO; path=/; expires=Sun, 05 Sep 2027 09:59:43 GMT; SameSite=Lax"},{"name":"cart_currency","value":"USD","quoted":false,"path":"/","expires":"2026-09-19T09:59:43Z","raw_expires":"Sat, 19 Sep 2026 09:59:43 GMT","secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"cart_currency=USD; path=/; expires=Sat, 19 Sep 2026 09:59:43 GMT; SameSite=Lax"},{"name":"_shopify_essential","value":":AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Klaviyo","description":"Klaviyo is an email and SMS marketing platform for online businesses.","website":"https://www.klaviyo.com/","common_platform_enumeration":"","icon":"Klaviyo.svg","categories":["Marketing automation"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539580,"size_decoded":92459,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16059), with CRLF, LF line terminators","md5":"d56bb18a9ab954ac5e643b83796a6d34","sha1":"9a15b6c6812a9cd1dcde636c867a5c34f7b563e0","sha256":"86814482912b4ac27171b6c2000ef1c703103b633ae090011d66ab296ad9d7f2","sha512":"dd8ddbc39c88cb4359f7495fa9cacf5cd927980d087d806f7e5109ee7ffebf6c228c3d9182561319d611f6542118aa70d5ef1e6c2a63e4f053ccb195e3554eb1","ssdeep":"6144:ngwcnyMx7BkzAzxfezWWYivRKGNASr2so:nBcnyMx7TxfezWW7NNASr2so","tlshash":"7fb43ba0e5b521b9452b90fdeeb6ab00b2a1b1cfe7028c85b5fc87544f65f919d3360c","first_seen":"2026-09-05T10:01:03.315749Z","last_seen":"2026-09-05T10:01:03.315749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":51,"receive":290,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/br.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.733Z","timestamp":1788602383733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/br.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-330\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2521691\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnNaQZSfZ%2B0xA4dLkJLiWB7Ln6WhKJF%2FqSKU23Mkh%2BAb1TS2fdopxf%2Byccn5kkFN31YtlNLkYKfdU9yzUFAbS%2Be4c1DMbvoYK4qj3GGysfKYzzzFojJuuQ54zvxNsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462025af756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":816,"size_decoded":1650,"mime_type":"image/png","magic":"PNG image data, 80 x 56, 8-bit colormap, non-interlaced","md5":"919d6915cca4d8dfa6f0795c9a21bb21","sha1":"6b0509982875cff5e0ba8de70be5f562cdfcbb36","sha256":"c9ea019c610713d111f4c81d97f5c0df2caf7ae4c9bda6079f414916dcada975","sha512":"a33430709bce6b9c5d9d77202da1533db2a2f8054fd87f55420c787fcd35e7529d415315c16222ad77cfb1daa9ce7ce3092e505b15783d118f86bf0418622d95","ssdeep":"","tlshash":"9401d68221607ebbc0df0215e9ed80e3b1e65018e0245e02322db1ab1187a82b67183b","first_seen":"2025-08-29T01:16:58.711848Z","last_seen":"2026-09-05T10:01:03.316745Z","times_seen":157,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@9/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.736Z","timestamp":1788602383736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@9/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 9.4.1\r\nx-jsd-version-type: version\r\netag: W/\"4691-p8Uo3JAYru/tmlIzcWjeyyIOL2E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\nage: 14341\r\nx-served-by: cache-fra-eddf8230188-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18065,"size_decoded":5573,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17812)","md5":"ea28ae0aaf82709381c57d6a7daa7a05","sha1":"a7c528dc9018aeefed9a52337168decb220e2f61","sha256":"af8545de3876815292506711e1369bff9dfe57ec7e04c45c3e1bdac48a11f3b2","sha512":"9c63402a957e06b7c365a6cf5f53baaba991953e7bfda99d8feeaf177db6a2782a28004b1d82df2dcde362d5556e4891f6da300d63cf13d816144dadb1920f66","ssdeep":"192:1VmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9A5Q:1gUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"d08245a85340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9132f6a9","first_seen":"2023-06-14T11:52:48Z","last_seen":"2026-09-06T08:03:59.682307Z","times_seen":6544,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.755Z","timestamp":1788602383755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-e4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYBN4CK1Kw5IVB0j6RwPCDgMP9rQ%2FH2Xb8Kh7JS3gB5d8opZMYDrSD010o8jkyslqGrFSZxI9I9JEWfm2MxPIfBbOkYFfxmGJFCQuJ3cJvtZUWMxietYDTe4VEFDtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":1052,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"49dacf8a86d6e0f7eb8f16fcf7a9d0a2","sha1":"dc340a2359ccc5f52d14ee0deb6cb8469de7cea1","sha256":"cc0ac853ca90cf65565e5df4465a2108558eb397166abaa65838c71cecc18077","sha512":"b92cccc24d8764ed0061802d23086e3ccc4c1f5cb157b47fc7741ccd3f338e480cfbc9844c53e259cf98d8526f6bdf356110dc390b0f40993c8eb6566d312f5b","ssdeep":"","tlshash":"64d097e380d85e021285fdb30c0810c2d6f9260e73e2a0939a114271b21910640c2a13","first_seen":"2025-08-29T01:16:58.564638Z","last_seen":"2026-09-05T10:01:03.317875Z","times_seen":127,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/co.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.761Z","timestamp":1788602383761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/co.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXOmBpmm%2Bd3RD7AY8g09wtNt%2BoLfGfZKoU8cGzFkKRGLflgL%2F%2BqZT%2FOHt7RzoGuQgQBmsEC%2F1ocH4cGIE5%2F%2F4rO9lADdD7%2BKqvby%2Bdl5Fv6kKpVMvgtz%2FtBkCwpCww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462028b0b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125,"size_decoded":969,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"4eb68e3bfb1c0b0f8c6107d2ac96fe7e","sha1":"10d792444ce0ad53edf5a01ece6356acfef8e7f9","sha256":"cc204eef36e8d922b38b794cd00000b9cfefeb7964c914d5c15d432b27cb0771","sha512":"a3b6cb1644d9a6277b2c34d2e66ffa37f419726a21aad0edb3d91babcf93b723c5443c315bd2b527a1c0f80c26d2d29e9e3e60a0119e55f1ed9d2f9f8f246429","ssdeep":"","tlshash":"36b02bc6b0745d354702901623081098a503050cb20401500589c83333015116044161","first_seen":"2025-08-29T01:16:58.54034Z","last_seen":"2026-09-05T10:01:03.318881Z","times_seen":145,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/er.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.792Z","timestamp":1788602383792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/er.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-221\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFivTuydGFG6FJURlIPpnvA0lY7elHguUtDYeeZc%2FhhMc6IL12zEpbjCGS3cQgzSjbr9Id38AOEYawGwYqvzwvy8Kq9mcgV%2FBFkMIZmY1XOvWLOVhyzTDri9IgdRvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202bb2156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 545\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545,"size_decoded":1372,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"7acd540f0ce35abb71f3c66ad62e4fca","sha1":"2ac9fd08e73bb121ce4b846a0e74f35634b06ea1","sha256":"f65175a0c6cc762ea68d0cf2d1660bfed019127416c42379fa65c4b9fd16394e","sha512":"ef3616cad7d083aa8cbd1ad53584d2fa46257342cd1ca38df29e470fa58e6b521843b734ac27ba9daa262bff6728eb92df22ed7ac933c96d952a6cdaefa938e2","ssdeep":"","tlshash":"2af090c69eaeab25f32312b801db112cc0d42434e33bfb194f40e0cc83222447866f32","first_seen":"2025-08-29T01:16:58.660684Z","last_seen":"2026-09-05T10:01:03.31991Z","times_seen":96,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/lt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.920Z","timestamp":1788602383920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/lt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 105668\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWEiQPbVdvTUYTAfYdCNps5Hml76MFcjUef3DhmXHN0l4JxM%2Bvl4a6%2FGGn6Gl9J8pYqYb0e%2FQG9vhkok0NAiieHpUDCuoR3ofUoa5kutKmcTWvbtimUPi3k04a4XOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462037b6856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 2-bit colormap, non-interlaced","md5":"225536996081c3a366aa7bfbf90b905d","sha1":"6b6ce8cbaa36a3c7cf905857dd0cbb01bee5943b","sha256":"58b3036362d8b800df8df379a5b38b899163d317023f8ca85725f4b26a90bda6","sha512":"55551dd70277d1072b482d58add7ae4fcae9310f41e81a49cf090a1c71bd523dd6eb9f344e014534b06d4ae93f3df6c90087a71e4adff1746e523246169e53bf","ssdeep":"","tlshash":"8fb012f343c07ca7e181167747068400bd2ca21827d5068fe01589135af2d8dc1cc1b3","first_seen":"2025-07-08T00:55:32.462839Z","last_seen":"2026-09-05T10:01:03.320747Z","times_seen":142,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.933Z","timestamp":1788602383933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-10a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akKZLJFgIsVYAijIdqoJPYPEOyBgMpcrle5P%2F2LVYols%2BtS3xa1ct%2FgmZO1EVt60jJEcHaOzNs9%2F3NCxUuQ9XlDat%2B4KoIiIBrfKeGRYqh6F5CzNSdPyPRfeAOcWxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462039b7256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":1099,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"3634ef3b7d01e8e06333d1935f013cd9","sha1":"3c3154efb5c0f7b0555f8629c3ac6dec808ab23f","sha256":"c739cfb6266e2c969516bb5905c187afa97fab417a9d8db74264a35e6dbb9dc0","sha512":"4beec4d504d4a7c1f244f5520db75d3a33c7f26aae4f7245f296a7bf704941590ee235f94de76923dee76d13001ca0dbcbe60155d7d4b8324c17af79deff3a9b","ssdeep":"","tlshash":"95d02b503626df35af8d187a9032535967784632964009552ac387b9d4f0d1780c1746","first_seen":"2025-08-29T01:16:58.678919Z","last_seen":"2026-09-05T10:01:03.321418Z","times_seen":131,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.732Z","timestamp":1788602383732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-86\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1535892\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWZgUq64kB847A5JoDX65CMABughLTHFIkHak4V6geriOl2OyViWgH7i5KOuX22taggRx2VtVQYy7y3fdEPVXWJKrC8OrEPMrfI0JGGrAvPvatqfpX6Fpu8zuIa0Vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462025af656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134,"size_decoded":957,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"c646736a00e510bc2837626559b80ffa","sha1":"ddc0bb29a2224741b9726f84547c559f528cf63e","sha256":"7674528ab08859b4dd85045dfda5d86d3473a83b3e9ddb5c8dce7b8c644a2654","sha512":"79031bab32f780c021de97dc35299abe84c0f4b96f0902f03a93205529a402251acc8d82c8e9d3d2a4bd8e51337dbc43b8ae3dcbf2a84c1c17d618ca647fba4e","ssdeep":"","tlshash":"33c02be123100d36cb021c1b01088289457a33783e18220942c381381f2220194c0582","first_seen":"2025-08-29T01:16:58.451191Z","last_seen":"2026-09-05T10:01:03.32311Z","times_seen":100,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/yt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.938Z","timestamp":1788602383938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/yt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-5da\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 356327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6l0PdzASXcxyjsv9%2FB9bwJ2LuWrd%2FHsqDS%2BoGlpU%2FMC7sdDTl7TaYYHHYOZ11vtFe1zYp7NU4z0aFvd6chTHh23Zf%2FlY16S7Ug3m3O2VONBxK5CjBhLBNydTWIH2Xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462039b7656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1498,"size_decoded":2332,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"bac61dbde5ff542463b91d963406f27c","sha1":"bc5955b76db9fc4b8578f905ba676ea39d7f93a7","sha256":"9ca657866bb9ce4492eb119a61925e2860f9d2c4965182e6b93415ec5e14f5eb","sha512":"c73e373ee8cb0a547d88928c91cbcfe0e49a9a6c9c6976af9c61353c789a4ac266cf33d7f5c72110bd6ea793c69b33b37505288b559d5ac834fe018b046facf0","ssdeep":"","tlshash":"da31b77840dc9897cb24c07af9193bf8d87d83240755ce8419aaac0a221d5cb498a2c9","first_seen":"2025-08-29T01:16:58.444547Z","last_seen":"2026-09-05T10:01:03.324145Z","times_seen":98,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.096Z","timestamp":1788602384096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-179\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 107733\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIo6L40MQszBCU3cV7VNadeEr9LFWTTgm5UMXNbvt11iOrsE0pKMdmo46XRvMlO23X6O8MC1Iru4Fy5PkBBGzG65xtezt7S6UMvqGrRR1A0S%2B9O%2FgXS7gQHis02stA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462049bd156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 377\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377,"size_decoded":1204,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"5fefa1e738b7333c506dc9c4f1926be7","sha1":"e128a288443b3a5ac6e0bcf9eac2f8a8f01b7f69","sha256":"1cacb57e7a84e9305b482108bfbd5af019dbb5268d55f8533ee651065cea9f85","sha512":"0a3d7c60cb48d510a726cc62f093035739e5664cff6d4ec6c139a6c39535952e73c77cc0dd9d5e7302d2e45b9c0de64ece4b676bb2ead121d342931386f4f427","ssdeep":"","tlshash":"ace061a3d1478c24d99ecaf6d2868428f6e9867639290615505b657d352ee4041c5352","first_seen":"2025-07-08T00:55:32.38362Z","last_seen":"2026-09-05T10:01:03.325168Z","times_seen":166,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.119Z","timestamp":1788602384119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-307\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2603368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJMRFV4z%2BnEWwZ2DEiJkWGxN5aBuG2s%2FFiL%2FFDyLN2SzhZw8NswZe8Xh5zEZHfnI1QKSga4Y3U41qO5UJR28%2Bh6gQ3LPJbqSfsH5QPWedbeE6bpplyHazhLcF6Uvog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204bbd356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":775,"size_decoded":1607,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"add27d9d7aa3e4866d53a56744debd5f","sha1":"edc33bb3699053a2a4cf3fcd6a9e9b2889e59873","sha256":"36a007d46602c9de800584a9ca095d7674513caa4fd3d178e0ed091a5cd81542","sha512":"4569c3fb84fcebe09751578d1bd9fc1cd5c1602dccf878d7003ae56e60c7c49ee85b24d407fb78761e2a8fb6eb6da622dab4dce15b9cef557389d60c8ae84585","ssdeep":"","tlshash":"760175b47f9094f0667e8d6eb6b0ef0fd51b0a59d70420d823124041299990609de378","first_seen":"2025-08-29T01:16:58.520547Z","last_seen":"2026-09-05T10:01:03.325745Z","times_seen":98,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ve.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.141Z","timestamp":1788602384141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ve.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-129\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVRQ98VXwb3Cujq1HBPrNTVdqR67AcfwqgXD8Mw3buJprxlCVsWxGnGiMlG8XpcjiJrqa4vW2p1p8UZB3mZT2n41j7qtTh7aKtCPo4vC9VQfR9qAuKr6G6Sn7yHzGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204ebe056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 297\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297,"size_decoded":1120,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"2ad40789351503587c07d6ae73cc9a70","sha1":"ad3b4cde2fc0afc7f2f0709a562d28c7650a7701","sha256":"c952d54805f2c507d393168985ccf2cd51df03549222d7a92998853d0e9390e9","sha512":"c31e6a0505da2919ce5d52dceaa3a99e74c79f06ab28e5dec70fe192ab097adaa0ba43a71893bc56c66e0bd9483812cfc60b906ab1c6f015f8f8d4e596b14fef","ssdeep":"","tlshash":"54e07dd7424c2f4c8733a0b287c8a1f2899942dd50d50d83400d23034395016c690a5a","first_seen":"2025-08-29T01:16:58.683556Z","last_seen":"2026-09-05T10:01:03.326843Z","times_seen":102,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conf.config-security.com/model","fqdn":"conf.config-security.com","domain":"config-security.com","tld":"com"},"ip":{"addr":"104.26.15.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.427Z","timestamp":1788602385427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config-security.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 14:03:02 GMT","end":"Thu, 03 Dec 2026 14:03:01 GMT"},"fingerprint":{"sha1":"C2:E6:B8:F1:54:FE:CA:7F:DC:18:07:5A:F8:C4:25:FF:7B:C2:29:C0","sha256":"CD:51:F4:7C:B6:91:56:B7:9C:34:B3:80:D4:BE:F1:72:39:90:ED:38:1D:72:B2:BD:0D:A9:68:E2:2F:FD:EF:12"}}},"request":{"raw":"GET /model HTTP/1.1\r\nHost: conf.config-security.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: text/json\r\ncontent-length: 304\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=29030400, immutable\r\netag: \"QWY5bXZBZCB8R29pICc5USo8LjNeayVxXFdkfHg=\"\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nx-powered-by: Flask/Theano\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kViLxjUYpdT53fbESUUrlCFn3cVP8BMkkQd%2F5mhGbI7vhf8muSPfjDyTF0nDG5v9g1rw%2FJRbhJ8ngbVN18Tt%2BIDJeNUVxs7zIYYWJ5EI%2F0TOuCPFsJkZWgyHKTIKHJTrhwbDlG8bOV19Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a364620d0b9d783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304,"size_decoded":1051,"mime_type":"text/json","magic":"JSON text data","md5":"ab74be5fc762a50b512f2ad241c5eae3","sha1":"bc4b65e4ac372dc2d64d60ff5bf14a70df2a067f","sha256":"b83ed97c7c7e6da89e49499f25f487e2ce8dc80f03bd1f689388b318abe94961","sha512":"e2d39098b0996686b9e4bb23fe6aecf14dc17e0cb36d7e31f606bb4d0800825242fddf8ce2bea68ff2c0153e562cf8c37713de5b03ef61c4d942bfffa1ec825b","ssdeep":"","tlshash":"8de07d25407cdc15b30f021d4f066940909891b408cbf2f51b824975d543a0b276783b","first_seen":"2026-09-05T10:01:03.32779Z","last_seen":"2026-09-05T10:01:03.32779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":50,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18051184874\u0026cx=c\u0026gtm=4e6921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.303Z","timestamp":1788602386303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-18051184874\u0026cx=c\u0026gtm=4e6921 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\nexpires: Sat, 05 Sep 2026 09:59:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 161479\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472176,"size_decoded":162063,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"3ae4b143aee84fa5fb7b3e585b204195","sha1":"c7be13171451174022fec76f2acffa3820d8ef17","sha256":"21ac459ef733f6788bbf80368b54f9455a36ed17ac2b4e6ab5ae7fbba20a5d34","sha512":"94a486d082082ae11c0f0173e223425190714bc078d5c1a7720aeb5db59678accc37614678d858f3b3ef394df50cb8b20076ab52c09cbe9a2256749b358e8f2d","ssdeep":"6144:yOH1lxPZfMXrrzudf1UZyc3DR/dEpv3yg+0eSQMlcWp:yuZkqHg90eSnc0","tlshash":"eda42acd73d674229392f574903f018bb67a29a2b84cc899f289dce42d3469a5173f7c","first_seen":"2026-09-05T10:01:03.329225Z","last_seen":"2026-09-05T10:01:03.329225Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.430Z","timestamp":1788602386430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 31529835\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-31529834/31529835\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtwOPlOKxzrAq5Wx4%2F8ORD8nO5PJaaRyQr51MCgKOXPLOSUTUwENgsQCgr%2Fo7u9aGYA8w7xPyPz10ZJ98T3m2kns1zzfFV84zAnzR1idWPxfp1uywlRtSDIdDgMvi9w%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 3f06efda-f997-443e-8d10-4ba597ad1c6f-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e71569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=645.631, imageryFetch;dur=584.892, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468428,"size_decoded":1470132,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f6cd289b36c0c980b73509ed79642ad3","sha1":"e8141c0b0a98a57c58d9f75e63812536489bedae","sha256":"7b412d10da6a93ab295360a312e5120b48ba6d5c7e8866ae95cf2fafc3ff6988","sha512":"00487243c8632620a7f06b0894d6acc2d55e695f49a2ec60edeb448ebf8e6e345c6e52de47f404d5ab7079354af13b605f830cd0b8ac9ecddeda61878c127fa1","ssdeep":"24576:BHQ7FHQkXbkwF2q9LGmmHJFzbTRwiBZigQ+Lv5MvFfGYGA/u3:q7FHQkXbkwFH96muJVH1YgQWevFuoS","tlshash":"f025235df314422bda3557b01ee99785b3b9d0b1931b0b3e0aad63189fd93ac3c49ac4","first_seen":"2026-09-05T10:01:03.260764Z","last_seen":"2026-09-05T10:01:03.260764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/im.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.858Z","timestamp":1788602383858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/im.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-29b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gT%2BqAMJcJZBzQS8fkYpQWGFfokMliFJJUbdNVTRmpRDzqrrau36BdUJI4irMV8l8tOluywoDq1J6ApyN2vV%2BILiB32xgfKGZAyL1EQwYqoR8WJ%2FiIxn2UooBtJTmlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462031b4d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 667\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667,"size_decoded":1496,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"1269ca384b55f0550cab253c186ebb14","sha1":"754baaa77bf8d454955a12d3b11e98ddca7f21ab","sha256":"6ac3aa16ae39b408cdec56d0cd5302159f3de3532ef367b6546a4c81b256188f","sha512":"da34a1fd6a5f897157fb1642daae318944a8cde425f4645ab172e3f5db3fa7b21e93c267799eaf2be9704a17a16a5032648af3f4a40405a4682ec05390c0dc10","ssdeep":"","tlshash":"bd0183a4271690bdf0ecd375208a820dc22c40bc0290926df042e580e4c2f09b343ec7","first_seen":"2025-08-29T01:16:58.668475Z","last_seen":"2026-09-05T10:01:03.330321Z","times_seen":97,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/jm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.862Z","timestamp":1788602383862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/jm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-125\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4tll%2FT%2BrIQfCuF38mCUKlMJyXcGRpNbdXWL9p%2BzvBiuTwg0dOKe1t%2FAnUggqXY3XLQ2gGyk92oLnS8xeAXXxELf6GpXWo07%2Fc8TAYNOX9t1XfA48P2kK0UOt8Cdlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 293\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293,"size_decoded":1126,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"bed807bafdc446d4beaea91ab0769adc","sha1":"61754cb11b363bd6f63f678abe2ef84f6ead9c2f","sha256":"1319eb2c2e936f9b8d797fe2f554f05faf37808ba93ac76e99463ba00fc0849a","sha512":"702dd6ace537d6d41c8872b76fd63b6c3f1085fd94fb430a1f8055bd91fdf43f5c3ebc4df8d092aeb90d1518debaaf11ff25a578a98ad0084b00e5facd13fd3a","ssdeep":"","tlshash":"25e0e7d7ea79ff17c6067235435533d16372c20cc03110c97901b85199773048530d56","first_seen":"2025-08-29T01:16:58.590834Z","last_seen":"2026-09-05T10:01:03.331203Z","times_seen":100,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ki.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.870Z","timestamp":1788602383870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ki.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-38b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8H09LP3Kg2gZHeyN0RzWzRf325JypT%2F0%2F20HQ1MMIEwAw5NO6oG6%2BLaupEqPOMHcxncMe8hq6vp%2BQrwqDJXTirH%2BEG%2FaRB2J1Ic3j4Qr57scaIV7J4gg0R%2FXaS%2BWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 907\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":907,"size_decoded":1746,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"7d00510831efbf38de92a5368b52f775","sha1":"68b68b333ac6dd295c847d14b4d1b5341bb79ad4","sha256":"9dfb51d78a8d1ea7f7369ee5dafd6958afb7f58835f55e0f74107e917df8dc9e","sha512":"85a0c875dbdc6266a21fb5057f59e43a13ac3a631c6036e04832d4186d183c7f2ad7009a1f48f966e5973173b9e289081406dc462da913d30a92ca833e60946d","ssdeep":"","tlshash":"0e1167d1e0577c81d726c8b2461befa3c7668d0060920579a25bd43c4a0cdcc48c741a","first_seen":"2025-08-29T01:16:58.531581Z","last_seen":"2026-09-05T10:01:03.332139Z","times_seen":99,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/kg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.874Z","timestamp":1788602383874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/kg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-267\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2F8%2FD%2FhGW9I%2BKNdvE9A%2BcydtFxoJLbY6uiKlbUQo4wWSqSk9g6Fj00iJxxNriR5ZSNJO96YzJd4b3gUgALCnB9TVD3x7yaNZ2F8h7f2zFTeddw1DjJMO7sTPRX6ksA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462033b5a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":615,"size_decoded":1448,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"0193927bad742f354ac4b6c9fc45def7","sha1":"df91b29727bc8edfbffbf0ae967f887c4f6b9006","sha256":"a8dd2fb329eb1958d7ee7666c7e6a361835db73dc7659ee74aa8f7734d7ac567","sha512":"52b4f2051842bc1fbe12ead67a2eab2096f48264b4ba47370adef2f08593b049f64bf491dcfcd2be5ddae30a936a260d10d601fcff7aec9eca4b667217856466","ssdeep":"","tlshash":"53f0479c95e0ec370c8a689083af209df61e052509b596e7e4806ad284064463e6e363","first_seen":"2025-08-29T01:16:58.573391Z","last_seen":"2026-09-05T10:01:03.333232Z","times_seen":100,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsoutlined/v369/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.849Z","timestamp":1788602385849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/materialsymbolsoutlined/v369/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3969688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 00:46:45 GMT\r\nexpires: Sat, 04 Sep 2027 00:46:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 03 Sep 2026 18:54:33 GMT\r\ncontent-type: font/woff2\r\nage: 119580\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3969688,"size_decoded":3970503,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 3969688, version 1.0","md5":"a9adfbf7832af08e67ef88307ced832e","sha1":"ca3038261bc4ff895efba3d802599282f6d2901b","sha256":"6a7c43a6da98fb1c0578127779dd4b5221cdfb10d180e485a1aae6cf3106b44f","sha512":"f3dd7c6b680ff0dbfc3de20043ff244531ca62c2b2aad59dd3cf086030f090d726227b7445e61e800610ffc884d0543d80fefa05d99ff996dcf04c7b67533fd0","ssdeep":"24576:r5eTiiN0bUlKhdp07EbGpYRnmTt37tTltvkHi:rAD0osFHHRnmhdPkHi","tlshash":"7a2533215f2c4bc4fb1df3a2fe4c51975964988b2f128f0e369a62f4173e9ca0dc9469","first_seen":"2026-09-04T00:58:58.770434Z","last_seen":"2026-09-05T21:38:01.72498Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":969,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.440Z","timestamp":1788602386440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14798638\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-14798637/14798638\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVvMUdwi1%2BNjhG4Pf410OUJRHjjeOCHnF7nwtUC6EHe6YQtjeBmC0we0jDu7MBBi8HA%2BEeps1JLLJQMhJPo6lel5qHJ98YiwFLllzxcT5tBqXWXLnNW63n6KvoJ%2F%2Bxw%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fc98f90a-099d-416c-8923-8ab843fc7d40-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462134e88569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=265.563, imageryFetch;dur=265.274, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1195160,"size_decoded":1196868,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a08b1a403cbfac47ee8b854c7b39e105","sha1":"52bc615666049705c8380595ea659213223489a8","sha256":"3de67846310eb5af7e15ad5177e58d128c44382d4b1b0ef740cd8884267c9d68","sha512":"23db8a57ac757bdf011f36f9387fb00970f89c3857c3e53f1b03e7c9e71360a4d32420a1de466d3e1f8d7f58728a2b0de021d739e6f2b9af09a637943fc37dda","ssdeep":"24576:SQrbS/aiaFSvSyT/i33NXgh8n205EDDjSx4vUIag:S+G/aiaWTLcNXgh8n25jeE","tlshash":"1625232a3b1910d3cb194fbc68f6478b7378e0a4db1a623b9ac12f585ed27ec81445d7","first_seen":"2026-09-05T10:01:03.334635Z","last_seen":"2026-09-05T10:01:03.334635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":968,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/shopify_pay/storefront-bf1cdb70.js?v=20250812","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.552Z","timestamp":1788602383552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shopifycloud/storefront/assets/shopify_pay/storefront-bf1cdb70.js?v=20250812 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 23069\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CcBucxY%2F%2FW6iV%2BV8aDMxZCl4IEqnLmFBt7w%2FFGGbfrne8c4NnkwV0QvjHQhYNoSn5%2F81AgccLA0Tk7q1LgybDdKi0koMBxr0OpvePNMRwGjElVVBg9GDdz1uE7etgBY7w%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 27 Aug 2026 05:24:11 GMT\r\nage: 2977461\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/storefront/assets/shopify_pay/storefront-bf1cdb70.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: de3a6f82-8393-4b73-ae9e-8eb5212d4b56-1785624922\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462013d68569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=36.828, imageryFetch;dur=31.171, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81128,"size_decoded":24341,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5eb0aa63937b1b8a9c98866ae95139cd","sha1":"f1ff3c879afd749bbdec18894d7b8fdbeecda7b1","sha256":"980855df0a0679fedd1d8a28c511f1233a808b2458a039f0a78a3646a5cd46e3","sha512":"d6ce9eab122b5b66718e406dd285cd668c43ae1f235584d7379138505f64c61b18f8df4245bc8ea707e91fa6c0bc7e868dc17d08dee4bd18ffacc2f30fb82b93","ssdeep":"768:e9x/o1sX4MtMRORiysWDnnH2w1QaMdWZQfzc8MByf9a31BE8LOBphHPcPsJ+1m+k:e9x/o1Ec1WDnWg6MfE8ahi0WeS62h8","tlshash":"ff83fa8af3f4b562439eb4e8f42f48026e6be586c508d094d9acdfd0ace7411425bb7d","first_seen":"2026-04-20T19:16:12.255808Z","last_seen":"2026-09-06T13:27:55.62095Z","times_seen":50109,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/km.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.762Z","timestamp":1788602383762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/km.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-211\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2206559\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAxBPRm2SEk2uNjgpL6xdAmtPtWbMt59ktlQOqGtEIEpnkYjg211s8a7XZKmqNN%2BL%2BjSsg4oW0fbNA2vEi7Do%2FxcrTkxUzxZl7C0xEIWAtahVZ3%2Ff4ZI51y7YFBxcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462028b0c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529,"size_decoded":1361,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"775fa012e3c4749869f735ec34dff739","sha1":"45693bd8035f6fde6ef001bfe7bfd5cb2a0f2667","sha256":"6f1a3b77c07e23bc619d6b769f6f0518e96e83dde0ca9288ef4016292b27b7dd","sha512":"11123251f79afad2afad6fd23a4f4748ad29ec15668a57ba3edda4c5cbae96896a78686647158ff7c186aa5988f6476b3f8e9b541ae66808733b45dc2bbaf53f","ssdeep":"","tlshash":"d1f020a2710198b8c31e973909a7a031ba1c845c46c2114d105799882e2f7e4e7e7b80","first_seen":"2025-08-29T01:16:58.464207Z","last_seen":"2026-09-05T10:01:03.336342Z","times_seen":103,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.818Z","timestamp":1788602383818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-167\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2354400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzo%2B2FW5Z35xgt500wnNRlE2ckG3Jft6Gf2KaTxobNp%2FpofajQY2jh1OBj41CbAgaGSRQ4fweMAQopqpyTJtIGV7%2Fo4eUb1s0f0%2BgZrHefNFMb%2BVjPH9P36bP9SR%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 359\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":1195,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"64ddb31669c2cb3a445eb41a86376d31","sha1":"e076bbf0d2f145fff739846186e5f641e305e8c9","sha256":"7884802bf8a5b3749cdf92c49695f46fb7d7da671100fd7c3d1323be0e7974dc","sha512":"58cdf47e3ce92470b7117ab8378a604b96d0af275d612a1ad3634a68985e5c464eb945f76b54727e12e1b1b2dda3121be455a67f944b33b210bf83a901e30bd1","ssdeep":"","tlshash":"8fe0c0ca42940ef5d3d03ba31031321c592402535397906f9457ecf1761b40358c7751","first_seen":"2025-08-29T01:16:58.602069Z","last_seen":"2026-09-05T10:01:03.33731Z","times_seen":95,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.841Z","timestamp":1788602383841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-ca\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJvn9BlmlogOdbEmAH1fepKYdE8FnRyCgkjJ2XhHljOyPnKtdtEkajzTtT2rVXR6wP8av8hqdWBdfUFFQDHhDk523MSnLv%2BFHqv8aky7%2FvSpzodAKsi9mf41KqKAzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462030b4056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 202\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":1028,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"fa2becd268de239764f4bdd265810826","sha1":"88122b4a3bf36fa5b40a37344c7f958a0d8ef184","sha256":"d271c4ee019724c789edf7d6d494e266d9df7e7a6d663a77d982a1189d9bbc59","sha512":"ed22e26279a65a5ed0464d290c84837c8cb94798602158705ac2376a884a35971055624fbb0f69c26bb39ebafaa4ba6b8f5b9dd1e2f50382d5b91341c525d813","ssdeep":"","tlshash":"c8d022e6b12b8eb0dea95032030ca1c6aee2019b6302e2132124e906012814c80b8dea","first_seen":"2025-08-29T01:16:58.453232Z","last_seen":"2026-09-05T10:01:03.338415Z","times_seen":99,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/my.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.930Z","timestamp":1788602383930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/my.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-18e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGDmcGo0do2JI7sdw%2Fp4dKEgvlk9v5mBsLiUSKnKCPW452ltS%2FaaN2XDcbjfsisljwJRfeX%2B7ol7Ku%2BK5upHN8FDDhnan7k78GJc3gm8t4T5bBSl0XhipzlcY7WkyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462038b6d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398,"size_decoded":1229,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"8872fe5d5521b3bc220028c99f341f4f","sha1":"fdb842ed41c866e4fe6decd3ec3a0b22d058c2a6","sha256":"cfa5f23d144106a08268fd9cd9aa18ddfb893eed0a255e288e5648b396774fee","sha512":"0ad16cc49cc4b9fe22409c10bb7b360669dd58dd2f1a7c975cbb0d39687ce951ac663ef2a8dd1bfef1b08c603323e1cdf80a7717831f905537f5914b7703b0e2","ssdeep":"","tlshash":"8fe0f1437f6c263cc89f9eff0094e1d1ec02d1992a0db22ae1118329e3d444ac450921","first_seen":"2025-04-25T03:41:10.088796Z","last_seen":"2026-09-05T10:01:03.343816Z","times_seen":152,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/re.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.985Z","timestamp":1788602383985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/re.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-310\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oGca%2FtA9SKSoTSGlNUKBoaQ77QB1uL4ChiTOEX%2BgSFy7UUJIYOGclrZ0Q532JS3wM04bo7w5KtGqL3%2B57TeXQQzlCQbGhI9r2H4IZiwvVzbcUq8DoZco3GT9H8orHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203eb9c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":784,"size_decoded":1613,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"dda4be0942af96b019f19249db91cec7","sha1":"78a2035fe7a086889105c65bb7028561e56d5059","sha256":"be8329d2a862b5737f9314da66a23e32724dbd4f345e12b97441e22d9420c197","sha512":"73e2058e185ddd972c6980c2cbb4dab18e53562f5ce66ef220bda0475fd9343b027ea8047195a46ef322da9572a5ba1c79dcede86aeac14c801a89d7ba823d63","ssdeep":"","tlshash":"75010afd317c83ada30ab12b33c180f0de7b06504a22f34300ea11502ddb0d502c614a","first_seen":"2025-08-29T01:16:58.475845Z","last_seen":"2026-09-05T10:01:03.345136Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/client.init-shop-cart-sync_VQy1KpG_.en.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.026Z","timestamp":1788602386026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/client.init-shop-cart-sync_VQy1KpG_.en.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 755\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Sep 2026 16:24:27 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/client.init-shop-cart-sync_VQy1KpG_.en.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=himQYK653indvGSFSiERYqE2lsfijRJsrS%2BF9hpSrfGV6wAAsAZi56L6%2FfarFtfTSWdtQESs95vu61FnTAn9TjbIiXekFffmjbGVLG9b5t3rTJ4wW8aljnz8QWx60J7HeQ%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: cd116c7b-b266-4b9c-ae04-1ded719b9a72-1788452666\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 149718\r\ncf-cache-status: HIT\r\ncf-ray: a3646210af3f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=58.779, imageryFetch;dur=58.244, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1700,"size_decoded":1972,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1628)","md5":"68166aae86472cae62c9ed9821c85fd3","sha1":"a1fd9a1117abad8325af49819638112fa3e57e0f","sha256":"d21e4a92c10f1a6e99a073eeea6f7a0edf709904c99ef84c2e55ca12cb714c12","sha512":"e03c7dcd5a82190f80ba0c4bd7bf0acf8f410f55ebc2c2e0257f7cfdf119e545920adcec7d52f0e7e5343a05e430628646b951b49de1203099217d2b02b7ad58","ssdeep":"","tlshash":"3231cefed013b8a011d5dcf5d16252214572386ab7de4768d0ff0f9c0e1a06b8a3a96d","first_seen":"2026-09-03T16:26:38.574179Z","last_seen":"2026-09-06T11:36:39.548767Z","times_seen":375,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.defineInitFunction_D4of-Jj4.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.051Z","timestamp":1788602386051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.defineInitFunction_D4of-Jj4.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 177\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nlast-modified: Tue, 18 Aug 2026 12:22:03 GMT\r\nage: 2519862\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.defineInitFunction_D4of-Jj4.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h18Qhr%2B7xRG8G7GNbXowwyuv9rMg69Zrjf%2FtEwVkKzJOZUFQSkesMmmZu%2BXNfz05yP93y35FPd0vFl0KtNBnp9OCqaT0TwlAMe8v5ef%2BWHcKsEeqLRjM4aTlOSXAv9BqUw%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: bbc92fce-3869-4d3a-a07d-47cab13ea2fe-1786082523\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210df6e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=29.130, imageryFetch;dur=28.710, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290,"size_decoded":1406,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"cad4cf9dd8faeb0c636ce3a89223c89c","sha1":"a73ea807c90c169c5f9e25ec9d1c3c5334e66dd7","sha256":"2a2adb1f9ecb6695af9a056653b5b50fe7a77878b3751cb652ecfb6d5b1a4902","sha512":"7e025b6902843f7863de72cd27bc7914e79a7e633d68994470e607aad7f7b49653a6680e96fe2f227d5d1b8b4e89122e51af84a62cc75adbc4c5d596548dab88","ssdeep":"","tlshash":"dbd0cd5e13e7f4f2d0d3bd28510b2d0617fd101e9bf45780273c14284a255665e5cd0e","first_seen":"2026-04-14T20:08:13.810485Z","last_seen":"2026-09-06T11:36:39.485614Z","times_seen":79910,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.775Z","timestamp":1788602383775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2616020\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Zhub%2Fu8qHYP%2BQF321yG3mzL5fewcCkCUbHU186LPfiWTfSJ7TUbkV3UobUQCPjMQeRM%2FdwyFSzj9fBMV%2BLRmoPtbxE1EVMU1hgR23wGvylNvadJXAhu4r5C2FU4XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462029b1556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 239\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":1070,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"dbaa54129e3e6021dc093ad154b7cd20","sha1":"0eea38c3f8b9bbbd8dc3795817537046804f842c","sha256":"ed92c7ec21ad6e5b72150cb2b4af2fe915eb953be0cf2ccb893dbdebb138a363","sha512":"a51f9f8444f4ed96a786faca52b1214b75c39f02608af885df04660c00db126802306d6769814e3594b641e0819fd5d6cd3ce73d6fe699d225faf3115676fe0a","ssdeep":"","tlshash":"9cd097b783007a52ebaef4630e1b2094a833623c3b20892a3d0a23ed900a080e4c1513","first_seen":"2025-08-29T01:16:58.691701Z","last_seen":"2026-09-05T10:01:03.347122Z","times_seen":101,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/py.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.976Z","timestamp":1788602383976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/py.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-11f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sx2pOfbdIEFGxaWKtumLOWZS7a3ju7LSwyMUVtVMZvI8luPGLz4TGNYVOWuXYFUqL%2BwoBX9%2BdttRIIELgGgwijS66VVXxDq7oGUYX8bvv3ffg%2FR1YW9a%2BatJiCbYnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287,"size_decoded":1118,"mime_type":"image/png","magic":"PNG image data, 80 x 44, 8-bit colormap, non-interlaced","md5":"2d4b32406f231f2d4c927ef5d5856364","sha1":"dca6bf9534d9be3afcd1b6c3d2d86254af4d871c","sha256":"3791bcf57ecc71e23b15b941b026ac807470e9fc5b97a624aaef0df74e2d0684","sha512":"92339eb8610a0602acafa48eab7ace4fd33d69e3fb2e6f689ddde08b82e958f6c147d867cb262adb44e5897d543dc225099b48e2e92f32f2763415ac5864b9ee","ssdeep":"","tlshash":"7ad02bd245da4c68e94ad6db87ad49097d11c936d242534d3406c42add436686b88f86","first_seen":"2025-08-29T01:16:58.519338Z","last_seen":"2026-09-05T10:01:03.348036Z","times_seen":110,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=13\u0026frm=0\u0026apvc=1\u0026auid=681753161.1788602385\u0026dt=Rovina%E2%84%A2%20%7C%20Science-Backed%20Astaxanthin%20Supplement\u0026tid=AW-17889453959\u0026en=page_view\u0026dl=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026scrsrc=www.googletagmanager.com\u0026rnd=762964696.1788602385\u0026navt=n\u0026npa=1\u0026did=dN2ZkMj\u0026gdid=dN2ZkMj\u0026gtm=45be6921v9242263463za200zd9242263463xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~117776796~118897920~118897930~120385423~120469145~120469153\u0026tft=1788602385510\u0026tfd=3112\u0026tids=AW-17889453959\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.304Z","timestamp":1788602386304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /ccm/collect?rcb=13\u0026frm=0\u0026apvc=1\u0026auid=681753161.1788602385\u0026dt=Rovina%E2%84%A2%20%7C%20Science-Backed%20Astaxanthin%20Supplement\u0026tid=AW-17889453959\u0026en=page_view\u0026dl=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026scrsrc=www.googletagmanager.com\u0026rnd=762964696.1788602385\u0026navt=n\u0026npa=1\u0026did=dN2ZkMj\u0026gdid=dN2ZkMj\u0026gtm=45be6921v9242263463za200zd9242263463xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938469~117776796~118897920~118897930~120385423~120469145~120469153\u0026tft=1788602385510\u0026tfd=3112\u0026tids=AW-17889453959\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":542,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":22,"connect":79,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/hr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.773Z","timestamp":1788602383773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/hr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-27f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQAfJ0ck9yIdo6I%2F%2BVbK9LCQ2CHVUvaOjy88b9EbIiO%2BUctahhYKu19Dwg2W%2BKOmbPsQmyspdYykOB7HJ%2FkkR084ds8rH9pNCauLC0e2kcxllVU9evRTmemhyUW6Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462029b1456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 639\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":639,"size_decoded":1472,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"3476cedbfe5a47cc1191850d25944ffa","sha1":"1122ea410eb68c9202ff6f2aa098e3a036d235ac","sha256":"37700c20552eff5509370aa315cab83f84a878f3ca47c39f65bb280ef0c99422","sha512":"d496fc44f74d1fd2934d7ece16e70e3c2850fd529cd6b98138cd61418c8a58db4032a778c8086640ed2b6909918a8b7002343c830379bc403ab0d38774625661","ssdeep":"","tlshash":"a5f002c5381fecbe47a9c02385aec188ecb22dbbd7b3c153946165f69c53839408318e","first_seen":"2025-07-08T00:55:32.427575Z","last_seen":"2026-09-05T10:01:03.348563Z","times_seen":177,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ge.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.823Z","timestamp":1788602383823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ge.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-189\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2616752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azatFLuEa4eFqz3swIcrv6l1vN7vPCnzfSUHsv5PyV4MN5OHVGNHr%2FsN0ctKIRG3R5mpxG%2BfAeGexu1xLdZG3DM%2B6O7u36YWGCd0LZ7OBVoiz0FpAHtpe8X%2Bxx9FuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202eb3356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":393,"size_decoded":1225,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"2632f06750c9c080bdee3ce0bf169ae3","sha1":"448d9cdc17f305e8d4635324989eac699a28cb1d","sha256":"e6c2bdda0963eab8312ef0987efbec4ac4e66c3fc0a2d858352257195cc6c137","sha512":"7a75856752a2751e9361739ffe9a1b3801b52aca058bac1c53589ff546cdf47914ad25da188a433d52753542c252a3324dfa94152735441654e2f67db13cd982","ssdeep":"","tlshash":"3de0f1d3fa4d2b39919c0b71c4901398fd3981014831d817703fb51c21d14ee80d153b","first_seen":"2025-08-29T01:16:58.619634Z","last_seen":"2026-09-05T10:01:03.34953Z","times_seen":114,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/nc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.960Z","timestamp":1788602383960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/nc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-261\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2344273\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVhTgpCaIHhvtY6i5YP2yJpljlM11gQY0qjPZxC03tBVjZTnFMjRunAHdE41MYo397tJ7%2FqvSjx3RFJ0vG%2BykDs2LQ%2BM5QM7tgd%2B4SWiAvu3ms4jOpqVxy8%2BNjog9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":1443,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"ed17c07ed695578ea61a4f495e244f3b","sha1":"db955bd0f493a2f72bef16c79868e760f4dfdb43","sha256":"1a5fa3965872308321a4184eeb0e4e82614f5d7a18d08333940c5d5210dad6d1","sha512":"50b1cb53acb0d650e86b1d630c4b7f46cf6feb598a7c0aff90e2bf949f6330a2642397f14cea5d471d120ad40180f066e19cbed80d09d29a8a9bfe69c8b10d35","ssdeep":"","tlshash":"90f062825fe4dc3850341a33820b3dc8d3189b382222468bd83e848c279617c90ebbef","first_seen":"2025-08-29T01:16:58.611731Z","last_seen":"2026-09-05T10:01:03.350571Z","times_seen":101,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.094Z","timestamp":1788602384094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1d2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhrDZNvClVFvesLRIuqUmm56ydHnQPoIJokrTG8nRJ0DIRFBTx%2BHpzYbokIpQteI9wwQot0thP0CJwkAIykUzCeNqLcSdPraoeXWXKHZW5rCBmDorfXQwvgJFdad4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462049bd056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466,"size_decoded":1291,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"c3f8fc0f3653b6be121932ffa8ab7f86","sha1":"bdea9a19651643a5d5c4ec9a5468aff67deea1c9","sha256":"cf2f658f340f1c9e8071a05990dc3bd6790b381aac25c6662187857c28026370","sha512":"01fd0327187a85f2a417c17602b7b42129a885084afa715a461dbe44242be9308723d8484f3d6609dba24a2c77f5efffffcddcf5385ea5f84961a06be927f932","ssdeep":"","tlshash":"b6f023fd5677ac7ad42e415171fd8191f2383711e811533bc0276c880ae34546bc1741","first_seen":"2025-07-08T00:55:32.468126Z","last_seen":"2026-09-05T10:01:03.351598Z","times_seen":113,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.120Z","timestamp":1788602384120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2c0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dw04BxN%2FL8TbOjWQ0Mk7zo%2BZMCll5Wb5EzJpF9ZDDEU%2FLZZ9z2Va65Qbep7d4hcGBUCutuJVEEzGEbqAAxLos7ppH4TOawQ9mIQkO2tGlnCjjj71m2Njfixm%2Bk%2B3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204cbd456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":1537,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"c1c04154b40cae1cea269d4bf4afc887","sha1":"5a41d7c2e83a31284e705c375327ced59ee14e7f","sha256":"d15b679acc477477932637f4f3db7ea53af8628e5fec97f4788006a09c1928e6","sha512":"b3519f235a2a333c60f99421bd5b434ea6c6b0110226de98826d44de3a66f14245f8cf5272faf02c9e86395a03fc65c58b72dd1df26beb43f730c08448f113c7","ssdeep":"","tlshash":"0e01e4f0cd81ac34c32863328ecaa682071200bec02b8f004e70ae7705a462ae0ce2d2","first_seen":"2025-08-29T01:16:58.603052Z","last_seen":"2026-09-05T10:01:03.35219Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/shop_events_listener-4e26a9ce.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.571Z","timestamp":1788602385571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shopifycloud/storefront/assets/shop_events_listener-4e26a9ce.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3475\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgb0hDZo16HpMwhuz5Fdh80Y1FNOthiAQQsnUR%2BUzi0gFFrW3%2BotOm5oiKadHNy8e9ymd4kd%2FvevjRm6PovNe8MXtyLZHfYkRBzEaxJMdDI2VgsyZ9Sn5M%2BQdZBA2h9%2F4g%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 28 Aug 2026 02:18:08 GMT\r\nage: 1607175\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/storefront/assets/shop_events_listener-4e26a9ce.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 480b26aa-3747-4028-9962-8d939a90bf65-1786995209\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a364620dd8d0569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=46.285, imageryFetch;dur=45.045, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13482,"size_decoded":4744,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13481)","md5":"2939613881d210a8b3c176c6b97f4411","sha1":"c2538b6995c6f6b3ddb9dbdfa2bcdebe23741bbf","sha256":"1d3ecda47a1526c73eb21d5909875b2d7008eede49702d4dabcece4cfe3f1f6f","sha512":"cf9dcfa34d1cd962f48ee55f15fc01faea2e42834823b4ddbdca6dc47bcc343db5464db7425efafa310c78aa3f890a5fff621b385541b0d20541ce62495ce6c4","ssdeep":"384:oKUp7BDNsMhxfoh/sMSRGDRU7DF9QvGdinn42aSjE8UdgGJGEZrgXgCiXgCZIKz:oKUp7Bxthxfoh/tSRGO7DF6vGdi42aSi","tlshash":"6752e881f2b0853346e816f95c8667a5fa1c2314ba51d0e0e71c5fe42e73943a277ebb","first_seen":"2026-05-26T08:19:57.283832Z","last_seen":"2026-09-06T13:16:07.539481Z","times_seen":51926,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ci.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.771Z","timestamp":1788602383771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ci.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxUxYCJZ4INmPEBjv3lYwQXuwCyvoN406ZEbo8iShQ8a9RxieQutrvdR%2F8MuhPxC4GpXOYXGbrr6Uhlm8Z8iCYG2WBgxzv6WOSvZvu2iF9tO%2FzaKIs44trddnCMP6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462029b1356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122,"size_decoded":948,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"95003b2e2f99684579c89040eac6d913","sha1":"8ea56311ba6ab20e93ee78c25eeec33b8f71705a","sha256":"827734ef91f84698ef5764b62df02de108effe041b90c6fbb8d766b1ea3626e6","sha512":"170bc44d693395dcf3cacde646c1f5322d77a3b13d0c125bdeb8d4bbabcb98f09de8aaf55675b5655945182b90d868993111b96f96d8761049a5bd6db0aa469c","ssdeep":"","tlshash":"55b092e681512eb5dbc7a46b12a4a7e19ca2036c72a2c289288790ad031439060c4616","first_seen":"2025-08-29T01:16:58.434531Z","last_seen":"2026-09-05T10:01:03.353779Z","times_seen":101,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.830Z","timestamp":1788602383830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-d0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2616752\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AyeGpPNI0H%2FHc6p%2Bb3wr0O9WkGsowFFacn%2BdgSTczLZXhS42HPPOfebVkjLp8CawlxejVIDdpOzZWUpMjwvbxQHMj8sGNo63x9ZZxcog1zNwqoRyf1uwBcDgkVtj7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202eb3856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":1037,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"98e688c1ca787e0c210f700f5b1beb7d","sha1":"e82c7ffcfddcf168f7de390eed4dfad9882faf3c","sha256":"fd3a391dd9885d56b1fccf99870954dc68ff61184bd38fd4240b44fc562f69f4","sha512":"748f483aa6b7f87746d22fd21759348483cc479173cc248e59f2c3527170c5bbfd3d7f5803e8a07b06a575f1a3ae7df3a0cd84440c384a780dd6d06979079a56","ssdeep":"","tlshash":"85d023749a41dd7b474d69e75a447d80fd54533831450023168340785c7420a6418276","first_seen":"2025-07-08T00:55:32.415361Z","last_seen":"2026-09-05T10:01:03.354665Z","times_seen":173,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backend.shrinetheme.com/api/analytics/v2/stop","fqdn":"backend.shrinetheme.com","domain":"shrinetheme.com","tld":"com"},"ip":{"addr":"104.26.1.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.389Z","timestamp":1788602386389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinetheme.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 13:02:34 GMT","end":"Thu, 15 Oct 2026 14:02:30 GMT"},"fingerprint":{"sha1":"1B:F9:B7:D2:9F:AF:DA:E4:EB:10:98:0E:1D:C0:1C:69:73:DE:F7:07","sha256":"5E:9F:51:3F:AE:E0:46:28:1F:D7:14:F4:AE:44:69:D8:41:E6:8C:89:09:93:2E:3C:72:BA:77:A2:8C:89:1B:1D"}}},"request":{"raw":"POST /api/analytics/v2/stop HTTP/1.1\r\nHost: backend.shrinetheme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/\r\nContent-Type: application/json\r\nContent-Length: 419\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":419,"data":"{\"data\":\"WUNZzvOGPfgI06M4Zsodz3RMyCk/cmgvy7jskRLrB+tC1WyIOkOlT3NDWn+48HCcaYyGCJEnLQO9q4gbzuASy4MQM2wilEWwECTl4HR1MuwhQmYpZTY71U8+cuwD7Qi/Ewz8jp0a3bhah88t8Usq5Ao5X4KjFzvSXLK8N5pZ4kg5T+DoL8O0cRSBeEUAW64IkBmBR8tob1lFs4IAiVlh8cbHTSqJ+xn8Ne7ZOMRvfEgPKjfvjmulz6hkR+srCxv6KhzP1UgCnfFrrpM9hn4y9mTfsfLwor4RP2B6AGcBT/cNqnb5UZAWw45C2tezuZLMJM/llevdt8ixMNSn5QoTK6RvUHLGbsUA0nP2TxIvb2sWV5cmDD75W0zZFp4ks3JrMgoK5aPWLg0QxW8UpW+/pA==\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1bUC4j98xp2pfanQcImeAOVN4ggA9lDRZ%2FIPjD4QyoOVhQMfKQux0IMKUrIHHVGW7PuR50mfEHADpJvOAm5rNKYLMPPxIFFsDkYO22QU5YnsBCaEeGmBNnxrhJabrWB6kHm%2F8wRQi6S\"}]}\r\ncf-ray: a36462145da92efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":575,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-09-06T13:19:46.139817Z","times_seen":187673,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-runtime.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.067Z","timestamp":1788602383067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-runtime.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 17929\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 06:23:11 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-runtime.js\u003e; rel=\"canonical\"\r\nserver-timing: imagery;dur=108.732, imageryFetch;dur=105.248\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=taZG4n%2BjqO8pzLx3GPDMIYY6l93uC6cBK64cmJon8%2Bu%2BS8nXnEPpZDQZbDm4YT7nBaq9NO7zyEzLvohL112KIScSktQEyCk8yQsPcUQbsIC%2B0vRJaG4lNjadlm3gbPV3eg%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 99ffe281-1df3-40bf-b027-18be1b904e07-1788502981\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 99401\r\ncf-cache-status: HIT\r\ncf-ray: a36461fe4eb12678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59959,"size_decoded":19140,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59957), with no line terminators","md5":"7277ebb0c308da19ad212b9f5040849c","sha1":"1c3747ce4a0180a5dc0f6fc1b26a646c48e0115d","sha256":"5066478b938a0be4881ae99f088c6f8917e796bca22a61b91cd84e75a81edfe5","sha512":"45dccbec0e33853890c5c1e2f4722e203689f75cb93b84ffccdb23ce24d9b3215e841e19aec43cbe9efd7565864c599d5eaac75c8c962b1a8cd19220b62b768a","ssdeep":"1536:A/Nuk9nwzO/z4OOy+6xf0NmpS977u/qFxN:A/NukKI7OicEpS9XfxN","tlshash":"ea43f8947696f06007f705f480bb1175f3386a16f449c090e25e9a863c5aa9fb3bbf2d","first_seen":"2026-09-05T10:01:03.356134Z","last_seen":"2026-09-05T10:01:03.356134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.548Z","timestamp":1788602383548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 355\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1800, stale-if-error=3600\r\nlast-modified: Sat, 05 Sep 2026 09:35:05 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TmV1rqLmO9SZ0Nd8QlFV84d4q6W1H1b%2Bqjb3o8fp2T5i5nboblBLVqCdrhfUYkq%2BFowi2rVKsSD1krukVlmCSriQMCqv4LhKjraJ8Zm3T5RE8JZcbVSaHV%2FX%2BGE76k1mpQ%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 71b0bebd-f561-4b7d-9778-0ed35f839261-1788600905\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 1478\r\ncf-cache-status: HIT\r\ncf-ray: a3646201495a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=30.166, imageryFetch;dur=29.809, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":852,"size_decoded":1577,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (789)","md5":"30ffcc71ab21c649205f29ad3ae32ef1","sha1":"1c2f4469da18a424eb53ba21a153fddea572718d","sha256":"a72ba1be428bdc347d7ff2d6b2c34c5834d3baf85e7412791063bed141dd6d93","sha512":"11463885558541e28a7ac33ee61f999e6c82b0bb5c82269d7069c2f2a629b21a8bd6375b86b9500022d5769d178de6658ffd71c1fa4aa829d80d5dcd8819c0bc","ssdeep":"","tlshash":"630179fbc451eda640e0dda4d50197740cba220ba6ee933dc0ff4bac0e5542bce6900e","first_seen":"2026-09-03T16:26:38.558996Z","last_seen":"2026-09-06T11:36:39.446585Z","times_seen":377,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/fk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.810Z","timestamp":1788602383810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/fk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-47f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JyH5zQJYyED08B5JBZRePKdfFlu3TKIl%2F2pobBIGQ30sSTFfs543erfPKOzCj0dTh4swf2z%2B0CA1%2BpBl2JUxwHlcQ4gjZMO21BYxufj1HvZiUanP6m9WMD%2BB3%2FSnFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202db2656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1151\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1151,"size_decoded":1985,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"cf9b3a5db290d5e978f5c902c31628bc","sha1":"73c3fdc1c2915bae79fc7226fde08e85537d9a82","sha256":"b3597e3e96a3a3ecefa64df0872763cc39eaf4a9785f58a3f480115bc37e482b","sha512":"111234b483a6d14074aa263462f8235c7efec4d1e732406f2d2dda3a5bd8805e2684e31786c892fe1b63ab61a42d85da0392422175b29555a41e5a0723d2e9de","ssdeep":"","tlshash":"4e21ca461933bde51a59a1141a144be0cfd378e64f27b4197473dd939dd1500989b0f6","first_seen":"2025-08-29T01:16:58.62503Z","last_seen":"2026-09-05T10:01:03.358441Z","times_seen":98,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.939Z","timestamp":1788602383939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-232\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2352588\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ChQR1TD2LA5UgTTYxOExDjozZTIeWG058OIbeLHO3fckHUPmoQx4ImRR3RNdsXcSTy5h3kyAnNvmNT9Hzup4w1ple2FVhgBhYQbj%2F1Crpvn%2F%2Fv0DS%2BJJmbacOUO49A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203ab7756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562,"size_decoded":1394,"mime_type":"image/png","magic":"PNG image data, 80 x 46, 8-bit colormap, non-interlaced","md5":"5c556c07fc384c977092856385924bde","sha1":"832c8a1b3bd623054d3648b6914e16fa0b5d044a","sha256":"c0fdb027d455efda31d165351dbac9b2145fdca51aa1f9c9410a346b43bf1f2f","sha512":"829ca385e24f3a513a78e8b6f4a3fe5b0b4059c3b23254819d309728318e95bc2dc3a74e47fbd551e59b34e79be9a0de7961c52bbfa44d94a4179e6303c2a3d7","ssdeep":"","tlshash":"e2f02d474b89de4799ac5593d10ddbe4d8d834f11912093b7cf0c5f34d8575111815b6","first_seen":"2025-08-29T01:16:58.584849Z","last_seen":"2026-09-05T10:01:03.35959Z","times_seen":171,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ye.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.146Z","timestamp":1788602384146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ye.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 107733\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjXdw2Fi7xcHytcdEjShEgPk5%2FJH1pu6Cp%2FsHX8LCksyVdLqqQCtwBrh3zqkucVnyNWS6q5wlMNbiwbNttDBiRUcMF5ukcEAbtROTVe7FmKujgL4SKccVHSztX8dag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204ebe456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127,"size_decoded":955,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"76494107ddc388cdc78fbbb21b9cf5fd","sha1":"59b3b8f37952ba15d6b9854cbc474b98a578eadc","sha256":"0e24f81877839ab7b673b6100f0ecd81b67488b32c0235cb550c8aab57315e1a","sha512":"ac8e108ddef93a803d7ecf204a76e18f9ca4c53e7f809130a7f5c1045653f87f57afbe0a6e949801616e86aeeec460aa264c748a819ec1439de5751394ac684c","ssdeep":"","tlshash":"e8b02bd261144e3a430ee436085c08cc4416138435d04313120e033c0500300708001b","first_seen":"2025-08-29T01:16:58.604209Z","last_seen":"2026-09-05T10:01:03.360572Z","times_seen":95,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.434Z","timestamp":1788602386434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7905824\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-7905823/7905824\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bfa120TsNrkGcAmpidfQOWulsfwb58CBSCvOwoP9nC02i%2Blss7GS5eryzQDLtuIXsv4eyrBhhmqB7tZaC6TtDwuAVmwKPTgLPDgrlmA03c%2BlSJCpUtL6HrWBsqJOfRM%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 93006eef-8a39-43bc-ade1-d33b0b4b8b8e-1788221719\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 380666\r\nx-download-options: noopen\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e77569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=358.953, imageryFetch;dur=358.491, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375885,"size_decoded":1377586,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1fa80a8df9cdb0f93ec2c52cb4b4672e","sha1":"1f641636c507ba0f74939ab82216a4ae3f1b1316","sha256":"ea09666ae48cd2d945b7dbb1215c0a6a05d7c2ab611650ab66117afc9c738a41","sha512":"eec9ccc658bd61394fbe39bcc79bb116f66784f743762dc90dcb7ce583934f720e04959a7b83d2c1a2a795f70e2a7dfa843058fdaf5cb01270f847ec12bcc8b2","ssdeep":"24576:0acg2Ormu/iMtBkukFkSHkHi3YKQaMJ3qybYTikdkVi:2OrmCZ3DkFkti3UsWDI","tlshash":"92252366bba4d916ce7cfbb043f61b84b2b5cc395b0b57af8066520d5dc87a1b4871c0","first_seen":"2026-09-05T10:01:03.233977Z","last_seen":"2026-09-05T10:01:03.233977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":537,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.441Z","timestamp":1788602386441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20496823\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-20496822/20496823\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNqELf0ubKLJ7%2BVMRZpFxnLQgdu6%2FwMb2BM%2FQybiDdNbfpNxhyIoP%2FHgu7h1mMAjQQwJWYqvyc%2FGYfBwP2%2FyPRcRHxLqIzSbFT1oFIM7cdW%2FzyfNF7d8kiF9QgZ7ZKg%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fe8c3da5-c6cd-4e6f-b923-62d9b798aab8-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462134e8b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=505.798, imageryFetch;dur=505.421, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2126306,"size_decoded":2128020,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b309f2626ddb71207161e19c67a6b48f","sha1":"ac7270c6deb7a782bc101d3571c67b91df963682","sha256":"405fa375afd3cfa3610475c3fa52446252d93cf32ea3cca57361812572cdc563","sha512":"98a359dba93d58bc6d260848b075c699b475bcc4f0a59d8d5bbd0508637a37e36a8f6b956a35cf54304a06c7fa7279ecfa1edae8ece7d8dd0dda787d28b50428","ssdeep":"24576:VRW08ASQ3ioSfC48tHsJ5cAD+/J3M2hGFGl2JcZCy:4RjojIeMkJchG8ccy","tlshash":"6b25228ef7a9915bda641770a6ed93d377bac0a40737460b886c034cedc3b5c52e62e1","first_seen":"2026-09-05T10:01:03.232811Z","last_seen":"2026-09-05T10:01:03.232811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1016,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend.alia-prod.com/launcher/users?path=%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026url=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026is_mobile=false\u0026timezone=UTC\u0026country=NO\u0026market=international\u0026language=en\u0026release_tag=v3.8.24\u0026new_session=true","fqdn":"backend.alia-prod.com","domain":"alia-prod.com","tld":"com"},"ip":{"addr":"172.66.145.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.989Z","timestamp":1788602386989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alia-prod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 12:18:35 GMT","end":"Mon, 09 Nov 2026 13:18:33 GMT"},"fingerprint":{"sha1":"75:99:C7:51:00:93:3C:13:35:03:7F:70:5F:85:9C:CD:98:76:67:60","sha256":"8F:D7:CB:F8:E1:CB:62:84:D8:A8:D2:06:D4:C0:9C:43:BD:85:3C:04:48:A7:2E:73:18:D8:94:A0:54:AD:C8:41"}}},"request":{"raw":"OPTIONS /launcher/users?path=%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026url=https%3A%2F%2Ftryrovina.com%2F%3Fsnowball%3DKIT53949%26utm_source%3Dsnowball%26utm_medium%3Ddefault-program%26utm_campaign%3DKIT53949\u0026is_mobile=false\u0026timezone=UTC\u0026country=NO\u0026market=international\u0026language=en\u0026release_tag=v3.8.24\u0026new_session=true HTTP/1.1\r\nHost: backend.alia-prod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-alia-shop\r\nReferer: https://tryrovina.com/\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: text/html\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://tryrovina.com\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: x-alia-shop\r\naccess-control-max-age: 86400\r\nx-cloud-trace-context: b5ff78cdca9cb124dba05fbb19e3ec3f\r\nserver: cloudflare\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3646217092db50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":544,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":1,"dns":2,"connect":25,"send":0,"wait":160,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.758Z","timestamp":1788602383758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2bc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9YavScQFPkrjyoKK8HDeIsFm6GMZOA3GHBP6dSHxcbVnd34%2FT2KByZKJTDGJb2cYTDbp1%2FiElF8os6zFlatr%2FnJ6Glb2%2B4%2FbNaZvICtBAbp2f1tU5rZ3%2Bqb7LnbQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 700\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700,"size_decoded":1535,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"6759122afe950e0afb386c75a302ac6d","sha1":"e344d74f35099eeaf2f307382891baeada5e1a96","sha256":"d2405f41f2bc68ca2506a03d3c8c8fcadbc07d100417ce35346bdde87ff5e49d","sha512":"b577fccefd009a8b52a14482b1b84d0ad6d44ba8dec67644f28c427720cbcd885ac0fa14c55debc209b8e44365f76b68b08121274dd8fb180147a50189c7e9c2","ssdeep":"","tlshash":"8901948fa54a0cba82c812c218b43399ab5801a506ef4c82a498b5c3b19c31fccc887a","first_seen":"2025-08-29T01:16:58.422881Z","last_seen":"2026-09-05T10:01:03.361569Z","times_seen":95,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.778Z","timestamp":1788602383778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-16b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 369844\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UV5i9I4W13LF6DnfWIev%2B%2Frn6LMsvRMr2SLO8EDsJxNRhS7niPeKpD3Uw3O70xNMKFp3usH06XeeqiWeuD4n1gnp%2BkIhHpkW6PkjUFk8wK0Y7YhoxHBOeJbunbhu1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462029b1756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 363\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":363,"size_decoded":1192,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"92457a57114cd5946903b9adec4670ab","sha1":"c6ea9d0fd784a24798c37c74d532673080a15e4c","sha256":"2b1d29778294d45d3678cd7fdc240de70a16a638dd752be4a212401389dd44e5","sha512":"cd8512336287b448f4a1a93921ae487a3a8e169ac9f851ec215aae5d40a31c0b5f6503e4777a44c296af3477c27a3df2a6761ef995551c4a57abd3aa1fd10d6c","ssdeep":"","tlshash":"77e0c0e9b6df9efcd4f937239cd10c21d63fc9a418e2281b000399245e99d01469c004","first_seen":"2025-07-08T00:55:32.451927Z","last_seen":"2026-09-05T10:01:03.362679Z","times_seen":198,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/hk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.848Z","timestamp":1788602383848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/hk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1fa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 115668\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sMJjGzdDUw9hbaeooutf92ItzMS33QKZOCxWsGX3bOxCaHoihkO4vnN%2F8sXokrK06OKVKAz098x2Eof0gEYNx8O2Qfby3fqjENOEEX1%2BrxojDWBgXPX1coKPeHZbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462030b4556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":506,"size_decoded":1333,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"6b35b780583f668cb0c241b8a240a109","sha1":"f4324b6d7d2f09b085fe5ed781f2e870e46d1021","sha256":"3d4475b36859219c643ffd4f55890b645d024bce1e9a5028a071d7e11efc7b17","sha512":"1d9ebd60cc3aec169281ada8e7ab8202d6dd1404eb85975199bb7b51e6ad76fcfa756782ccc6da8254e2f17f50c5dcce6343419f0dd2a283b1992b931546c604","ssdeep":"","tlshash":"6ff0c0db862cbe35ca78995449458e3a7b510b197b119298915391591dc5075c105311","first_seen":"2025-07-08T00:55:32.412076Z","last_seen":"2026-09-05T10:01:03.363285Z","times_seen":149,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.shrinetheme.com/js/v2/main.js?version=1","fqdn":"js.shrinetheme.com","domain":"shrinetheme.com","tld":"com"},"ip":{"addr":"104.26.0.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.536Z","timestamp":1788602383536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ed05a327.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 17:28:52 GMT","end":"Thu, 15 Oct 2026 18:28:46 GMT"},"fingerprint":{"sha1":"15:7F:B3:D0:5A:C5:26:F7:A7:75:2E:24:09:89:2B:88:18:DE:95:E4","sha256":"B1:66:31:A1:48:C7:3F:4D:3E:3C:A0:06:A3:6E:5D:AE:B1:82:AF:2D:C5:0F:43:23:31:E2:59:FD:59:74:29:E2"}}},"request":{"raw":"GET /js/v2/main.js?version=1 HTTP/1.1\r\nHost: js.shrinetheme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Fri, 07 Aug 2026 19:43:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JA9GWZX1f29IpaTJ3int6uIhTnsCOY4%2FA8yansNJQLVvbHR%2FKY2wPFSNgACNbM3rPh2utc2JscS8edcezfkTu3TQjK1cY02WCZYhRbUAJZvNs32mXPcKGY8YtGCXprPKmHbbkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\netag: W/\"72a236ce592cb031c47608bb83a0d309\"\r\ncontent-encoding: br\r\ncf-ray: a364620138e756c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214937,"size_decoded":55832,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"72a236ce592cb031c47608bb83a0d309","sha1":"b8f39fc3ed679e3b7640ca45c149ec6a9641aae3","sha256":"98e03c64a8b97e7a5857a5dfd645118276b7a3f17ac723378cc6d4b931e50a9f","sha512":"84790fa6703fa9e54f2185416cc15eec3ed0757ac9586bef2d040b11e7d775f23ba257d9c4dd0b7ad8c4de5334529bdb3b57ebc920b42d7ba32cc6f13c54b042","ssdeep":"6144:pMFfbzea7uTg1yeclohE8Z4RSG2PIr/0yomfL9wMHT7TkEsqq7:pMFfbzrseclohE8Z4RSG2PIr/omfL9Rg","tlshash":"df2471002bc059a8674adfbb7217b1e6d445189e354e888bf06c7e242adb713f9fd931","first_seen":"2026-08-08T08:25:36.113958Z","last_seen":"2026-09-05T12:01:53.699974Z","times_seen":41,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":248,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-05","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"js.shrinetheme.com/js/v2/main.js?version=1","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-engagement.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.566Z","timestamp":1788602383566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-engagement.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2474\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 06:23:11 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/abconvert-engagement.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzesX8xq2ShpIqa8rMBC0p%2BAFq%2F%2FkIk8SygATHQEsdnsq2HZf3kuEd2n6zqJRppxqNm6jWG%2FvOdTMgjfqXkiT9TUseCeLXDLvKftEU3NfU13qidnBaa%2FC%2FhZw%2B%2FlB%2Bi7hg%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 27b51c62-a33e-4539-b088-404602dd454d-1788502981\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 99402\r\ncf-cache-status: HIT\r\ncf-ray: a364620149582678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=35.284, imageryFetch;dur=34.675, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6829,"size_decoded":3711,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6827), with no line terminators","md5":"05eaa896e3683993e7993be511abf329","sha1":"339639eeac593daa3c900dea7d2c5f4cd97a6224","sha256":"5d6b50a5ad290b4036c9c7d79f9e742b464912fd52639888835e2110a9102c2b","sha512":"13e755c23a7f830de3debd03153b7b1d84aa234ba4ad467450711849d418ec1d0de33536ca07b94a46338600e0239a8145dea1eeeec8629064fbdd26a360c774","ssdeep":"192:IkNRGU7w9e4rp/AYRp3pMMKk3KPdXohZseewMg50dODXOPJpi6:IkDGU794JAYREM3n1Mg50dKXOP3","tlshash":"27e1d6de3c81b0281af744a461376639e336568278c2c4a091f44e853e69e8f9332fdd","first_seen":"2026-09-05T10:01:03.364392Z","last_seen":"2026-09-05T10:01:03.364392Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.829Z","timestamp":1788602383829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-267\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5giC%2FglO0ifgrE%2F5D2cfhEuU%2B7Xx1DZraFLbXF1XoJ8XFLwD80gtKfui4Vl1Nc397RPCvzz4oljabG21aFPdST0lPQ3JuskSrrPm03Lqd7nNemdd15LW3NZP3hUd%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202eb3756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":615,"size_decoded":1446,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"afc42504b1e5f0377adbdc7568d6fcec","sha1":"d8e66be7ad8ee5a454a1ad06a89e42c45fb2c3ad","sha256":"75a51315785d7b026debad168722fa42ff27d23243e36103f9ca5dfc00dfea65","sha512":"3cdae4be37271fbc485fed7af70dc620216ae089c3d7360be32bdcb7855675cbddc29aaf5c14596a75a8101bace9f33df92e2598db4777d76240f17294a3a3cf","ssdeep":"","tlshash":"25f0b7932a7d1f22005ef4f48426ced5c19b01225555408d930f98b0323662af8d0661","first_seen":"2025-08-29T01:16:58.550404Z","last_seen":"2026-09-05T10:01:03.365496Z","times_seen":102,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.009Z","timestamp":1788602384009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-33f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 356790\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Pdg59LAv96M1L1sr11ZNFNYRVxAZ8qUTrlWcPZh3nBrP9Tx7gbWiA9hapgM7UDb9cD85nxAGmoo0OVjLaEYWNeukZJs8825rs6qyqkmEwEy4A8kTjq41W2%2FMhITvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462040baa56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 831\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":831,"size_decoded":1656,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"1273b2e5396260d4a34c5b2adf980e3f","sha1":"6bfb0575fcc095700d91d14c6c62b684d4dddb4e","sha256":"50dd1dbe64ba89b2f6a28131214c7b578ba588350bff9372267a8d8fbc9acfbd","sha512":"1e40da539befeb12c45e94554b55ccfe8057eeb2f86c42dbb391cd601db492da33e87f68217c5a9df748e5871391761d90608731b7bbbb94eef2f6297c297b2d","ssdeep":"","tlshash":"e50186a3629a2208b50a0632b86ec84c7075ce34570f5e2807d69f1481634c07142593","first_seen":"2025-08-29T01:16:58.537536Z","last_seen":"2026-09-05T10:01:03.366391Z","times_seen":94,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.024Z","timestamp":1788602384024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-791\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI4xl35Acb9%2BvmlymhN0vjrMM%2FzXlFWr5JlEALWsf%2F874wyE%2BGoT%2FJTu0R%2FI4jztTbX6ttI8n1Ihkrt%2FHh6KupXDJv%2BUxmxPEh8lxNR1Ig0J9Kuj2xIUakgPP2zwpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462042bb856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1937\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1937,"size_decoded":2777,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"a99b38626e9299fb2eda789997e56928","sha1":"b725c7cddb13e30a6fae448315ea52ba3ec1421e","sha256":"4f40b845cca5d53ffa122fb5314ec1397d9259177628e1d3ea3c4b8f0bf5c8d4","sha512":"463ba806990d2bdf52a945b080d29dbde8d2a390ec17e233f43d15fa94e750a7541f0bfcf9fafe3121c628eba55dc8553a59fa2dd345335ddf5457032d9b44da","ssdeep":"","tlshash":"d141393337a444b4f2c414a8ec97b180e1eb5a960b884096cee37dab930d1090c98e5f","first_seen":"2025-08-29T01:16:58.657228Z","last_seen":"2026-09-05T10:01:03.367387Z","times_seen":99,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/fonts/nunito/nunito_n7.37cf9b8cf43b3322f7e6e13ad2aad62ab5dc9109.woff2","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.851Z","timestamp":1788602385851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/fonts/nunito/nunito_n7.37cf9b8cf43b3322f7e6e13ad2aad62ab5dc9109.woff2 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18152\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQTDZIr5hib6BiS%2BVVH1CTxWrpvFfnB9C9fTOE5z3l89Smbs6OqtKZXlyeONT9peyrmCZhSO06rqllZCVFEPGTMXaMkGZ1%2B6b6bQf311IDICwAOdNu%2F%2FU%2BS2NFGXQfrppKAEElv2\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 28 Aug 2026 03:56:46 GMT\r\nage: 1607175\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-fonts\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 8d157847-a6e0-4147-871d-2a571ac1f553-1786995209\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a364620f9a7a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=316.212, imageryFetch;dur=37.453, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18152,"size_decoded":19632,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18152, version 3.-26083","md5":"4f0624e818e3a10bbcdaad20ce0fe51b","sha1":"37cf9b8cf43b3322f7e6e13ad2aad62ab5dc9109","sha256":"72fc32d74973b9a8b13c812c5d378528b397e5b65af80a9cb51bd379d591b9ec","sha512":"32106aef50f8f067e2a9b62423c9509353ec87fc2d5e69c020fc46c5203b9faab7a8b870c5fb6afa70b590faf92f83f643ae329812f4e040fb4d244b5dfb4343","ssdeep":"384:wJnX82/2rnuBH6FK/P0S/UkvP3YVWYTQs+grX2jekdolSYmp:unX82eC5PX/rX3YxUs+grX6z","tlshash":"ec82d1fa847ea585e8d71477922412c6619f7303b3c9f3935dc3ee87cda3938a11582a","first_seen":"2025-07-10T02:20:05.583297Z","last_seen":"2026-09-06T02:10:53.755317Z","times_seen":1398,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/il.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.859Z","timestamp":1788602383859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/il.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-12d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcaM1QQiycNwtvzzj9iiVkaqgFxOmvtKvxvXF6rejJ3fIRaXXWovuh%2BidP5RkMkTjk%2FzQ3t7x8gv2MDcoWuiQgVqPGZ4Bh9RMLrQv8ZoAVJC6Po1xRxw3OU7%2B7z%2Fig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462031b4e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 301\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301,"size_decoded":1132,"mime_type":"image/png","magic":"PNG image data, 80 x 58, 4-bit colormap, non-interlaced","md5":"ada0431cfa35b7e0555a3349b2eb4ec7","sha1":"286f568a4863cfeeffc07f4910b32c2cb9d71b4a","sha256":"e9c4bee374d1a69832dc0de7c0dbdc2a2d8ef96d795768b3a2eb967744338e50","sha512":"704af20f09bff2bed11278894f55e05f8cbb957c8807bb2de3989a9973a69081b6bdb37d775fb9d3db5c95497cf343a22cd1b866d558f7106db4061a1c86263e","ssdeep":"","tlshash":"a0e0e7d1d5502c34cb16dfe5558521975c192ca87c08000e0559a7cd0340106b175383","first_seen":"2025-07-08T00:55:32.460284Z","last_seen":"2026-09-05T10:01:03.36892Z","times_seen":161,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.035Z","timestamp":1788602384035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2190043\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FDCh3bHCMFxkBFdwBeInscvDdNnTmuxgacrKtVmixSETXo3ZXP4Y39hfbKGS%2FmKXGl8NvnYDhTlEyMY8OjKtB5XzQP%2FqLDso3reJXA%2B95jowdZVCtoOeSGaD7lywA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462043bbc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 123\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123,"size_decoded":954,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"ea88236cab2242c37f12aa634aabff00","sha1":"194907b10fcf3475dae7ad48d759863f3350f96f","sha256":"2a539c1a42f160aab68730f4caaa322bd6fbccf42145015bb7544961671a9cbd","sha512":"9f00ed6a3341648976dc1e0d3b898fd0b29ae373cc10d67c6e27523ff0de0cd8c0f51eeb186c900acb86c5fd1205640e0f728511de379a14d397902d8d262302","ssdeep":"","tlshash":"c4b012f3625cfe29efcee96b45d89694b8791378639066d71c8b917d1300230d448153","first_seen":"2025-08-29T01:16:58.596905Z","last_seen":"2026-09-05T10:01:03.265696Z","times_seen":316,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.080Z","timestamp":1788602384080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-13a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2611671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yn5yWLknEVd1U3oqQS4gx1q9xsUTk9uQXmABUsAz32LNGNQTNz6vSym%2FUxneZdPqAMVMzb3zzp7psbB8naxigrmuOxWQ%2BlNWnRrf2YF1OzveeFxp1rd3CQBrBd7HA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462048bcb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314,"size_decoded":1142,"mime_type":"image/png","magic":"PNG image data, 80 x 49, 8-bit colormap, non-interlaced","md5":"94ff1b2842d993a842f0dd0364f86cc6","sha1":"71d1e4cb92580a96a3b8258848900de50b75882a","sha256":"2c99cc0ba6ea2513cf61f2ba32e8c33ef12fa1975898930fc592e0c6fcbfb0bf","sha512":"39efa08d778c9c4394978624fd1c2978eea9e55e50161d0f25af65b831b8c6bc66cf9d198dd318c3ee255841db44ef6a7ac78a396676571f2a5b6e9d67f59085","ssdeep":"","tlshash":"bfe07d934360d929b2dd30e607967271b439545d6b78570615e3dc2d2a583a804f45b6","first_seen":"2025-08-29T01:16:58.454946Z","last_seen":"2026-09-05T10:01:03.369473Z","times_seen":100,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/browsing_context_suggestions.json","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.076Z","timestamp":1788602386076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /browsing_context_suggestions.json HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-download-options: noopen\r\nset-cookie: cart_currency=USD; path=/; expires=Sat, 19 Sep 2026 09:59:46 GMT; SameSite=Lax\n_shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\nshopify-complexity-score: 0\r\nshopify-complexity-score-v2: 41\r\nx-frame-options: DENY\r\ncontent-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;\r\nstrict-transport-security: max-age=7889238\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qsJ9IEkQZtP1UcQr53BZhV5UItKZq01n9jOamXP2LL%2FODiadK5Mh7WrsXzhpPqqYGL%2FB0fcH0Jy6I4hAY0O8FzputcLLdV62AFFN3y4mZYLnKNbKijHCwA3DuVYmM4%3D\"}]}\r\nvary: Accept,accept-encoding\r\ncdn-cache-control: no-cache, no-store\r\ncontent-language: en-NO\r\npowered-by: Shopify\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-europe-west4,gcp-europe-west1,gcp-europe-west1\r\nx-request-id: 23b4e259-24bc-4964-832c-3a4a55428699-1788602386\r\ncf-ray: a3646210fc10569c-OSL\r\nserver-timing: processing;dur=46;desc=\"gc:5\", db;dur=13, db_async;dur=1.299, asn;desc=\"50304\", edge;desc=\"OSL\", country;desc=\"NO\", servedBy;desc=\"t7n9\", requestID;desc=\"23b4e259-24bc-4964-832c-3a4a55428699-1788602386\", _y;desc=\"00000000-0000-0000-5000-000000000000\", _s;desc=\"00000000-0000-0000-5000-000000000000\", _cmp;desc=\"3s.amp_NO02_t_f_VMd-tVneRiqZSstfYtRzPQ_%7B%7D\", cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"cart_currency","value":"USD","quoted":false,"path":"/","expires":"2026-09-19T09:59:46Z","raw_expires":"Sat, 19 Sep 2026 09:59:46 GMT","secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"cart_currency=USD; path=/; expires=Sat, 19 Sep 2026 09:59:46 GMT; SameSite=Lax"},{"name":"_shopify_essential","value":":AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118,"size_decoded":2371,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3568815d49077d021d9d4d7ac541f42b","sha1":"2d8bc24f511a9375450ddf1d86e4ce784c66b375","sha256":"93d49547bfee228a8c95930372bfce9ebde368dfde6e86eb50f31fa827febab6","sha512":"f0ccb4cd6f0f52ccd7474a27d9d4a48f7ab7993d826d9aa11b5fbf66a06983a1a5751355e65240527c01a83fa7cfe22fb4dbd296e3bc0ceda9139668576a0b1e","ssdeep":"","tlshash":"10b0127d79092e7ea9e9c1e5a58a320b8bc3450391d83dc341c0bfc0d64028c046a244","first_seen":"2023-04-05T17:56:39Z","last_seen":"2026-09-06T11:35:11.416933Z","times_seen":9588,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shopify.jsdeliver.cloud/js/config.js","fqdn":"shopify.jsdeliver.cloud","domain":"jsdeliver.cloud","tld":"cloud"},"ip":{"addr":"104.26.8.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.541Z","timestamp":1788602383541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shopify.jsdeliver.cloud","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 11:32:51 GMT","end":"Fri, 30 Oct 2026 12:32:48 GMT"},"fingerprint":{"sha1":"1B:69:E4:CD:DE:41:EF:A0:23:D1:B8:AD:99:28:2B:8E:B9:C8:E9:0B","sha256":"C5:B7:90:6C:9F:7C:C2:68:52:97:88:4F:2D:15:13:1B:DB:14:F6:01:02:DC:FD:5B:43:C8:5E:03:C3:62:1F:BA"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: shopify.jsdeliver.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P78slHIjyDtLirtgg4IRG%2FlYBBI%2BjJfp5fzDBCZRBIhfz3EPY480h3p3MepbA7e6dEoTVzPX7%2FmTVowqs8YRWOprurJkou5PObF9sym4%2FHpnfoD%2BMjghy4mAqWZ7fmD9aI%2BBKvudxiP4tjmAIE1gpvd3koxI%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\netag: W/\"f1990594489afe6631f6e56ccc398137\"\r\ncontent-encoding: br\r\nvary: accept-encoding\r\nage: 8868\r\ncf-cache-status: HIT\r\ncf-ray: a364620148fb120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2453,"size_decoded":2351,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2453), with no line terminators","md5":"6db0b6212daf7db60ae1ad67dc05c1b8","sha1":"b187f592a050b06f2ad1d2ba20d6c6ddf75eda21","sha256":"9be6a9f19ef2805ae1055d811e09e1d1d7fc8231495bf1f8b2d18231ea04e746","sha512":"f2c25468704d2815f4b9200d0f0cfdd454062f2416b75c1571a4fc57a0cd3cfc5065b961689d94cfe91b97b729242d1cf1fb78d633e1be1f82350f253fb6d93a","ssdeep":"","tlshash":"fb51d6c528e0d1f8da0557780eb1169cfbbf34ade8a0a588ccc7583aa95cea90c4c00b","first_seen":"2023-11-05T12:04:27Z","last_seen":"2026-09-06T06:42:52.925289Z","times_seen":8018,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/at.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.708Z","timestamp":1788602383708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/at.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-6d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2521669\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIuu1GVhRnhW%2FTezU6cV7Kc4%2F%2BPgiowb%2F96nD6YylvSmgRtQz%2BHLaOWHbf5BOu4LMvzJrf7x4nr1AJiMqng5PSXXhtVNtXWRJ%2FMK7Bt01jNkWyV8qzz1i8X3Ut4Kjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462022ae856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":944,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 2-bit colormap, non-interlaced","md5":"b917dd3ccba73e3033de3dfad4ae5d73","sha1":"ee02ba8b203e472b6357fb6ae22bedebcf428196","sha256":"6db2a0734919d8c19430b79af8b2682be3a6cb878162aaff1c9c2a47b7660953","sha512":"92242d241239c2f70a6905592adf367f3b5a6696c71eaf447b90b474d52afe972eeb6a92d57fc225f272d88ad0bf89889cb8e221f216cd5729a82eeef7cded58","ssdeep":"","tlshash":"1ab092d262c45db2ca8e9532a2384060fd1ca20202620506666b8e29151028081a939b","first_seen":"2025-07-08T00:55:32.386058Z","last_seen":"2026-09-05T10:01:03.371512Z","times_seen":227,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.743Z","timestamp":1788602383743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-283\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2611118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnZmb6PuCw%2F2WgD%2FgUE7DT1BzgaC1heLUGYXCM3TGLbWWUtGYEkkGwiXC0TUq6Rpfuta%2B%2BFZBT0VRjLZsX0wbCksrVTNTTdmu%2BtQ3F%2FLfxoFuGjXd%2F6MaSzLLp%2Bc9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462026afe56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 643\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":1483,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"4bc69a0a57355f5c76cc064b8d8da15a","sha1":"1116da28a15dd611b06f4ee2792c0dee6946edd5","sha256":"be0214ec050ed660fcca6773888dabe78292a41ebdc8a4cbf46ecabf67df9f48","sha512":"0a57145ee9192a3e04f7ed529b95f02903037d13666fad7108114f8c8ed484ef45f5e315a2967621d2e39e98c18d82518a6f93ce5419119a416041fc63f1f0e5","ssdeep":"","tlshash":"4ef06847be396ea7ba52e9b09f37408dd06a131b7742957df82041d89971dd04e484c1","first_seen":"2025-08-29T01:16:58.447776Z","last_seen":"2026-09-05T10:01:03.371987Z","times_seen":99,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.834Z","timestamp":1788602383834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-21c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2270076\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00LfKQH2QmmQE2yoDajbtE5bqQhuSEViKupw27swRgR8e%2BfsGGYwtAFy53LcInmvSHCoo87RbeXQDSsutnfMbhjDBcfwgRJH7Cfl%2FkGesl9A6h%2FmCN%2BsQg5m0E6ZzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202fb3c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":1372,"mime_type":"image/png","magic":"PNG image data, 80 x 50, 8-bit colormap, non-interlaced","md5":"6b38cfcbafd0439a3e84226622a612d0","sha1":"75997c7ddad48303c7474d1fbe966241101adca1","sha256":"99bcd45fc224df973b378d21b5d825a9c2805e6d7a73bf45f8a7f7acdb6715e0","sha512":"085e92173f36faeef836a864ace2bf3c50a4d74cfa032bb3b9c846ebd2af6126bb72fb6b917d1796cdb6189598dfc57bf583719afe79e6566447c3b6eca03ac3","ssdeep":"","tlshash":"48f075fbb74f1cbcb8453b7f296505648bd1101211545494f67fd0b1554bc21120d89d","first_seen":"2025-08-29T01:16:58.614698Z","last_seen":"2026-09-05T10:01:03.3729Z","times_seen":105,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ie.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.857Z","timestamp":1788602383857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ie.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-77\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6be%2FZKQOM183C9YNHAVK759vaZAfeYlEjtyNhmKoJMYtD0eEAJN2SNh5jxjBrzPCGc7Iy1bH9XuIlpwP8coE9%2BObvA%2BeNvqHmy2wcct0GVMioMVKbIxRL6uQUQt48g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462031b4c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":947,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"267fbc264361b91f3a943f46d9dd647b","sha1":"304fad87bdd04b751523631c1d05ee13056d942f","sha256":"3d67eb9367c3f8903cce0f1af01203d4e5edeb72c0106a6ef856d25ff943eb5b","sha512":"a3e5c23f526246acc225b3a651a88aa556714fc192fc9828365f3afe045c92a7311eafd87ff41dac27242046d61566ed475e7943580f953008609bf7950ec5b1","ssdeep":"","tlshash":"cfb092eaf9e89e24e386a57b6724a201ad680058337682890c869a95d5212849658ae7","first_seen":"2025-07-08T00:55:32.477928Z","last_seen":"2026-09-05T10:01:03.373823Z","times_seen":213,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/zw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.156Z","timestamp":1788602384156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/zw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-249\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2271468\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dB%2FvvIbVqyMoIEUYKo%2FBGXYKcopj8GlD%2F9ueRbygW6C2ffGqy626mLmQ2oPG6Nqh8pXED1uo7DnV9qZqlzAln%2F8ZYyLk6ggCT8X1GOCpRqCy4NNvvqDv%2FYObMxtebg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204fbe656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 585\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":585,"size_decoded":1419,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"2efb37ae491eaf8341bc04e7bcbd96b6","sha1":"e5e3181e34985a2bc385d392d5cc203cb052a6cb","sha256":"2a96a36a785b535857baee3e4494dfac275563ab85f0d0ceb6cd112143bdbcfa","sha512":"46b30b675ba4f3436cd01946f2fdf992afacd328bccd1e323ce1255e60e73e27a35f67adc92d9a269db2af096d60e231bb27f7dca54ffa8baa3b790178776705","ssdeep":"","tlshash":"def0478e11ff4536d4335df21cfb8610c922158c6b2d1414200e79b93311d91a3cf964","first_seen":"2025-08-29T01:16:58.490947Z","last_seen":"2026-09-05T10:01:03.374391Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.networkErrorMessages_DSiGJi0_.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.036Z","timestamp":1788602386036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.networkErrorMessages_DSiGJi0_.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 239\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 02 Sep 2026 10:12:43 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.networkErrorMessages_DSiGJi0_.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdj7Z%2FdwJhA73xPgT1PEnPOWOuHcpmBw0fzSyJsMYYIwSAYrHaFQyazzpDZhrNMDHcX8DJmmjqW%2B6iPxcunvnfl%2B3KrYCrFFWHaPuz2O%2FA6zshCpujA52p6FKudL43lgxg%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 8a4e2ac4-365a-48cb-88cd-5d9a3f0dadfd-1788343954\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 258431\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf502678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=180.937, imageryFetch;dur=180.632, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":1465,"mime_type":"text/javascript","magic":"ASCII text","md5":"89b39b5893291c238c16bea982734fcf","sha1":"25d40b53f3e52737eff87795135307de1d3d0609","sha256":"b59745d4679e7423c72049ea0f558029bee7747e87ed5435c584c633a88d7498","sha512":"e5df6b5261675b8d762007e9267f59afabac4195ce633a2d911c4f789a0a429fb87b4f771b7415408b147425e77d981140dba18762776fac301e1e274a302724","ssdeep":"","tlshash":"fae0c0ebe874546d01272836600551724a10b01cf3e44099f1052ded003c4696b7ed06","first_seen":"2026-09-02T10:24:14.297209Z","last_seen":"2026-09-06T11:36:39.410875Z","times_seen":627,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/.well-known/shopify/monorail/unstable/produce_batch","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.160Z","timestamp":1788602387160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"POST /.well-known/shopify/monorail/unstable/produce_batch HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4625\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4625,"data":"{\"events\":[{\"schema_id\":\"web_pixels_manager_load/3.3\",\"payload\":{\"version\":\"80079e4cw22952a98p55856082md4f1b6b4\",\"bundle_target\":\"modern\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"status\":\"loaded\",\"surface\":\"storefront-renderer\",\"shop_id\":79356199133,\"request_id\":\"d31abeae-8a6b-456a-bc8b-082f3ba18438-1788602383\",\"navigation_type\":\"navigate\",\"trekkie_state\":\"awaiting-consent\"},\"metadata\":{\"event_created_at_ms\":1788602386253}},{\"schema_id\":\"web_pixels_manager_init/3.2\",\"payload\":{\"version\":\"80079e4cw22952a98p55856082md4f1b6b4\",\"bundle_target\":\"modern\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"shop_id\":79356199133,\"surface\":\"storefront-renderer\",\"status\":\"initialized\",\"user_can_be_tracked\":\"false\"},\"metadata\":{\"event_created_at_ms\":1788602386370}},{\"schema_id\":\"web_pixels_manager_event_publish/1.7\",\"payload\":{\"version\":\"80079e4cw22952a98p55856082md4f1b6b4\",\"bundle_target\":\"modern\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"shop_id\":79356199133,\"surface\":\"storefront-renderer\",\"event_name\":\"page_viewed\",\"event_type\":\"standard\",\"user_can_be_tracked\":\"false\",\"event_id\":\"sh-71029746-9B01-48DB-822B-33D893D6DF48\"},\"metadata\":{\"event_created_at_ms\":1788602386371}},{\"schema_id\":\"web_pixels_public_event_payload_transform/1.0\",\"payload\":{\"shop_id\":79356199133,\"pixel_source\":\"APP\",\"surface\":\"storefront-renderer\",\"event_name\":\"register:init\",\"pixel_id\":\"2309423325\",\"pixel_app_id\":\"240074326017\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"bundle_target\":\"modern\",\"adjustments_triggers\":1,\"adjustments_applied\":0,\"adjustments_context\":\"init\",\"adjustments_json\":\"{\\\"protectedCustomerApprovalScopes\\\":[\\\"read_customer_personal_data\\\"],\\\"dataSharingControls\\\":[\\\"share_all_events\\\"]}\"},\"metadata\":{\"event_created_at_ms\":1788602386377}},{\"schema_id\":\"web_pixels_public_event_payload_transform/1.0\",\"payload\":{\"shop_id\":79356199133,\"pixel_source\":\"APP\",\"surface\":\"storefront-renderer\",\"event_name\":\"register:init\",\"pixel_id\":\"1937309917\",\"pixel_app_id\":\"2935586817\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"bundle_target\":\"modern\",\"adjustments_triggers\":1,\"adjustments_applied\":0,\"adjustments_context\":\"init\",\"adjustments_json\":\"{\\\"protectedCustomerApprovalScopes\\\":[\\\"read_customer_email\\\",\\\"read_customer_personal_data\\\"],\\\"dataSharingControls\\\":[\\\"share_all_events\\\"]}\"},\"metadata\":{\"event_created_at_ms\":1788602386381}},{\"schema_id\":\"web_pixels_public_event_payload_transform/1.0\",\"payload\":{\"shop_id\":79356199133,\"pixel_source\":\"APP\",\"surface\":\"storefront-renderer\",\"event_name\":\"register:init\",\"pixel_id\":\"2194800861\",\"pixel_app_id\":\"1780363\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"bundle_target\":\"modern\",\"adjustments_triggers\":1,\"adjustments_applied\":0,\"adjustments_context\":\"init\",\"adjustments_json\":\"{\\\"protectedCustomerApprovalScopes\\\":[\\\"read_customer_address\\\",\\\"read_customer_email\\\",\\\"read_customer_name\\\",\\\"read_customer_personal_data\\\",\\\"read_customer_phone\\\"],\\\"dataSharingControls\\\":[\\\"share_all_events\\\"]}\"},\"metadata\":{\"event_created_at_ms\":1788602386935}},{\"schema_id\":\"web_pixels_manager_pixel_register/3.8\",\"payload\":{\"version\":\"80079e4cw22952a98p55856082md4f1b6b4\",\"page_url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"shop_id\":79356199133,\"surface\":\"storefront-renderer\",\"pixel_id\":\"2194800861\",\"pixel_app_id\":\"1780363\",\"pixel_source\":\"APP\",\"pixel_runtime_context\":\"OPEN\",\"pixel_script_version\":\"a3321ca85cf5aaf6b57585fcd8d67b3a\",\"pixel_configuration\":\"{\\\"config\\\":\\\"{\\\\\\\"google_tag_ids\\\\\\\":[\\\\\\\"GT-NMLT4F8C\\\\\\\"],\\\\\\\"target_country\\\\\\\":\\\\\\\"US\\\\\\\",\\\\\\\"gtag_events\\\\\\\":[{\\\\\\\"type\\\\\\\":\\\\\\\"view_item\\\\\\\",\\\\\\\"action_label\\\\\\\":\\\\\\\"MC-56E24EFV4E\\\\\\\"},{\\\\\\\"type\\\\\\\":\\\\\\\"purchase\\\\\\\",\\\\\\\"action_label\\\\\\\":\\\\\\\"MC-56E24EFV4E\\\\\\\"},{\\\\\\\"type\\\\\\\":\\\\\\\"page_view\\\\\\\",\\\\\\\"action_label\\\\\\\":\\\\\\\"MC-56E24EFV4E\\\\\\\"}],\\\\\\\"enable_monitoring_mode\\\\\\\":false}\\\"}\",\"pixel_event_schema_version\":\"v1\",\"status\":\"registered\",\"user_can_be_tracked\":\"false\",\"bundle_target\":\"modern\",\"duration\":562,\"start_time\":3975,\"session_id\":\"sh-71029659-4563-4E23-F2C4-31C4EAE15C67\"},\"metadata\":{\"event_created_at_ms\":1788602386936}}],\"metadata\":{\"event_sent_at_ms\":1788602387108}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-allow-methods: OPTIONS,POST\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-expose-headers: User-Agent,Accept,Content-Type,X-Monorail-Edge-Event-Created-At-Ms,X-Monorail-Edge-Event-Sent-At-Ms,X-Monorail-Edge-Client-Message-Id,X-Monorail-Edge-Device-Install-Id,X-Monorail-Edge-Accept-Language,X-Monorail-Edge-Content-Language,X-Forwarded-For,X-Monorail-Edge-Client,X-Monorail-Edge-Client-OS,X-Request-ID,X-Shopify-Location\r\naccess-control-max-age: 86400\r\nx-request-id: af075a15-1edd-4728-b79d-2effea5863fe\r\nx-robots-tag: noindex\r\nx-shopify-location: us-east\r\nx-download-options: noopen\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6biAecoBSoHsjTX5xAtZAxk%2F%2FpyMNKlOaRoIVIQDYAXrizxPhQRKWk5Ywd3DDpHjRQG27rz0k0n0p7AK%2B1cdO3My%2FaqwT6843AHXhiQAV2wVGVjBTkpOCWNHybC12YgAQ2tw3PVe3E1sSJYsRc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a3646217cadb569c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":7616,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shop.app/checkouts/internal/preloads.js?locale=en-NO\u0026default_configuration_id=3545039069\u0026shop_id=79356199133","fqdn":"shop.app","domain":"shop.app","tld":"app"},"ip":{"addr":"23.227.39.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.546Z","timestamp":1788602383546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shop.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 02:57:24 GMT","end":"Tue, 01 Dec 2026 03:57:20 GMT"},"fingerprint":{"sha1":"65:C0:F2:7A:00:86:DA:76:0A:6F:06:14:B8:FF:22:68:35:82:EF:A4","sha256":"C0:AB:44:54:7E:7A:78:DA:91:80:12:84:66:3C:9A:A4:16:3C:2A:5A:C3:5B:C3:8F:6A:9A:FA:A0:E2:2E:AE:45"}}},"request":{"raw":"GET /checkouts/internal/preloads.js?locale=en-NO\u0026default_configuration_id=3545039069\u0026shop_id=79356199133 HTTP/1.1\r\nHost: shop.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lcns3CRkM3%2FmqeGqGrlshWvSo0kTGaM8OMDgPpNm7Z3KvNlSTns8IzOeuolxLzDyrQbHOtMSjvXV1WWmOqjJa6s4ragvqesK8FysFP38jtBLuufyOlnexSLA\"}]}\r\nserver: cloudflare\r\ncf-ray: a364621a1a2f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":727,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/au.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.707Z","timestamp":1788602383707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/au.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-250\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2190118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xy5aAq%2B6AOweWfCLT67mNzfdcukXfvdCIsnzRqSpkGV3FyxmdQpuEiuKdk7KiQlWrNRd21%2B6ZIllD8c%2FaAMdekgMCAHAk5rQt3Nu6gIRG1Tfije7Tfl6TbH3KIwuNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462022ae656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":1422,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"f9b1378ebc3d7497c9124be2ce9d141a","sha1":"9c0845f76dd4f8b1c5cc22707f617464daf250cb","sha256":"eb3cd6aba81315a7db38b55a555938f3d4c1553342eafb3a37e13d4d1fe76450","sha512":"c9e31fee1c72a37a9e43e196c3c5de62f778bc85aa72b6768cc71c604bba2b33ac65f80e0486ad839b6a8849bdbbef89e5f752f486bdbdd2237e3a3f92f04662","ssdeep":"","tlshash":"8ff041ee3405bf08825baad6084e00a5cfe0d4383e104f7efa22616806b7984f0ff345","first_seen":"2024-08-19T15:25:37.913454Z","last_seen":"2026-09-05T10:01:03.375899Z","times_seen":299,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/id.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.854Z","timestamp":1788602383854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/id.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O1WfBPT%2BdNgYqyHTMX2AtEF2eNlJLniofcDs4EmdKMxZspt4QTDxUd7Q5ErCvCcPGKkwZAZIx3elPbbNfmCq3ZU2WM78tnZIHW2tuihSbD7yJHGnm1DzCkGd0saJxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462031b4a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105,"size_decoded":929,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 2-bit colormap, non-interlaced","md5":"5d02c6a088e46bb69a3ae7cb98149bd6","sha1":"05be5b4a630d48d492bb1c9bf9976f1d02c7aeff","sha256":"2231d4894ef2ef66ab52791b169a6717b00aad81750605a5712ebd4fc3e5724f","sha512":"f5fa22ff16faf8313c96d296e4915d3b52570db9c7a4ba5a07e091f3d28f297c1613eaf90e91b200d272e005a57fd2e975ad812eb7e6171243ec4924275662fe","ssdeep":"","tlshash":"48b012c2328b2d32e3480333632452c4b62833151b20421b618ac63d10a0144c1e0b99","first_seen":"2025-08-29T01:16:58.667164Z","last_seen":"2026-09-05T10:01:03.376399Z","times_seen":122,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/za.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.014Z","timestamp":1788602384014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/za.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-21f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1867305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQuL9lOzd50A7K5A9ASKgMJVzk3XVe8PcYQexAxAwTMHR6laiB0tWErXHr18e7Dbj8HfYdMMM5ncU97RCFf%2FL3fVukcdstFgwOXA0q%2BgRieVSAat5SU%2F8eUnPKLmBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462041bb256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 543\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":1373,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"288d0d8a3a52b128f2ff13ae12271b72","sha1":"2c86f270ee30a4e371bd5f640f15afb7f461ec9c","sha256":"ed7056cd01ca444344dd15379189fe9da0f6b500f0f1049d5442cee9fe6ea65e","sha512":"94241a324407df1338bd70491027c77848c26c43db1dcf50d493ed0dac66a91354d9fb9874118267bd7525c571cf70ebe6dade3c94f3428d216493ccf32d8aab","ssdeep":"","tlshash":"dcf07542e057e8eac0cd472e97156eb4f9b371a98213c00b013e5321042e6c4c066dc8","first_seen":"2025-07-16T11:11:00.937952Z","last_seen":"2026-09-05T10:01:03.377301Z","times_seen":123,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.useUserRecognitionSignal_RxakwPio.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.049Z","timestamp":1788602386049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.useUserRecognitionSignal_RxakwPio.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 404\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Sep 2026 16:24:10 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.useUserRecognitionSignal_RxakwPio.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0T%2Fyf2TabOe6z2GWe4vz5wjAbcW3%2BzUK9JoaDttdGcqguHvQD%2FWOotA39evLVVoiCODQ1zT6rgVeHG%2BLpZHCghP%2BnOgJBHzQxd9q3XJOS3gb%2FW46IEwTnZzVr%2FaFcDxxSQ%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 6e51f619-8cce-4803-bcf7-9b20cd564536-1788452650\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 149735\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a3646210cf6a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=117.245, imageryFetch;dur=116.814, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786,"size_decoded":1640,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (713)","md5":"9bb2b1add75087d2381ffb8a5340b624","sha1":"cbf46a6bdcf1bef2b299ef2cf1b328104e3c63cd","sha256":"bec2fe0c816367ac353b2ceb455e19eb9833f011d5948cff02df37e4d3a2c78c","sha512":"5ce99d5c093b5af62ae344b944e50118c5f1bbd53927458d69a1e5ea1d94f9d2c8d4bf0494f9a89e7b76ba0bbfdabbe0058fbcd2188c3526a983caa7260f2e73","ssdeep":"","tlshash":"7901415111fbb2f2c0b38c301443290651fc0abc56fc0388a76d8998595d2c7dd2ef85","first_seen":"2026-09-03T16:26:38.548274Z","last_seen":"2026-09-06T11:36:39.326288Z","times_seen":472,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.432Z","timestamp":1788602386432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14798638\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-14798637/14798638\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZyM21o6uvwni4wncTVzHZsW0rffLy32NwEUSXAQHJOs%2B74Hru0F2nZKYks6Bl9rrEHWvgvYuRlugtsYFayni6TspmdO01NzHGXzv1F%2Bq0o2yqiXKMwhG%2FtfHtmYZXw%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fc98f90a-099d-416c-8923-8ab843fc7d40-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e73569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=265.563, imageryFetch;dur=265.274, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1932590,"size_decoded":1934296,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a08b1a403cbfac47ee8b854c7b39e105","sha1":"52bc615666049705c8380595ea659213223489a8","sha256":"3de67846310eb5af7e15ad5177e58d128c44382d4b1b0ef740cd8884267c9d68","sha512":"23db8a57ac757bdf011f36f9387fb00970f89c3857c3e53f1b03e7c9e71360a4d32420a1de466d3e1f8d7f58728a2b0de021d739e6f2b9af09a637943fc37dda","ssdeep":"24576:SQrbS/aiaFSvSyT/i33NXgh8n205EDDjSx4vUIag:S+G/aiaWTLcNXgh8n25jeE","tlshash":"1625232a3b1910d3cb194fbc68f6478b7378e0a4db1a623b9ac12f585ed27ec81445d7","first_seen":"2026-09-05T10:01:03.334635Z","last_seen":"2026-09-05T10:01:03.334635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":514,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.740Z","timestamp":1788602383740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3e3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BG8RyaICwjuJ2GDYRXus8F9IIULECEu9rMQsii24184w3%2FN69D%2BxDRu1eeG7lxF6o5fAvbTvKnOYqDOVqLP%2BdKyUlk%2F9ewTWugzP4X8Hm61LZSqn4NcqlzBc9meiNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462025afb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 995\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":1828,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"88357f221018902dfe2c2ba99e7be742","sha1":"ac66cc54c8e51a9e8e7f56ee3bcc4dbf2e6325bc","sha256":"ecbe39f36db8ab47373cefdfd2a5cd1385609407b64b795868a4356c7326f479","sha512":"e2510d593805f90f18d618925abc9a739507bb5120720926f47bb6801eb9a5848e989aca090d83286466ae972c43d4c7303e4ba35bc9e0111a7258377498a19c","ssdeep":"","tlshash":"1c11d8416304393497b54192c80f9351bf79723495c00f511c99d402746860ac9cfb60","first_seen":"2025-08-29T01:16:58.618628Z","last_seen":"2026-09-05T10:01:03.379283Z","times_seen":99,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.003Z","timestamp":1788602384003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1ec\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2616020\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIChqJmZWrdoZN1AnLcAYmfsKac0ZJGJSqyz1hIaI7ag7IW8avKNveUag1C%2BXzwZFfcC%2BojzuG7Xy900c7gzBqIAQUamMUt0bvntYEJDUI9z1NcQIJdfaVszhu97Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462040ba756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492,"size_decoded":1320,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a49ae0019c9ac5ee12f9d6100c74d791","sha1":"604b81a9f16f3a95e5dcca12a7333acafd13eae1","sha256":"89190698de93265201c7999b33f00df09c680a45e62a84672dd18c980b419f0b","sha512":"0e97c4ce5a3d1c026b1609cc34b59eb37b445aee3e25bac82193949523dcb2b3ffd9b06d2833f71d3e1e1022236d7bebbf4cef540784b4ef65437af42758920f","ssdeep":"","tlshash":"f0f00eed6e84f4b68b9a8aa460d21232b52a2c2e2860269ac33585f4d0381f08184a61","first_seen":"2025-08-29T01:16:58.477798Z","last_seen":"2026-09-05T10:01:03.380346Z","times_seen":100,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.tracking.vaudit.com/track","fqdn":"pixel.tracking.vaudit.com","domain":"vaudit.com","tld":"com"},"ip":{"addr":"34.36.32.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.165Z","timestamp":1788602387165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.tracking.vaudit.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 08:28:08 GMT","end":"Tue, 24 Nov 2026 09:21:21 GMT"},"fingerprint":{"sha1":"FA:AC:BF:CB:C7:3D:A5:51:D9:D5:05:44:D4:D0:68:BE:F9:1A:DA:74","sha256":"67:AA:01:C6:47:A2:81:73:3B:A9:CD:9B:FE:B7:A3:77:C5:A9:08:8D:86:57:AE:B6:42:C8:80:C8:FB:B9:10:5C"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: pixel.tracking.vaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6788\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6788,"data":"{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"platform\":\"Linux x86_64\",\"screenWidth\":1280,\"screenHeight\":1024,\"colorDepth\":24,\"pixelDepth\":24,\"timezoneOffset\":0,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"currentUrl\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"previousUrl\":\"\",\"mimeTypes\":[\"application/pdf\",\"text/pdf\"],\"touchSupport\":false,\"hardwareConcurrency\":8,\"deviceMemory\":null,\"siteIdentifier\":\"1f19779e-104b-6d60-ad5b-fa027f11be6b\",\"timestamp\":1788602387116,\"sessionKey\":\"cc4e96f0-bfa4-4d5c-ac6f-b735b0f96c53\",\"thirdPartyIntegrationInfo\":{\"verisoulSessionId\":null},\"fbp\":null,\"fbc\":null,\"ttp\":null,\"selector\":null,\"canvasFingerprint\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAASwAAACWCAYAAABkW7XSAAAQuElEQVR4Xu3cC3xU1bXH8TVDXoCALYSHoCKoVOVRA1JQXjeoFwkPsValykPJzCRaKhWkvRdbqXrRVq4iWDNnZgjYCnoNt6BQq1UKBdQSCIKgoJioiKK2gcgr5DEzXTMkICQiuNNtoj8+n3xgHmetfb5n5v/ZZ59DXMIfBBBAoIEIuBrIOBlmHQpEvRKtw3INppQrIHzeG8zRqn2gHMAGfgC/yvAJrK+ixjb1QYDAqg9HwfIYCCzL4LSrMwECq84oG04hAqvhHCtGeqwAgfUt/EQQWN/Cg/4N2WUC6xtyIE9lNwisU9HivfVJgMCqT0fD0lgILEvQtKlzAQKrzknrf0ECq/4fI0ZYuwCB9S38ZBBY38KD/g3ZZQLrG3IgT2U3CKxT0eK99UmAwKpPR8PSWAgsS9C0qXMBAqvOSet/QQKr/h8jRsgaFp+BKgECi49CQxVghtVQj5zBuAksAzw2/VoFjgaWz99DIq654or2kKjrY5HoCxLMyoyPzuO/XcR1q/5f9/P1+S0SkRkSynryhCOfEPquNAo/p78X4GKRiE+C2fPF60zV7X1av5EEfR2/1j0/mea17cPx21W/RyRN92usBL1PnUzpr/M9BNbXqU9vE4GaMyyv/58aMg9oWM08pnBmziBxu1dIuNF5MjfznZNu6vXvlGj0rnhgxf54nUytr48bQGBV7+Tx+1DbznscDXnXJALrpD8Z1t/Ir5exTl7nDWsEVvPJ9+7u3/+JLWe0f2u32yV7tOMGp5fMEQ2ssztuXjFwwO+fbNxkf7NoVN7XedLTTpqsOtGokm6b9eGQq+a83q5tYam45XeO3znn3M5rZ6QPzn1Gg8sduEQm1Ple1XHBGvuQJsuPb5F468OfZGTMyW/dpqjSFZGHnd4ndqnjIZ5SOWZYp8TFm+uRwBfOsLy+rIujLlkU7CmL4+OtmmEN6Lcg44ILV2Xrb4DzBnrJLp0x+WLzJv35TH8S9bToNzrLWHZkH6tmJ15P9iBXgvwhFlixGZbX54v9Grnr44E1IecyaeR+QE8XG+n2TfXUc7GcsesemT49UsPK479VZzL36ntir/1RAj6fxE/LKj/R5zvr4x06pslaa4rWKpaSA5dI3h2lVTO723Sbg7ptikSi9+tp7aJ4fY+zUp8bqDPBF/TRs1rnV/q4jf77Z1pvlhy/D7PnFUhieUhPn9O1R5Fu94C4XI/GZljeLO9QV1hCBFY9+pRXDYUZVv07Jqc6IrPACvr76hf2UXFHvi/+7E/FE7hIXJECiTS6TEKegvhgviywnODduv1b+s4bNRyWyI2zm0vTpFf1y79AH8+odYc8/ligXC2BrLTDgZNzo7jcT2hw3Kanso8d7uu8IAfKfiQLfrpXfP5r4utzUXeajuvd+Dglul4ikctlbvbLVe+fqQE6Wp+fLQfLc6RJ0i80hD6tNbBy/Ddr/y5SmZguuRP2SaZznz7WkHTdTGCd6kfQ3vsJLHvW/65OtQeWiPuKy52koqK0g4WFvQ9WNU+JzTqOmWEFnGUaEn/VkLjTVyBDIlEZsu3N/iOTkg7t69Rl3YTgxbLuSwMr4C/RL/oIXdM6L7NALnBHZPzOj77Xa29Jm/7f67LmltDz4YUyPT6bOvrH66SddebmgvT04JKkxLKDGzdd1SU/f+QnyckHE8aOu6P0jTfSJ7/yynWPeiZkBVxuGfX29j5DVq/58dLwYz+d4F0vV2qhjLff7nOVTtKSOp2Xf+PcS+RlDbiZffvkebp3fyl2iruhdH+zjYkph65PSKho+pcXvX3fLbp4SmyWuLu4w7OLFt+Vp/s9dsxPspc0rpCJ4cqEXm9uHfjDgwea3/2DvovPZYb17/q4mtUlsMz86sPWZjMsxynS06KPO7TfeuCCC//WZvWqMe8dKmva4jstdr173fW/PlDpkqlzHf/K2KL7F54SBp0OOquJeL1ZY3SG44+4ZWbIH2iVkFi2dPQN0xakpOx9Nthbnq6B5XE+vLTv/z130UUrS4NzH7tQI23OGe3ffjoj45Hlmzemb/77+ms/1NnRbG++3JM7b86dlZWJ0z2erNW67jYxUiGTQrnOnc1O+8dNo0ff9bL2vCvkOLG1tDSPx/eEyyUDom5ZqmtRf9YQvnb5S96HqgPrrW2XbvjbmnGP6Hv7eL2+fjrm9nsqZFrePGfnoEHznzz//FfbuaLySH0+JawPHzzGgMBXEThhYMUWxbVofIa1b2+rth/t6jK04zmblqQk70+oOCS+3MedQg2bezy+rDa6QL/J6SnzqgfhXSf36Rf/H07Af+cJAyvgP1NnbuFMT9YibdZb17R8eso2TINw6fChM7Paddg+eE+RjM67TsLH7KDHH2jZcmfnoVfNabxk6ZRV+/a2vuf73Z//7KyzXs8r2duu66qV40aOmej5NKVMpgaD8dsppus422mNwmDsIoLOqPS5G7yerBx9LjEQdE7TcXb1eLOeVpR+uj43QccVHb9CUhYumlVYXp48LRa6297q99qq1WNmtW1VmD5i1G8n6dTv4dAlslLXwYqbNi6+46ax/32thueDBNZX+TiyDQInFjCbYcVOCSW6Sb/0LTSc9uhCfMnu4vZnl5U3ad6u7fb3tPWOQNCf/SWBVaLBMNybmfVUbCFdA2t6/L4vl9w3fuzEK5JTKqZVuDUc0+SjYwMrMELXy57KGDrrg7Ly0+ZUpq73hz/ot23Hjm5bu3Zd0Te1xbYOyS2kt4ZuC8dxpuskrsDrzW6py/oLg2ny/xpYejEhmqKzrrzYjCoQcPR2jiOB1VnHMe1Iv8+tw1WfEnbunP+LywfnDqiIypTcWbN3SdPkz3Q9b7TH6x3h1pkigcVXD4G6FzALrNiieyQ6f9z4ya/q+lEo8Njc5yWhUq+4RX8mTtbh2x1OctF95MjfLm3TunBbIGfu/+oVv1c1sBZ6sn0vusPyqyNXJD+//16niYZRcfceL5b26bPo4YhLnnlzc/qktWtHjRkxYmZhaur743S7/tFK+UNonv8yDazQ+LF3rE1scigUdPxbddv1Eo5e4cnK7qKncAMCoaOBpbPFs/VWjrtrC6z4lU5ddE9N3dHj6qt/84FEw5OCIf8tug43RX9uIrDq/kNKRQSqBY4GVmawu16tC+iso6d+8T4aPmxmedv226fGb2vw+Cfqc9kaIhektnpv2xWXBw6e1rx4WPy2Bk+OZ8CAJ+4/cOD0koINwz/UK3E5sZsnR/zpnAGbX7/SebcorZMG2M5RIx8ofqew98bNW9IH60ykwzmdNhQN/o9QfqhPeJzOdvp16/aXea1T32+2fLlHb0+ILpH2H//akzF9mM5+bqr1lDC2Bx7nuY4dN5ZdeWVOWN/31y1bB25+efWPV/3wmntzW7Xa+breK3aGzpR+Ht/Zw+P8n/37W+7b8FqGLvTrzbEBX56euk4rfKfXkOUrPJ31uSbdur1U3L3bi8sWDCq5/fDtElV361ftQ+t27/2Xo7c1NG7+z/kDBz4+9I03B+34YEfXh2K3QiQmHNp/zTUzSk9v8cltzLD4kiFQ9wJf+H8J9WragmPuw6rqrc93041mfH7W48mXS91uuT1cKZNDfWTnj16Rxqcnyf26YB3SK3Bb4hOtfJkfn51U3XQZv1pXfR9W7PX10iq26K6h+KAG4dpYje8kyoMaOqtqXXSvGs/E7ZJcViIL9eFn1etOWitDt/PoovniwA/k8Wq22Dg12Ca6y+V2nXN9qu87S3s+pIvuvwz1lK3xXFsnt9SYYVXve819mHxk0f1SKdV649RmlK5hPURg1f2HlYoI1AisrNekYyQsP9Ev/Ln64m5ddi8I9JTfxb/MBTJMT5+G6vNnamAV6WnYIv2ir46/tlb+U28hGK7P79dQiMausMW+tLeskWYJKXK3btNJXyvWEFum/07Q9wzRv1vG6uwpl1/m6Rfet0Eu1L7j9EfzT5L1tb8HlslTNW5rOO64eQv09C0ixTqb0ps3RW7eIKlJEckNV8jUUN/DQXQktGLjbCRDNWjKNJCTdAyLNOjWxF7PXCdjdVyDdR+TNTh3lkdk5vze8nFt+6AL7c+M2SRNY7c1aK0esQsM+vfzenXxBh1Laewqo85Oj95Ay2cNAQSMBfhtDcaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxAIFlTEgBBBCwJUBg2ZKmDwIIGAsQWMaEFEAAAVsCBJYtafoggICxwL8AXGtV4s+GMlEAAAAQZGVCRzU5NkQ3MEQ4RTNDOTMyOUNVSzSyAAAAAElFTkSuQmCC\",\"event\":\"sessionStart\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\nset-cookie: vid=1f1a9108-70eb-6c35-9c0b-5c904545878a; Max-Age=2628000; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-cloud-trace-context: 216d35e3824b55991dffdb624fe1883c\r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\nserver: Google Frontend\r\ncontent-length: 42\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"1f1a9108-70eb-6c35-9c0b-5c904545878a","quoted":false,"path":"/","max_age":2628000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"vid=1f1a9108-70eb-6c35-9c0b-5c904545878a; Max-Age=2628000; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/portable-wallets/latest/accelerated-checkout-backwards-compat.css","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.070Z","timestamp":1788602383070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shopifycloud/portable-wallets/latest/accelerated-checkout-backwards-compat.css HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/css\r\ncontent-length: 1605\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2koDCy5YhXVTMbiqksTwR%2BFjo3oZIE2hva4S3WsjC%2F5fb%2FoOQ46ESOaZkW8zWbbiHnJO60RnnmrnzppZuV4kmUgsZDTc4DA135GhK1GToEISktFtMdXVH4J2ZAedGccWqg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, stale-while-revalidate=900\r\nlast-modified: Sat, 05 Sep 2026 09:56:39 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/portable-wallets/latest/accelerated-checkout-backwards-compat.css\u003e; rel=\"canonical\"\r\nserver-timing: imagery;dur=29.385, imageryFetch;dur=28.593\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 8d7071a5-9808-46cf-9d9c-2719b360adf9-1788602199\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\nage: 183\r\ncf-cache-status: HIT\r\ncf-ray: a36461fe3efc569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13728,"size_decoded":2893,"mime_type":"text/css","magic":"ASCII text, with very long lines (13727)","md5":"dce5005e18d25f14ed983cf38616be1d","sha1":"8fccff6a37dcdc84860cabc4bb3de662edd6b6ab","sha256":"2be67d829931067051705cabc083afb8507f2ba111f8825e7f3cd551ad41b88d","sha512":"ecea0dcd86938dbeec1873eaf231c2fc14d08a8b83da89eb32f5f6738edd7be7cdaa56ee146cc96b9e70895f78c4457eb729d60f7ebddf5e9bd836c7c01a0fe5","ssdeep":"192:5vsTYhGkpPIvM1GJ5Z4Iiw+p5Z4g+nAYP66lU6iNW6lP6b6lH6z6lb6z6lf6L6l/:t++9+R9iNxcOcmgm0+QwoHCMoJ3","tlshash":"475299b5dba973fcdae347080142d5f4e7665a438b28a5f457d3a2a482c4ad22ccf44f","first_seen":"2026-08-07T20:35:02.541267Z","last_seen":"2026-09-06T13:16:07.530339Z","times_seen":5523,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.831Z","timestamp":1788602383831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-173\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1632644\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bguk7Zch%2BeWifHcUuc%2Fjp6otcAHzeSW9TwrCtCtJSJtZ3NUUArS2NMGHY%2F%2FcVWXBzg2kJpn%2BNjqaCFg%2FpXXe55edjjmSkZLMUk55W05QX9M7opPSRgynzYQbMPqTGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202fb3956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371,"size_decoded":1207,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"ac63e2e0be1360a07618d5cc93570dff","sha1":"cf698e6a85b871d4a83eb99f764bc52f8354b07f","sha256":"5c473e39d266eb711ee7276826dc71510efbeb053498eba2ed7a51649ccfee8e","sha512":"e8ab1a6c2450ff0026785d9aa805a77c56b3fbd90d26b5abe51fc9d0997de254e3c2154d5888998cb7deea362103b5dc90139c68a40b346ff4a244d3991c0eed","ssdeep":"","tlshash":"0ce0608a21d0ee6cc8dc3b2ac08e002adb637321022200388007d400317f78edec0a8f","first_seen":"2025-08-29T01:16:58.695811Z","last_seen":"2026-09-05T10:01:03.382014Z","times_seen":98,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/jp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.863Z","timestamp":1788602383863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/jp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-161\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374726\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uqp4%2BrJtL80%2Bw7wGk%2Fc%2FazaEHe9nLSP0JDQq6d6G7VpCEHyVlzJORDZ3r81r1kqpK%2Bwx6SBGjwjQTrZUcq0zEA4XUVk5wocAMBFjdrAySJag132D5mngIMH62vtQdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 353\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353,"size_decoded":1186,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"d1ed74a8462d06dd171b8a707e393b74","sha1":"5434c626702c81f9b62d5fe7263c0f74a2a8ad19","sha256":"25c1ac6db4fa0b5e6b79b4efe546683c8589cf060f5f848b27be02944fad8114","sha512":"df2ea748a8ea7730e638eb907c6e7b0fe78c74d7e7b2c72a2a28039a6baf0ec4c47502c61f088f1080bfc50c8dabb3d133bb891a57e7da2acdd760206ec076b6","ssdeep":"","tlshash":"10e02dca2aec1c14f18e0cf3d80c8365712d0be8438871a4096ae32d5019000f8ecabf","first_seen":"2024-08-19T15:25:37.907642Z","last_seen":"2026-09-05T10:01:03.383071Z","times_seen":224,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/nu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.966Z","timestamp":1788602383966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/nu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-22d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2623194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7j7%2BmK5gE3wx4umReb1l4H69SpG21FkbtnxhvipqLXRbhj3s1RGW2UW3LIII0U6eapPT%2BHcMRa5g3BC5ZzBb2U5TIqlpboUhgld0Trpd2zLWR6F95Nd9%2F4ewblEig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 557\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":1387,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"eae8d3794ab8d754d762533518ac052c","sha1":"2ce1692ecce2ab837dd0c73c06b07e858021b886","sha256":"4a0956a9f819ae57568cfac496a355c28bc9a8cbba8148368c5e6ba62c732c81","sha512":"01e4726ca2abb18ff02a6574e0c7ad4e23881180bf6718e79c11df8be52e9bca6d1ed8355ce6f399dc633a447b2e73c31d0997b21cb7ad80c8c67d0815ac0aab","ssdeep":"","tlshash":"58f0208f766c9e0b9d56b8308524720a6992e0a854a116360e8916fef6670acc0c499e","first_seen":"2025-08-29T01:16:58.671226Z","last_seen":"2026-09-05T10:01:03.383552Z","times_seen":98,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/fonts/plus_jakarta_sans/plusjakartasans_i4.c6dbba2f9689ea7d14727f19e62be404de792e1f.woff2","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.850Z","timestamp":1788602385850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/fonts/plus_jakarta_sans/plusjakartasans_i4.c6dbba2f9689ea7d14727f19e62be404de792e1f.woff2 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14108\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IoaQaHl5UVzY0fP0OtLwXRSiP9y3DVzgpI1Uz71YKvLbjNebEv3LJVbR14zYKM9wBKNLSH1ungkCRvI2OkDx3bVkRcfbkSFQ63Yt4eCVq%2B4LJzXRJRSrL5yVgwIkh9wqmALKLmHb\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 17 Aug 2026 22:31:54 GMT\r\nage: 1946635\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-fonts\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 9987972c-d965-448c-a5da-a1d4a752f787-1786655750\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a364620f9a76569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=147.614, imageryFetch;dur=147.223, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14108,"size_decoded":15581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14108, version 2.4653","md5":"84df9261530511a77331200d602e9e8e","sha1":"c6dbba2f9689ea7d14727f19e62be404de792e1f","sha256":"1335c57e0fdda9a58b2a778f32cb5a3ea0b92c0ffca22b457af83454316f00d3","sha512":"de55dad0490a58401b7bf1d5f4a00f165426ca198d9a6fda65fed58418d9048dcd226d5e7dbbed5cf123d074bb7270d1efd4638bbae9227533b98094781b945f","ssdeep":"384:maAcaxFZGgoGq7jgE9taMxegFy/8ZqiVCqBIQ8vJXrGM:4xzGFGqPBKet3ZqWMdvNr","tlshash":"cc52c00e5407da32db81b3bd668314752195add1add386eb31eabd8c693095ec8139b0","first_seen":"2025-11-02T23:23:19.786239Z","last_seen":"2026-09-05T10:01:03.384467Z","times_seen":26,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.index_Jmvh7d10.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.034Z","timestamp":1788602386034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.index_Jmvh7d10.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 21172\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Sep 2026 16:24:10 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.index_Jmvh7d10.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjIw8C%2FSAzG3tOdEbvuJnVxUeejKid%2BQ1%2BBcQ5AqAjsW8TXt95lr2Vg5CqSbZjOiy2RuX80tGVOYYOZhz%2Fz%2FUQ%2BkUv33SSn8nsZL72WZSD4%2Fk1U%2Fm2eK9tRdQRSl9Ai%2FWg%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 4d88865d-4688-455a-85ce-34f0757ed84d-1788452650\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 149735\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf4d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=90.793, imageryFetch;dur=57.973, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74031,"size_decoded":22387,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"4963f90c9c75ef084ac7c38c346a1131","sha1":"a63e014815bf34aaed228085d9afda7ca26c7d71","sha256":"eb6544e30996603840d99c7c994efb93101eeef5096c59025d5a41deb5576375","sha512":"d89b8235c56c9f2bfb25cb6dc1e0f9b5b2447d2efcc8837c8839253c8742dba9fc60b8d21f3152019ac4164ee3e987f88a014eb1158c439e0ec72afe7b88bdc1","ssdeep":"1536:sJs7ZRNT8P7UQoB/jUslW+6BC0jSnb5p1k9vO:Ks9RmHgW+6JjSnb5p1kM","tlshash":"e8735b54b371a03a1d9344f5817b6009f33a75c8bd2fc0e4fa5869d22de42da5ab7b2c","first_seen":"2026-09-03T16:26:38.553092Z","last_seen":"2026-09-06T11:36:39.276862Z","times_seen":476,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/td.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.276Z","timestamp":1788602386276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/td.js HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pB4M8CANLlPYmx%2BrKUgtvz76Ju3E2mCWzi9oAfcXNPdqAiHXUSazasZoaGcYv3N%2FfHOm2wHDYTMyHJwkFynMTWGIb7Lf%2Fq70Gm6Y8oKoG2gsZsAqD2B58IUgZQ01ChwT1F71Y6l4Q%3D%3D\"}]}\r\nlast-modified: Wed, 10 Dec 2025 04:32:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 1860\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"22dc7c9384ff96e6f36aa40353299281\"\r\ncontent-encoding: zstd\r\ncf-ray: a3646212387d56be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62696,"size_decoded":18951,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62696), with no line terminators","md5":"22dc7c9384ff96e6f36aa40353299281","sha1":"dc8e02a9a613cd1b551368c06b18e994e9eaff3e","sha256":"68f8c0759ea3c45f7ff42a8766acb14e1b875adef61da371d7ad7412610a792c","sha512":"fa776b4c23d88eb6fde458cb432e36ca201e40099463b3b210021daa4d3b00d87401ca40db7bde3e013449a3d842f09106e25b6a2ae62ee98bf103fbfff5ff3b","ssdeep":"768:HLo4wxEg05/WN6OpMqKtiIdFkABzZICFYaDFV6hwQMPpOqOPo+a1cAQUVKmqzUBd:HLexEzLDFdDHjgzPCmZ4CjdIZ","tlshash":"a653c6443ad02585238797bb772ba0c5e92b0e5e39858c4bf7147e50b59163bfbf2a30","first_seen":"2025-12-17T19:23:49.324882Z","last_seen":"2026-09-05T10:01:03.386029Z","times_seen":32,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.tracking.vaudit.com/track","fqdn":"pixel.tracking.vaudit.com","domain":"vaudit.com","tld":"com"},"ip":{"addr":"34.36.32.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.161Z","timestamp":1788602387161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.tracking.vaudit.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 08:28:08 GMT","end":"Tue, 24 Nov 2026 09:21:21 GMT"},"fingerprint":{"sha1":"FA:AC:BF:CB:C7:3D:A5:51:D9:D5:05:44:D4:D0:68:BE:F9:1A:DA:74","sha256":"67:AA:01:C6:47:A2:81:73:3B:A9:CD:9B:FE:B7:A3:77:C5:A9:08:8D:86:57:AE:B6:42:C8:80:C8:FB:B9:10:5C"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: pixel.tracking.vaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 6759\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6759,"data":"{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"platform\":\"Linux x86_64\",\"screenWidth\":1280,\"screenHeight\":1024,\"colorDepth\":24,\"pixelDepth\":24,\"timezoneOffset\":0,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"currentUrl\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"previousUrl\":\"\",\"mimeTypes\":[\"application/pdf\",\"text/pdf\"],\"touchSupport\":false,\"hardwareConcurrency\":8,\"deviceMemory\":null,\"siteIdentifier\":\"1f19779e-104b-6d60-ad5b-fa027f11be6b\",\"timestamp\":1788602387111,\"sessionKey\":null,\"thirdPartyIntegrationInfo\":{\"verisoulSessionId\":null},\"fbp\":null,\"fbc\":null,\"ttp\":null,\"selector\":null,\"canvasFingerprint\":\"data:image/png;base64,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\",\"event\":\"SessionKeyCreated\"}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\nset-cookie: vid=1f1a9108-70f3-6f91-985e-030872b8a0ce; Max-Age=2628000; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-cloud-trace-context: 51dcba7dbada58bd1dffdb624fe1810f\r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\nserver: Google Frontend\r\ncontent-length: 42\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"vid","value":"1f1a9108-70f3-6f91-985e-030872b8a0ce","quoted":false,"path":"/","max_age":2628000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"vid=1f1a9108-70f3-6f91-985e-030872b8a0ce; Max-Age=2628000; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tryrovina.com/KIT53949","fqdn":"www.tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T09:59:42.633Z","timestamp":1788602382633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 09:24:35 GMT","end":"Sun, 25 Oct 2026 09:24:34 GMT"},"fingerprint":{"sha1":"D4:F3:E4:66:E2:26:D1:B9:76:97:1E:48:52:5D:FA:A1:EC:23:27:37","sha256":"B5:EB:98:56:5D:BA:E5:D6:BB:ED:6B:64:30:D9:29:19:CF:D1:83:DB:FD:70:57:58:57:B3:59:BF:CB:8C:5C:75"}}},"request":{"raw":"GET /KIT53949 HTTP/1.1\r\nHost: www.tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sat, 05 Sep 2026 09:59:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://www.tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nx-download-options: noopen\r\nx-redirect-reason: combined_host_and_shop_redirect\r\nshopify-complexity-score: 180\r\nshopify-complexity-score-v2: 18\r\nset-cookie: _shopify_essential=:AaBxAnmDAAEA9tm9dpvGyafmM171ppXoC2TfjD7tQVNjiDwSE-9paoF-LDy5ef5NxV-nI1ZezGDLxQdMu-JqlGGiY8HZhJCNVjONvJ90Ha1yBlXQAnjVR5X6a_Um1fHdKUPNBrye6GgctMLyh_M0K9Gh9XZMSCgbQYxVFatNc92EwzrmGyuPZhmyv6J1tKJ_DkqZDjf7t11C0AqGaTBJLQGp6NYAxkgIU80GhauwPVZLppgrSj_ezV2y_42PRXB0SC9wojVOTidDyyvncOwuuMINB1Sclekx7lipLpz9UsQnGDGmIxvC9FLC_w3r0qsB0D2Uh-F7TJyBtTtXbzmG7I6OKh_-gk7WCYHwMbraV7VpIVpIoqTt8AbcUJgosKoQEM40a7rQsby_gMetFUneRcb4mtFTsnCErnsS:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax\r\nx-frame-options: DENY\r\ncontent-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;\r\nstrict-transport-security: max-age=7889238\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRJBMkq1OVBEGxaRF2z%2F%2B%2FguFiynKzwivuBAjlEeXRFrcBZ3INZZAXHCXM8mqhOwaYFO2u8C21KV0OKSj9AmjEg02IGrn%2F7RuUDDaP0QhjsL2RxLTVsj5YFehJOiFyqFS62%2F\"}]}\r\nvary: Accept\r\ncdn-cache-control: no-cache, no-store\r\ncache-control: private, no-store\r\npowered-by: Shopify\r\nserver-timing: processing;dur=23;desc=\"gc:3\", db;dur=5, db_async;dur=1.033, asn;desc=\"50304\", edge;desc=\"OSL\", country;desc=\"NO\", pageType;desc=\"404\", servedBy;desc=\"x2h7\", requestID;desc=\"ee8bb8bc-47bd-4972-8f41-605ce4f14cc4-1788602382\", _y;desc=\"00000000-0000-0000-5000-000000000000\", _s;desc=\"00000000-0000-0000-5000-000000000000\", _cmp;desc=\"3s.amp_NO02_t_f_yBM4FL2ETPGolZ*wpodFgQ\"\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-europe-west4,gcp-europe-west1,gcp-europe-west1\r\nx-request-id: ee8bb8bc-47bd-4972-8f41-605ce4f14cc4-1788602382\r\ncf-ray: a36461fb9d3f0b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"_shopify_essential","value":":AaBxAnmDAAEA9tm9dpvGyafmM171ppXoC2TfjD7tQVNjiDwSE-9paoF-LDy5ef5NxV-nI1ZezGDLxQdMu-JqlGGiY8HZhJCNVjONvJ90Ha1yBlXQAnjVR5X6a_Um1fHdKUPNBrye6GgctMLyh_M0K9Gh9XZMSCgbQYxVFatNc92EwzrmGyuPZhmyv6J1tKJ_DkqZDjf7t11C0AqGaTBJLQGp6NYAxkgIU80GhauwPVZLppgrSj_ezV2y_42PRXB0SC9wojVOTidDyyvncOwuuMINB1Sclekx7lipLpz9UsQnGDGmIxvC9FLC_w3r0qsB0D2Uh-F7TJyBtTtXbzmG7I6OKh_-gk7WCYHwMbraV7VpIVpIoqTt8AbcUJgosKoQEM40a7rQsby_gMetFUneRcb4mtFTsnCErnsS:","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_shopify_essential=:AaBxAnmDAAEA9tm9dpvGyafmM171ppXoC2TfjD7tQVNjiDwSE-9paoF-LDy5ef5NxV-nI1ZezGDLxQdMu-JqlGGiY8HZhJCNVjONvJ90Ha1yBlXQAnjVR5X6a_Um1fHdKUPNBrye6GgctMLyh_M0K9Gh9XZMSCgbQYxVFatNc92EwzrmGyuPZhmyv6J1tKJ_DkqZDjf7t11C0AqGaTBJLQGp6NYAxkgIU80GhauwPVZLppgrSj_ezV2y_42PRXB0SC9wojVOTidDyyvncOwuuMINB1Sclekx7lipLpz9UsQnGDGmIxvC9FLC_w3r0qsB0D2Uh-F7TJyBtTtXbzmG7I6OKh_-gk7WCYHwMbraV7VpIVpIoqTt8AbcUJgosKoQEM40a7rQsby_gMetFUneRcb4mtFTsnCErnsS:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":165,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8.4.7/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.737Z","timestamp":1788602383737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@8.4.7/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"2315a-9NyNRghnOcWBIRhbLQ9OGQcQ8Rs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\nage: 3749285\r\nx-served-by: cache-fra-etou8220123-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143706,"size_decoded":41455,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-09-06T13:02:48.967815Z","times_seen":15373,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":9,"receive":9,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ss.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.019Z","timestamp":1788602384019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ss.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSEC8GyjuSbY55lPskhyAHx3onOIkohti%2FciId30D3ePZ8g452ZAo0Gz3OPRR5WiyDMX7b7%2BqgV6eXvzqHW3radtKiybgWwVLT6LL509lEUp%2B1%2FNIaLmqkIMwLSaWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462041bb556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 437\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":437,"size_decoded":1268,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"c4cb41a61a937c68c42cb90d01e3d04e","sha1":"e8dfe964857711e384c5f3e542c3297fa375fa03","sha256":"6376d90a2aa369425c03228da8df161e9c3c20616a4ff6ff0e7cd528388881f8","sha512":"bddae607a005bcf1b6b8dc01e6c896e5208a6a3c4bf0d67b1062d16d32181470606ec4762f6254a05c508d06e174beb1b525fd4acdc5f1f6ce35b5fe082e51aa","ssdeep":"","tlshash":"d2e02bce6f583e28e9c2caaa42ee8328f127913ee93221e220474a88411120ac489102","first_seen":"2025-08-29T01:16:58.663047Z","last_seen":"2026-09-05T10:01:03.387085Z","times_seen":96,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.070Z","timestamp":1788602384070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-167\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591670\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NTbwP%2BSnc7DHA2ogQUUEuO3UHINvQwkRbsoju2zsDRWj6QViiMboBShOOXaEMAy4%2B6Ce4BQ2SYujdv8rfxedGdKGqcSz9AibWdnzeyFDvkpN%2BGRfHbzeqwyA7fMrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462047bc656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 359\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":1188,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"e64f350ac8521b14ff8d2e7b902988ac","sha1":"1830db5b236b6cbf6d5e9159de3729fb65a56231","sha256":"e4b9328efec9ce9646e8b45a44867bb2309b640e0cb428c6da3d029bf640a67d","sha512":"7c0bd984cfb3b06f14f78625d1e6a7d6989ce713d555327558f637c738a79eb3a61c3b7acb86708682b84dab5171bf3a900353aee3402b19e9d0d81a862306b2","ssdeep":"","tlshash":"08e026e12966ef6cdc984d3d05634608ad7046d70e128399a2a6612a5e9462ae0c5ba8","first_seen":"2025-08-29T01:16:58.53849Z","last_seen":"2026-09-05T10:01:03.388138Z","times_seen":115,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/Artboard_1_copy_12.png?v=1769792089\u0026width=500","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.158Z","timestamp":1788602384158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/Artboard_1_copy_12.png?v=1769792089\u0026width=500 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/avif\r\ncontent-length: 5700\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sun, 30 Aug 2026 11:12:00 GMT\r\nage: 4743230\r\nsource-length: 13759\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07SgLfTC87I%2FMhdp5vZfGkRy0OL86aieOD0u%2BTG1CA0FO%2BX3RvfUbfOGLprxng6n15t61PfRd%2FXFfJvnSvfl85iSvINME4fVnr0NL9FfcFk5kMJVpgKWqr83TfPJumg%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: b64bddbc-fd9b-45c7-a9ff-521045a8fda3-1783859153\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncf-ray: a3646204f8b7569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=215.987, imageryFetch;dur=102.421, imageryProcess;dur=112.938;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5700,"size_decoded":6931,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ba2f982de1e666062640fde5ced7f78e","sha1":"5102b90e8a76a31a6fbb80e37ae6cb242c7d8bed","sha256":"b1457eef6ab37ce94579aaedcbce83f3ddf0696363fb76bb0b70b5843cf2b351","sha512":"f8a1f3f56c89d6eca360ed3c670b0f548244c8be6429538223a8b8b07a6e988eb6c3a275d15d635cd5463334aad6be10adf594ec17dc74ee793ce1295cfefd5c","ssdeep":"96:rG073v+Il/Xy375BGkLwrjbZA+P2iFRq1SHApIl+D3eSnkowZ5mlTP5hjmqxPDZ8:rGi3tyr5UkS3ZA+PTFRq1EApImLwZC/2","tlshash":"fcc19e6057f59f90e07403705481c362a21b2437122d5b6b73c8f1239e3ce97056b8ee","first_seen":"2026-09-05T10:01:03.389176Z","last_seen":"2026-09-05T10:01:03.389176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.zigpoll.com/consent-policy?shop=igkqfc-ff.myshopify.com","fqdn":"api.zigpoll.com","domain":"zigpoll.com","tld":"com"},"ip":{"addr":"172.66.41.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.955Z","timestamp":1788602386955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zigpoll.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 23:40:43 GMT","end":"Thu, 03 Dec 2026 00:40:33 GMT"},"fingerprint":{"sha1":"62:28:93:82:80:D8:09:D9:61:8B:9B:60:17:E3:86:C0:64:A1:32:21","sha256":"D4:25:B9:46:F0:5B:5B:E7:34:A9:E9:7B:00:F3:17:EC:A4:E3:BB:6B:62:FC:E0:33:FC:80:B3:F7:6D:9C:E3:15"}}},"request":{"raw":"GET /consent-policy?shop=igkqfc-ff.myshopify.com HTTP/1.1\r\nHost: api.zigpoll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://tryrovina.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, sentry-trace, baggage\r\ncache-control: public, max-age=300\r\netag: W/\"12-KaWluLOBkRswYHiyQ10uFefVHE0\"\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a3646216ef23b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":625,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"139093397f473bfa24bd51ca3887298a","sha1":"29a5a5b8b381911b306078b2435d2e15e7d51c4d","sha256":"256d11c929353e98fa5d139940d928141bdeb1d50ccb013e80e57ebc3f740d6e","sha512":"f7bce7c9ee21f2b824bcc1848e347048d3148738a192339b1e5757827e923abefec860e7fb30772b00d70c9472cb6bc2a30a4cb29b57992a8526317398347a8d","ssdeep":"","tlshash":"607000f3c03c0c0c03000c0c030c00030330000c00c000300f0c003c000c0300fc0c33","first_seen":"2026-08-25T07:37:48.788398Z","last_seen":"2026-09-05T10:01:03.390024Z","times_seen":5,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":21,"connect":37,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.716Z","timestamp":1788602383716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-15d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2624870\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ejt%2B2v%2FSJjqaVrd9ftmcKkqFSOgJ8ZroU%2BfAXiI7FYYZiVpAilLlSkEyC%2F2IUb0Wy1YjwCQr23%2BlwjzAETOKT%2FLg0Ua20ClzC1ZRoH%2FBW4Q9WboC3tZ61IgCVoObwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462023aed56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 349\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349,"size_decoded":1187,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"605aa9ab9c300211c827ec456c6ef98a","sha1":"452951895285c5d6840234189767d30b785c6f29","sha256":"c97a495042dfac56e2730342e3b1a36532d7d2b945b85327179396437f552f4b","sha512":"071efdf0f1638c9d21541c15fb5cebae66e5bd7ee0ef50039061e45ea7cac9df48277535c64193d93cdbdcab4656dbac51717d0999831e238583348f2ff3533a","ssdeep":"","tlshash":"b5e0c0fb0711bfe9c68e2e6702565122517d9b009664593e9402dc49b451091e4e4a62","first_seen":"2025-08-29T01:16:58.71089Z","last_seen":"2026-09-05T10:01:03.390525Z","times_seen":101,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.727Z","timestamp":1788602383727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-43e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2603368\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MssJN2Kxtlgxh%2FxMHsx0HCm0okFBR0baq9joDDQBAUJxrx8BdTs8v7a8caiV%2FMjNaz2mQevCpBhVkeZFtXkJcHDG%2Fhx9XG0%2B6%2BPsGupXIcDc5e%2ByxEESqHvMZG8Nyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462024af356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1923,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"322b8f5220446595d197f09f6c6a2429","sha1":"d8c3e42c90e8f5f413b623c8452251eca9f57ef3","sha256":"63dccb63daacb94c036cbed9cef2df2486128af9549b0e9a14c27acbfb9495e5","sha512":"291dc5e48581b34785227d9f7bb8cca8f023a864fc5fe8a8ffc0280817b766b57f3bb3a963d2a6a043f2834aacc6e8b7cbc85311252dee8f6bb58d313973f66c","ssdeep":"","tlshash":"a811e9d1db219b3867886c313a09c938d49ac4a3c45d2733126a5f300266c8245ed792","first_seen":"2025-08-29T01:16:58.594672Z","last_seen":"2026-09-05T10:01:03.391488Z","times_seen":97,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.842Z","timestamp":1788602383842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1f2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 358005\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWxzDUua9QoTuN2A6a6Qd7oxNWt2ayS9FTrveTvWIsIY%2Fyda68Atr73ZBHwwyP%2Fb4TOW3lquUCfkYPzJfb13SVizVdHwtji4zWpEMjZnY6IoSpzVYNlhmTVWWK4GgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462030b4156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":1325,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"e94f18f62ec3e12c186c3e917083b8ca","sha1":"0c83432e4013f93250084e6230103ae5e533d377","sha256":"dfd7da08753860caa80b90561fd0fff47c267e4edc299cb22d2b0f6246302497","sha512":"38336a99d5f9c48324167d96b5b6d3a42ace2061e3f4fb7c01efbf3077d21bdd3ac40c720c6624fd211c5e99c07e6d6f668f5f293ad1c1b431bfc048b95ae95a","ssdeep":"","tlshash":"b2f00efaa0881c14a15e68e00c3f91b4d83a43a826b54e95824aa6632b0326cf91914c","first_seen":"2025-08-29T01:16:58.439462Z","last_seen":"2026-09-05T10:01:03.392426Z","times_seen":100,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/je.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.864Z","timestamp":1788602383864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/je.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKIW7wEP4599ygAccKMs2XhcMk0CxcEOOoq89U1mUteloy5%2BVPLjCpqJl%2BBgdaldAHf9%2FSTqexjFIyNA1zBLgDvO7iLOz3NuQc28m1Xby8evsgvAWlGLvEfOyf0h3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462032b5356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 765\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":1594,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"cfc5ea6745cc58220cc9772675899339","sha1":"2f436b98077a1cb28277f41d1dcfb36bc9baa460","sha256":"323123bd422a9ed2210a82b8baf950f262c3da6f161344467757a18b464f7bf8","sha512":"e988689b706bdb9b6f9f7fb2fea4cf852335de7186d85766018677066f998c507608eeae2f3712a24c705dbc465f9c0e901c3d4183fb3c3253402c8843d7feed","ssdeep":"","tlshash":"1a01b5bb8cfd922bd2c28cd312f86118c816bb457547e803e68dc8632309a8ce02d683","first_seen":"2025-08-29T01:16:58.487385Z","last_seen":"2026-09-05T10:01:03.393302Z","times_seen":100,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.942Z","timestamp":1788602383942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-5f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2624870\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49Tn7OOZpn3zv7%2B9eGfeN%2BGRXZFiueS6%2FNxGRlzwqR5V77BDqzHm4bL1XMvAXUQEpek42A9D9akUnrPOzZmw1mul8AxVNsm19TssMyvLwskqHXhC0pIWu5mTcn2q5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203ab7956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 95\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95,"size_decoded":923,"mime_type":"image/png","magic":"PNG image data, 80 x 64, 1-bit colormap, non-interlaced","md5":"c8c63ee911cab72681961d11374cb86e","sha1":"7a29fbea7d402e616f008b2038b860ed3e2627dc","sha256":"a848cea9948b2022be902760bbda38b98485a5af04214f75c80b9b6801608aba","sha512":"029b3b3d6a08b7f0827b354a1d0fef2a118a4cd5cdb425fb91d162eb0029f1f161b32d0d21b21d2d0466aa07ccd4180dddb267b00710db020ba664dfe9d58a33","ssdeep":"","tlshash":"ceb012e312b07dbb928410b302c81466f510042603148957920ac4691e20004a4d4342","first_seen":"2025-08-29T01:16:58.638081Z","last_seen":"2026-09-05T10:01:03.394148Z","times_seen":110,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/es.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.021Z","timestamp":1788602384021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/es.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2a1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374727\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fABmm6zqmu9I4bqHsdqNlsbplz9RAXK6Tcdlk068w681K6iZyQuUvj37ig7jVfxN1suemAaqZL6DkiL3XR7h0G04mpDVZpE%2B1MjQCMm%2BFZXUdjPP4dNYofjya9YPVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462042bb656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":673,"size_decoded":1500,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"6d6e4a20a2b14d5b9feea78ad9800c86","sha1":"0af8f4cb318ca66ae6711efc0bf4fe4933a41b8e","sha256":"cfd46911c2d8a218317ecfa94d776ca3784def0212332b2c230d0a7cfeb6be41","sha512":"f21452b25f2b99a956eb9014f9413f20325f03841fd3c37383d7823fed7cb4e038d0f77b8faf46961e8636a03575489eb37bad1cc33fc7f99284e42a94438170","ssdeep":"","tlshash":"b601f4d793ecbf3880bcc4678a6866728af18174c252425abc5a54531813b61d18a6e5","first_seen":"2025-08-29T01:16:58.565493Z","last_seen":"2026-09-05T10:01:03.395079Z","times_seen":301,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.072Z","timestamp":1788602384072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-108\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAyED5wFkCUW2PxBx2fKGTQYJ4Lh0VIVtNxWHg5yaIZ9n1kj5QIABJphUQYjWVWta1snGQionYawb0gaBEJJItY9HcjyBtZq3J0CYnBxoPxL%2BAM7hYRHZbxqxA9zVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462047bc756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264,"size_decoded":1091,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"b37a97c5a256dfe92015478e68ec110f","sha1":"f731c1b2bca1a9730086a4f0de77a82825d6b5a9","sha256":"1040c4e9de97d444b90e07bc9582ac189e743741488eaea8e367d240b6f46dd3","sha512":"2e372d69b7bbd39937998d5483d02c4a001c0d23e7ce21316d25a13faf92910290542351ac9a28c3c6f4a5b0e470c1a471e864a2761e01a6b9c38bab67128834","ssdeep":"","tlshash":"e5d02ba5d6520d38e5c79efe52040040dcf162261185d93e4dc99c024560107d8e96f3","first_seen":"2025-08-29T01:16:58.466114Z","last_seen":"2026-09-05T10:01:03.396086Z","times_seen":96,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/eh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.145Z","timestamp":1788602384145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/eh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-18c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2436129\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbHNl%2Ba1tdqLpCvaf4HOr6z4aaZ9ssk946R1ERQph3UNF6XolYN6XHqJfV49t2Ntzy7b%2B8Cc3ESRSwewQfJ4RgDHREbfRjJRo6LezcijwM688w%2FqmayYJusAHXnc2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204ebe356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396,"size_decoded":1226,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"8c0f1bb9e60a27cd163914afc3ff257c","sha1":"a7edf635a3356e73a842e51885818ea60d8edbf1","sha256":"518461ad678effb89da7abc5c2019951fd8c694b2549d1874550b09cef78770d","sha512":"1e89066f355a12036b9edf08764dfa5619e5b923030df83cb8f2e5b338e75ccc2d1c8f10d83f8f4c378459e292bf3be26bb18d04a9b8086e8a9f49a9ed850523","ssdeep":"","tlshash":"23e081ea22fca5284c0288f246c182119e2a03484f018cca083a08f8ae9c544afc50bb","first_seen":"2025-08-29T01:16:58.507793Z","last_seen":"2026-09-05T10:01:03.397061Z","times_seen":95,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.726Z","timestamp":1788602383726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEXd0q7INLm6bQ62i4UNTcZTe0fqpn7t96ssrT%2B2at0n8ENyRO2Gfk2C9ht16ln8uZKg3S9qmiqJcSOeYIapAeVpO13yqhMjor6Ve2Rrg7C%2Bt7kRP5GxuI58OCYFiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462024af256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 971\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":971,"size_decoded":1798,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"4cc956904355f5330381338a1f99f237","sha1":"6339469a7473675940a0c598580ef29911cfc9d0","sha256":"22460c72dfa517222ce3983a01eb63c95794e5c4254c9598f6f02a603bfb7eb5","sha512":"e83a25d6887c40dc4460807c46c60734b8e51ce4a30d8ed8cf3814c57e3ec861e836c09658099ac3343d375268f7cbe15b5464594cdb97fbc5565a251d919aa8","ssdeep":"","tlshash":"0d110c6361214b168cd0f287a49581dbcbe7b15055ac417d7403ef3e5f85b04c1c1f12","first_seen":"2025-08-29T01:16:58.539488Z","last_seen":"2026-09-05T10:01:03.397961Z","times_seen":95,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.741Z","timestamp":1788602383741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwnI%2B7%2FegiT4hb78YKRscnlTsz3KKy94eC9%2BSvo7h1lEwlze9%2Blh7E7EsPaSH06gG6oI75Vo4abD4V8BDSKZ%2FFvT1UoKYHC8g783MBQkJBEHev0FRGSH2WW6bqxE2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462026afc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":937,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 2-bit colormap, non-interlaced","md5":"ea4c8813ffd93ecdc82126ab5121a16e","sha1":"bb775c664aefe6eaaa216202909c5d90b11f91f7","sha256":"876abdff396a31e87c586865b3a32f5c5d96dc2a766480ea7328341d03591a88","sha512":"a394bef436bfd4829bc56a5d41cc044d239c4bfbcca62a8be2ec2752a5e6584db12aa46c54efb56df407f0738256ba004738ed87db3df91899da6d643835f168","ssdeep":"","tlshash":"5cb012e353715c22db836bfb904f8000f76c152a561107bba426dd2c36c4004d0c8a63","first_seen":"2025-07-08T00:55:32.399883Z","last_seen":"2026-09-05T10:01:03.399497Z","times_seen":154,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.839Z","timestamp":1788602383839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 290525\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtsgkAH9wbR5p9oo7HkxS0YxDN7pTbgdTzuTrw5Zdck63O1LDZpjE8937dxV4HfMd7Wy%2Bb2XzXbslR3mUbYZ726bDOIbLpZqjvFljLSpfu%2BDbwdzOFg4t0WvgGiZSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202fb3f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122,"size_decoded":948,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"3ce9831c366eea2251e8b67f7eb04cb7","sha1":"3860ab90729000ed4883cfe702ee07814901a3ac","sha256":"7d2c9ad5136c71d55c79677b58d5d10e4d20d2626113365bc5f9dedb819376be","sha512":"9cb7b67e6bf95aed242455e351c36d554353257eb71cb02c84f6518cb46bca8538a7fd6c7bbf426e500ad451ef298a8ef581625df50c48ca5d68702d0830ce60","ssdeep":"","tlshash":"53b092e7ca58ae29ae87a5ab02f856809862436a665482a6588b81b942083a050dc553","first_seen":"2025-08-29T01:16:58.43662Z","last_seen":"2026-09-05T10:01:03.400098Z","times_seen":101,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.929Z","timestamp":1788602383929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-15d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 356790\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLqrmlcTayN4pjBY7QhwYbowPWYZcmfdPQIC2Y0QyJiUxRx4g8rnNRtLfPme0v9XJrtgviQNtf9Hq84aEYQZchpQVKUDIq29poKqyZDN03qT51b3VxQO%2FFn5%2Ff3Tkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462038b6c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 349\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349,"size_decoded":1176,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"e470abbca8fbf71c0a7e52db8eb22700","sha1":"8163312c593feb0eb2c36a32d81495713feb8dd9","sha256":"4f47a02943482de0fc8ae0d3eaf21064549c186f181cf228434a63f00eb40a11","sha512":"bf4a957e96b583d8d67d9b8ae1d552be620e923dc3e933f82805a3c5f08c0c4e268c05607dfc8867c895b98c8d3a3b1fb7575845cca76f405d2c49ea75ed9412","ssdeep":"","tlshash":"0ce0c085d0913bd1ccdaf2531290122545b3aaf82b0b01081007465e80157f65440235","first_seen":"2025-08-29T01:16:58.460808Z","last_seen":"2026-09-05T10:01:03.401169Z","times_seen":101,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/nr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.957Z","timestamp":1788602383957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/nr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-ff\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVSLQwaqZj%2FaMkfWdEx%2BrrIAFatfuhzQPDqo9RqUR8P4y68OcQFAhUSZ1s5WreK5%2BkhpzLryPWGPY7pazU1zbtsxlk%2FSHgG3740UCrWY12bbx0eqGit1HgKE0iQgJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203bb8256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 255\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":1085,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"3461841ee2feccd555d0c69729052326","sha1":"54dde9cd09c04de2efedcb1014e30744fe570a2b","sha256":"2601a72acad9b3284d125573c987a292e665a528273d4f0d1b3a93a76f50bfda","sha512":"32361f9e1903f9bb0b09eec02bd65c9c9ce7da36fd4e3e910354bf485d35cb944065b3190748d345fee357cbe485c6fcb2a18176388bbf439a6d2fdd0fede8af","ssdeep":"","tlshash":"40d02bd52d383d2922a64132119943968d02088d41695008517a6d97974da4c44ca353","first_seen":"2025-08-29T01:16:58.511645Z","last_seen":"2026-09-05T10:01:03.402063Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/Screenshot_2026-05-09_at_10.24.43_AM_c12b7440-5d58-4161-8434-461ca7988a8b.png?v=1788221426","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.173Z","timestamp":1788602384173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/Screenshot_2026-05-09_at_10.24.43_AM_c12b7440-5d58-4161-8434-461ca7988a8b.png?v=1788221426 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 107190\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sat, 05 Sep 2026 09:59:44 GMT\r\nsource-length: 2863361\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiv5Ow3SI8BLyg9OxWJ2CPvcW6PuacNdu2E2CP9rowajMkS%2FaiKUnNRWQS6VS3qMeS%2Bzh2RG9G2jtnEO261qBG4R8QIS8HC6PSZTDx8ufM2gmCAGWrqoTVGQ9nr6xu0%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: c6401c80-1c0a-4c6a-b96d-fb938c90515c-1788221728\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=5,i\r\nage: 380655\r\ncf-cache-status: HIT\r\ncf-ray: a364620518c5569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=329.996, imageryFetch;dur=97.403, imageryProcess;dur=231.440;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107190,"size_decoded":108425,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e856edef5595c74f6672845fd52b9629","sha1":"9d2a32c1f4b8a1850259916a07839e7773606c34","sha256":"9aa8d393374daf08416cd967b7044ae1d737df6d5c5866891f52526d96c70737","sha512":"39afdc9b6d83aa82e96ae152a5fac9378f61c3aa086df4b6122813820e5d389b996aa1da467405fbc88b4774ca0e2aa059c42c48c750fc90fe76e2f1d295a944","ssdeep":"1536:8WwBeEjtZFkzh7bwPr2vCxianeoNU3a5JMFX/a5MUzYcgmso6ouNdrySPWLvpT1L:83VjtQl8rsCNN4H9a2UMZphdrRPWB1l1","tlshash":"3da312285d626758c24c4cf76e78b95bf674a623cfc5dec33288e9d363c1a601b9124e","first_seen":"2026-09-05T10:01:03.403054Z","last_seen":"2026-09-05T10:01:03.403054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shopifycloud/storefront/assets/storefront/autosizes-84416378.js","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.338Z","timestamp":1788602385338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shopifycloud/storefront/assets/storefront/autosizes-84416378.js HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1192\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QNIM%2FkAvhBif3wllKlxgxwikGENDHqRMzKrbmdJsfzxqCWXzmGtvqd17n0XZok2IjvWODPVTjgHxLSclONZcS4U8VHxgNWIf6CvDPgIydtH3trV8pQWQxBGSap9VlHQLg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 26 Aug 2026 02:12:36 GMT\r\nage: 2633129\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/storefront/assets/storefront/autosizes-84416378.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 6a659c7e-5729-4aec-a4cf-31a29971d8ee-1785969255\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a364620c5f74569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=72.996, imageryFetch;dur=72.101, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3327,"size_decoded":2453,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3326)","md5":"ed2f7a7b244645365e62c61819da7fe5","sha1":"99b96dbe597d13578eb736b442c4da93bf095c76","sha256":"fef8d37c118bfbaa23610974bab09b53324ebdd63052b942cff178b861610c72","sha512":"30d2353c323ba91c054a1e13329e20d1f588d19ed3f9a9edea9446a0dcad1f5ae3c8a4a1c03edad2f3c9f7c7cbea75368624dcbf06bcb9019718c2da86c9a974","ssdeep":"","tlshash":"b06174b1009873b70e9127e6b5622181bfb061177e03a1bd8e9cc957217fe43067ab3d","first_seen":"2026-06-23T08:36:04.802465Z","last_seen":"2026-09-06T13:16:07.561433Z","times_seen":31940,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.tslib-es6_i06t5CRd.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.037Z","timestamp":1788602386037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.tslib-es6_i06t5CRd.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 625\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nlast-modified: Thu, 27 Aug 2026 05:36:24 GMT\r\nage: 3078585\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.tslib-es6_i06t5CRd.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0f277H%2F%2F2h8hseIeOargNEEMqy3d5jOBocvCp554IeYfI9bfQiW6hK5zPFiUrlJ4yMAuDMCRm0Fx%2FU2p48%2BRtIzoOd3u1m29%2B1dRjwn65XPHb%2FkNAJ6Ydj1uZyAKGPnI0w%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 34a2d015-5a3e-47dc-af15-c3fde7b016f0-1785523800\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf572678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=33.719, imageryFetch;dur=33.222, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1428,"size_decoded":1843,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1370)","md5":"0dd575bf2038b89ca742101cce605348","sha1":"53129ce944bb3d7f3b2b4b635ebc76402b0cfa18","sha256":"afbd4104e598a8ad2d84ae95716448eb11ac5b2ca4f501c1e9851c56d773551a","sha512":"96abcde83dfb4eeac0f4eda9012138c2a5013625eabdbb1da226121dc4e8db99ef8b6a5316b885aea34dbbe6fb0d77ed53856659f650a0b316ca6c2db21ea438","ssdeep":"","tlshash":"eb2112ccf7a4f0b1a57b51a4801b140bb575c56a532869904b40f8b3247481edc5bf6e","first_seen":"2026-05-25T15:55:58.326081Z","last_seen":"2026-09-06T11:36:39.287239Z","times_seen":53916,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/mg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.927Z","timestamp":1788602383927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/mg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-84\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1980208\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTwmBYLYv1qfP7Uzx5fXxqGP8la9Ht6CGXgdxmFGBVamG2Q1s02wpKLUj%2BYYMWY9hlbX%2BnTqT3PZ06bXROjS1udP0pFA32KRDVLRApHHfs%2B9VEEs%2FhWzI%2BLF%2Flm6qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462038b6b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132,"size_decoded":967,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"51c3baf95e1607662e81466a66b97a50","sha1":"62a402c1ea8175eb81da55e32e6565b193296d75","sha256":"1c03cfdb2b0b213d28cfe4e29a67cd62c92210ef59e94c1a16f27e0c10723709","sha512":"bdcbc8d070b513c496adea46945d16b8d086fb1e1efe20396f7bd6716f272cf90f86256974956cb24e6aeb4c47b31accd865f43ce134a1ad85d133edcfbf167e","ssdeep":"","tlshash":"69c09bd761105eb4d347a9371378d14574775758317145561053551d66412384d98f92","first_seen":"2025-08-29T01:16:58.497743Z","last_seen":"2026-09-05T10:01:03.405251Z","times_seen":99,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/me.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.945Z","timestamp":1788602383945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/me.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-211\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 355452\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TrLoxjRGvcQU9qlliRpXkmruZsApmxXM9itH9bbTEulFYc09NB1v4Hw%2FpVN4rQyM77LU0RVaxOdDRU4yng8w6CnH0vT3vF2iOgVrgq8sgMpd%2BEw3flvvvBBYBmK4aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203ab7c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529,"size_decoded":1356,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"d47b98271198700547fdacf535066479","sha1":"a7148af605b4ea6de18c882e4dba03a5a3843f42","sha256":"f66ae28c5d3ca1acca514b255230450c44139a40fecf24f0ce6117010216a8d6","sha512":"8131d3283bc774693079093d0219661ef2c0d6ee5de8bcb16e1b8e03fd70ecc317bc88111f30483ef6d8eccf17884689202daea547765c6c1290ca87dae0b695","ssdeep":"","tlshash":"89f020eb662c0cd8d857a87a9c990540be573128c32b082a05909a041ec1148e059a66","first_seen":"2025-08-29T01:16:58.606636Z","last_seen":"2026-09-05T10:01:03.406329Z","times_seen":105,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.422Z","timestamp":1788602386422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14798638\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-14798637/14798638\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzFr3w9EnYg1P86FBacA3SuiaWmtCGJjT3ZPiPlwxhc%2FgDNaIbw5b8aKVIQ1vdp4QaaHKkxw7E7YgGQGFKYmgpZ9VtLqp%2BnFz%2BMdqqZqtJqEh07TNaoh5drUawQ7h4w%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fc98f90a-099d-416c-8923-8ab843fc7d40-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e5e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=265.563, imageryFetch;dur=265.274, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2129920,"size_decoded":2131626,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a08b1a403cbfac47ee8b854c7b39e105","sha1":"52bc615666049705c8380595ea659213223489a8","sha256":"3de67846310eb5af7e15ad5177e58d128c44382d4b1b0ef740cd8884267c9d68","sha512":"23db8a57ac757bdf011f36f9387fb00970f89c3857c3e53f1b03e7c9e71360a4d32420a1de466d3e1f8d7f58728a2b0de021d739e6f2b9af09a637943fc37dda","ssdeep":"24576:SQrbS/aiaFSvSyT/i33NXgh8n205EDDjSx4vUIag:S+G/aiaWTLcNXgh8n25jeE","tlshash":"1625232a3b1910d3cb194fbc68f6478b7378e0a4db1a623b9ac12f585ed27ec81445d7","first_seen":"2026-09-05T10:01:03.334635Z","last_seen":"2026-09-05T10:01:03.334635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.424Z","timestamp":1788602386424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7905824\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-7905823/7905824\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c1adf5b9acc94f5cbc2e44157523dbb9/c1adf5b9acc94f5cbc2e44157523dbb9.HD-1080p-2.5Mbps-93124258.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6BifIDmfJFoBbqAbRZgpilHUGGOeMgO1NgAWZztPy1%2BqXGEk5MV6LZIybXE2zrctLrNjeD5mrBhg8k5KgAAFXVbfZ20VavajNIFmNJl1QhGR4JRhUjqytRcu9GvgAso%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 93006eef-8a39-43bc-ade1-d33b0b4b8b8e-1788221719\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 380666\r\nx-download-options: noopen\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e63569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=358.953, imageryFetch;dur=358.491, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2367488,"size_decoded":2369187,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"1fa80a8df9cdb0f93ec2c52cb4b4672e","sha1":"1f641636c507ba0f74939ab82216a4ae3f1b1316","sha256":"ea09666ae48cd2d945b7dbb1215c0a6a05d7c2ab611650ab66117afc9c738a41","sha512":"eec9ccc658bd61394fbe39bcc79bb116f66784f743762dc90dcb7ce583934f720e04959a7b83d2c1a2a795f70e2a7dfa843058fdaf5cb01270f847ec12bcc8b2","ssdeep":"24576:0acg2Ormu/iMtBkukFkSHkHi3YKQaMJ3qybYTikdkVi:2OrmCZ3DkFkti3UsWDI","tlshash":"92252366bba4d916ce7cfbb043f61b84b2b5cc395b0b57af8066520d5dc87a1b4871c0","first_seen":"2026-09-05T10:01:03.233977Z","last_seen":"2026-09-05T10:01:03.233977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/storefront/assets/storefront/origin_trials-5059b83f.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.554Z","timestamp":1788602383554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/storefront/assets/storefront/origin_trials-5059b83f.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 801\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 27 Aug 2026 07:08:48 GMT\r\nage: 2191062\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/storefront/assets/storefront/origin_trials-5059b83f.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nlf4dBqg6LqTE%2FBc7MhJo%2F7yZtQnGFFsLwOhHe9uShU93htRqPeX%2B%2F8pxTDXxB6o72CgNjtwSRmAExBL7TOhECPOGJ2%2FFNv4zb3WNoCnbHCCNOek7WeWg9Z66Vh6vAIwVQ%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 5e7d7f03-dab1-4c82-9f93-0cbc8a161b87-1786411320\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646201495b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=35.865, imageryFetch;dur=35.047, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":2004,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"ee8181d48948754d5b481fc935d09fe5","sha1":"48d473d13834c84fa17030d2f13a96dd8a237773","sha256":"9aa42303eca1af50ed3ec5b93210c8ab7cc3bbe2e085f8cd4f8f6bfedb46dde6","sha512":"453aff4f90f7d1af1952657444d10cbd4e7a89b7d6d2acd3f12316a56ecbfcae6eb0d3e274ca795e69c321248aa821aadd10d53df6ef7ac97e52bf4877ed56fd","ssdeep":"","tlshash":"602174716991482ceb88111a2cbce13fcf5508ee6212058289cd684abc32e67c0fe57d","first_seen":"2026-06-29T16:53:35.737494Z","last_seen":"2026-09-06T13:16:07.612978Z","times_seen":27410,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.826Z","timestamp":1788602383826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-10b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNAoH9PItiGqjGmiFhVvAzVLco%2BxSDKDXlxt%2B7kTwo371RhAewX8y%2FXC%2BCUjDYOSasgXeufo9pyyZi8TsCAqXPiF%2FWCg0M250d4qruE9QyahXyt4ZVhJB39qUHFnOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202eb3656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 267\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":1100,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"e430e76681b74e552b91688782ea0270","sha1":"69e921cb2d6f6e2cac86836b6d15b07c4fcacf61","sha256":"df792a38cf9620fd3ac55b759de8f54b9ddf4c3f90ff558445f024524f29f42b","sha512":"f2915590551d4dd6dec828919e94018e8e90744686508fed06c09e0da4e1b86822a033b7df339e63601f7dcb7fd048f6cc54f7cbc526ac5b6e4e75b60608f840","ssdeep":"","tlshash":"96d02bd16fe92d38927f643f49985aa6a8a21900618021ce5006c1e17d3d256457d35e","first_seen":"2025-08-29T01:16:58.712791Z","last_seen":"2026-09-05T10:01:03.407953Z","times_seen":119,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ni.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.963Z","timestamp":1788602383963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ni.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-168\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2528006\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgGiTZd6NTuWRKGsEygiD99hVvxfmdyNXWjHdYAp2rAoo%2FBWeR9K%2FY0f5SWlDh7EyRAz31kD%2Blnw%2BN40lSWaMbSAGyYvNrqFTMX74GRLJHcnuvi5nhQGwFhyDml3kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203cb8956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":360,"size_decoded":1192,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"0ccfb4a740408eb749a49b7e0723e242","sha1":"009e00899850c33540aa8e6dfd38563ae9ff8bc7","sha256":"bd686d6b7fa00414636a098fe2423947ddb12e4ad782b0d0d621e861fc9ac5d9","sha512":"02160a319422246264bb88db74fda63aed6315b4d2cb0d1d50204315d8105d8e4e98cc7f20d09a6b3f3e8694fce2f91ce54bcb1600cb1ea1e4c02ae5d14109d2","ssdeep":"","tlshash":"40e0c08310b46e18d6d5edb378190a60c41a0e4026a543153211f92e65b14488e4c2a7","first_seen":"2025-08-29T01:16:58.470278Z","last_seen":"2026-09-05T10:01:03.408546Z","times_seen":103,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.015Z","timestamp":1788602384015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-4f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6w231bdv213ot7S25OXHgJg%2FlxboLJYTot40fc1H7wjpEujrViTfYdzOwsSozLSszZh1Qwm1ibdhm0SnfTTcLfqWb9ogk5ix8PL0fCftKEKZSrrKLZfsqGVsGtMDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462041bb356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":2095,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"e28e24f64e6a4adfd8b78b12038208f8","sha1":"d47982a3e5577a6d545ec64db71ca2341ae0fe46","sha256":"736da4da4a4b8ab1b795db7f4803a1664be60e1a0931beeb73b7a6b3153a560c","sha512":"d6a998308f55e2852926537e58876c7520cf6808aa47cc4ab6b5cf75d98a99d534c33573f924b69670fec55d9614c7a737f19c335d831780493f1447de9cc790","ssdeep":"","tlshash":"5221b486a66c7d7ccbb23097a2009a82333405b11bba44057edea2d6f360e7a24c6340","first_seen":"2025-08-29T01:16:58.572277Z","last_seen":"2026-09-05T10:01:03.409542Z","times_seen":95,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/se.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.065Z","timestamp":1788602384065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/se.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-64\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1979244\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBktrO6xGH%2BLNpWOQQUBTA6R8SUImKH2T0lfnPwbL6usEarKF8my90P%2Fwl3dkInPAvBg1jt0fVwQxkDeK7e8hA%2BPmD%2FSgz1pUP8EunQVm74%2B30SAQ2CeCHGEdWrK3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462046bc456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 80 x 50, 1-bit colormap, non-interlaced","md5":"c54cb5cf789146c0fcf9666fa6b009a7","sha1":"408c539d911b54c7368595d4c5618518969fe752","sha256":"e8433ddb96b727f2b2420f21f588feb88a5f3984b0c2fe65e97e0b5285f3a2ef","sha512":"ae7a1651082164e826cb07b7e36794d54cbd2c77f667a49c2d02f10ba907ff7ff55904d8852517faa5c40a89dff3f94add25e416fb684016ba5038516ec202ca","ssdeep":"","tlshash":"4ab012e73560bc358e45142702162049fd1009500100cd0bd3618c14167200cc4c1bc2","first_seen":"2025-08-22T12:27:03.521239Z","last_seen":"2026-09-05T10:01:03.410503Z","times_seen":249,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-accessibility.avada.io/scripttag/sea-accessibility-loader.min.js?v=1788602385283","fqdn":"cdn-accessibility.avada.io","domain":"avada.io","tld":"io"},"ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.251Z","timestamp":1788602386251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-accessibility.avada.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 16:09:19 GMT","end":"Thu, 22 Oct 2026 17:05:18 GMT"},"fingerprint":{"sha1":"96:21:05:71:CA:22:5E:9D:15:9B:F3:84:8E:00:80:50:AF:3B:17:CB","sha256":"E0:AE:C1:D4:8F:18:17:EB:0A:A9:80:81:6C:80:F5:0B:EC:2A:C0:72:FE:45:7F:1C:4E:AD:C7:AC:73:04:E5:22"}}},"request":{"raw":"GET /scripttag/sea-accessibility-loader.min.js?v=1788602385283 HTTP/1.1\r\nHost: cdn-accessibility.avada.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4xzsvkvtWTo0xdk%2BfOPUZ%2F02bL8PNY9QEvQpCkpLRHJTdVvNTuI9kegseMz7BXi5BEAAOXtRUYYMHw%2FDcxO4YZn4vyHm0s3Zf6fpMJFEWB2w4Udcd5sYB52bBGLk69nA3zO%2FezQuGvmF4%2Bn3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"98bd673baa707f83bf79f1f6ae8647eb\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15552000\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: a36462122a621525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32234,"size_decoded":13697,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31557), with no line terminators","md5":"20b0546754abe6892ee67f212a81ebaf","sha1":"734fb71c4409f98afa1d6f095b99f4a51055a773","sha256":"aef2e8f62da369cef5df7984aa1c4a3a82b848cd78f3cf5aaa27da028a172498","sha512":"fe90c5d344e3fdd72ef550f1ab8d83289086fd1c7709cb7ca73f69fefb2754e262b778af1f8347cae6eb72f616604b0d01e072806cd67dd3dbdb83669f1ada6d","ssdeep":"768:IPC8gHq5PEjuzC5c6qdcmcKRPU/RS6pWw2w6n2Y3:x8gHq5cVc6fMPmHn6n2Y3","tlshash":"b2e23ae3b2c471f0524797bde13fa228b67f38393b0bc6008168ee9469b448a8557f5d","first_seen":"2026-08-23T21:35:53.725556Z","last_seen":"2026-09-05T10:01:03.411549Z","times_seen":11,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":83,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/web-pixels@80079e4cw22952a98p55856082md4f1b6b4/custom/web-pixel-149094621@1/sandbox/modern/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.524Z","timestamp":1788602386524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /web-pixels@80079e4cw22952a98p55856082md4f1b6b4/custom/web-pixel-149094621@1/sandbox/modern/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAei1w9eeYzfElFplAPZA3x-j69_aVstry05S3NGnwdOyp-DzbRzO1OQ2p88ur_xJI89m1n18zgyqRbKtzH6wc9ztsAo36tojYxGNotn2SF45YWvsVATstpLeWULleYz1_U4pHIqzaGk1FU9FhbFcigURIJ2i_TzJEw_pSu6MUD2jYaL7J8U34JSLsyhd4yOG5ZChClT5qK5gzuvkbTJRUA5iG6TMgq-9UonoONjVlZZp8bqvFLo4Z5vnPAd2NzG8aHFGgtDG8Pl6yQae3HvCg5ll2pZ-PtOkmEy105vZG5cdQaXU3ujkSkT9mYMTQ_fyn8D8-22RyiC4xi2g6fqgDD5fE1qUMqiD3Emvwm3YT7xRy-M1VjJ_I4f3dKcH14Mx-5skbnJSrCDg1zCVFD3BbJMDn9EcCyLdSN4nE3w-uQYUMiBuOP_4hAHsJ8K3REdQUY6GaWIxQasiODXx2q0mal7rd40bTCEtwXJPqJvwrcV2UdsRAdxgN7YEW18Q3TGSweRs:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding,Sec-Fetch-Site\r\nx-frame-options: SAMEORIGIN\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=31536000, public\r\ncdn-cache-control: max-age=31536000, public\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nstrict-transport-security: max-age=7889238\r\nx-dc: gcp-europe-west4,gcp-us-central1,gcp-us-central1\r\ncontent-security-policy: frame-ancestors 'self'; report-uri /csp-report?source%5Baction%5D=web_pixel_html_response\u0026source%5Bapp%5D=Shopify\u0026source%5Bcontroller%5D=web_pixels\u0026source%5Bsection%5D=services\u0026source%5Buuid%5D=12de154c-f853-45fb-b92c-c3e0cc6e1ad9-1788477958; report-to shopify-csp\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nreporting-endpoints: shopify-csp=\"/csp-report?source%5Baction%5D=web_pixel_html_response\u0026source%5Bapp%5D=Shopify\u0026source%5Bcontroller%5D=web_pixels\u0026source%5Bsection%5D=services\u0026source%5Buuid%5D=12de154c-f853-45fb-b92c-c3e0cc6e1ad9-1788477958\"\r\nlast-modified: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 12de154c-f853-45fb-b92c-c3e0cc6e1ad9-1788477958\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CScUxJXVCB1g9xi%2F%2B1%2BGg7cIWS16lfKPN2za0POD%2FwcftXn%2FEbrOERq5avherGMhXf63ywyVcp5TtAlWsCefwrxffu1CGDQIKiUvn%2F%2FFiiDs9c%2F1QWtfexSVnOXADLI%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3646213cf22569c-OSL\r\nserver-timing: processing;dur=39, verdict_flag_enabled;desc=\"count=15\";dur=1.153, _y;desc=\"00000000-0000-0000-5000-000000000000\", _s;desc=\"00000000-0000-0000-5000-000000000000\", _cmp;desc=\"3.ampS_DEBW_t__C6MsdGTyTByzMdKKAdUPrw\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76214,"size_decoded":31840,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65394)","md5":"bc2621e1d34b791bb6dad67495054900","sha1":"4c70b3c7f418932d27f487dc55cf6de05cfdfbb9","sha256":"c23d60b36953e03a6d749ec0514a85c9e74af7711e97f105e3f599b6f6dd66d1","sha512":"140a22a963912611b43788b274dc103c682108a45df21239ec523c88b1c7ddc10823469129f2eeacbe19692864ae0880df95ef1433004c6a6ac47290e3ce20f7","ssdeep":"768:ankPFWEVaBrmaR432dFA+2EtwpAtEnND/c/sho8NqdMhV7GYmX1Vdt18BQPUWXyt:akgZQEmN9xEiV7GYmlqBRxOa","tlshash":"f6730a9dba82f47647f3a5d8c03f4805a22a1925e80cd4f0efd6d591687a98f413bf39","first_seen":"2026-09-05T10:01:03.412206Z","last_seen":"2026-09-05T10:01:03.412206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":990,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend.alia-prod.com/launcher/events/v2","fqdn":"backend.alia-prod.com","domain":"alia-prod.com","tld":"com"},"ip":{"addr":"172.66.145.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.512Z","timestamp":1788602387512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alia-prod.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 12:18:35 GMT","end":"Mon, 09 Nov 2026 13:18:33 GMT"},"fingerprint":{"sha1":"75:99:C7:51:00:93:3C:13:35:03:7F:70:5F:85:9C:CD:98:76:67:60","sha256":"8F:D7:CB:F8:E1:CB:62:84:D8:A8:D2:06:D4:C0:9C:43:BD:85:3C:04:48:A7:2E:73:18:D8:94:A0:54:AD:C8:41"}}},"request":{"raw":"OPTIONS /launcher/events/v2 HTTP/1.1\r\nHost: backend.alia-prod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-alia-jwt,x-alia-shop\r\nReferer: https://tryrovina.com/\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: text/html\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://tryrovina.com\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-alia-jwt,x-alia-shop\r\naccess-control-max-age: 86400\r\nx-cloud-trace-context: 8ee6c528f4657074dba05fbb19e3e783\r\nserver: cloudflare\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3646219fc18b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":568,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/019dbe41-333e-7edd-a4ce-2128c404ca9a/bucks-currency-converter-29/assets/widgetLoader.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.581Z","timestamp":1788602383581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/019dbe41-333e-7edd-a4ce-2128c404ca9a/bucks-currency-converter-29/assets/widgetLoader.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 248\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Tue, 11 Aug 2026 20:05:43 GMT\r\nage: 4493677\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/019dbe41-333e-7edd-a4ce-2128c404ca9a/bucks-currency-converter-29/assets/widgetLoader.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQdnxoEx384gOSSrRwuW7FRObgvAQ%2BNWDJG7O3GaAiD6srvtYplX%2BY2u%2BiJfb%2FPAyMlVp4GAngtbEWHwsbYoz1U6O0f8bRVfsYE7Fg3JYVG%2Be9uFsARuulcJpcjEljLVSg%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 1cb72f88-6c6a-4d1a-b666-eeb14bd4f100-1784108706\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646201696e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=72.268, imageryFetch;dur=71.944, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523,"size_decoded":1488,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"011a854ee9ac27baa586e43e38f88ec9","sha1":"88fd39ab80ff8381b2ca51d737be8fdde6ffc5ce","sha256":"4528c2131baec0af48ae034f8322ed4364240ce799555d2dd9259d76cedb7313","sha512":"fb4c04b88257496644ffea4e3fe6dd86f5abcbffe76bce42ab7b792e0f70fce1fd22a5fc42374cf2aeb2b6d82e70f4cde1f0f74ab3221d0101cd6481cdeb2a74","ssdeep":"","tlshash":"dff0241979b2c434a46aa6dbcb7bd26cb06800322186e092b4488c5d9860ea448f3cdc","first_seen":"2026-03-13T01:20:50.674831Z","last_seen":"2026-09-06T11:13:50.193261Z","times_seen":600,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ax.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.685Z","timestamp":1788602383685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ax.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-a8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 355451\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuZKe7TrtVynxRDUwoskTJ2W2KzCMLXH5Zj%2Bs5D3Mm3NZTFQw8zwogB7zRAb5%2BQx8CTHtRtZJtNLetbz6hPrgJ%2FyswppYu1UMcxILIzLF122BqtQlmzM2%2BISS3t%2BGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021adc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168,"size_decoded":1000,"mime_type":"image/png","magic":"PNG image data, 80 x 52, 4-bit colormap, non-interlaced","md5":"632147bfcc0a4d0e76afd606674b6657","sha1":"4a29f48cd413a9e6379e43d0b24f3232ecf4fd6a","sha256":"bc482eaf53fa5c9ff5f117da325fdc46729c37ae0cc5a221dbf69109d374e3ce","sha512":"07a8ce3541cc66f0a147d016c8c358bd0bef771f909cc7c22f4a22a8a829e8be8b122b18f3f20fc69c7968900c6aec4543d2e88f3f650ec9114e76ec7dca7b25","ssdeep":"","tlshash":"ecc080cbd274fc74d1d9f4231b995074d815060b335096153441c93137324150544303","first_seen":"2025-08-29T01:16:58.545776Z","last_seen":"2026-09-05T10:01:03.413691Z","times_seen":98,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.746Z","timestamp":1788602383746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-e4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511927\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGwGQJBveHh5xQvW996SEiqop2ns9%2BdWG8aOiNGadBBtM6UppbU03H%2FKH%2B2H5Dz93%2F97jQoYbqpFkiMMLLp1KuoXMr%2B%2BmIWxuUrK1Vk7nTK%2BOCLPjJuliki5%2Fl1ssw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462026b0056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":1066,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"c0ebbce60011ff96429d6050f71a1b06","sha1":"ecf10339022be2a96b09c47ff4fc3439f1eb5d43","sha256":"422c019d8e77d3bb92335c43dd2641286c736d1e22c2df943f5f49948307efd6","sha512":"8e6391be1629e11ed3e4b9fe7a0fc94c22ca10983ebced96701a6d07a7ab93f209c544640db9936a4145e574e3d570c66b079306a688859066cf2ee83ad7e9d6","ssdeep":"","tlshash":"6fd0a7f34941cdaacb6a2d5f862c1c41d6911645614563024006e6245c2555ba172bf6","first_seen":"2025-08-29T01:16:58.452261Z","last_seen":"2026-09-05T10:01:03.41495Z","times_seen":105,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ta.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.092Z","timestamp":1788602384092,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /w80/ta.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLu%2Fsm3OtB2WDgXOR%2F1DstRN8CWKIf%2FzzrntUk9trxX6N0TguE60wYalxKPlofOWjrXcyHxla4vnkTJtHet%2B%2F6mym%2FfYMin6YCIOuJMGwbGBBo%2FqspZHFH8rug6tZQ%3D%3D\"}]}\r\npriority: u=5,i\r\nage: 53\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36462049bcf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/va.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.139Z","timestamp":1788602384139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/va.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-459\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81dKyxE3ixOc6csdlBVXm9JRsdprs3a6b3edxSl34V7bsrU2glcfAvdXtzyrDSRbr%2Bo1%2Fj0mC3A7evx%2Ba4NISFh4D9gcquS1hzzntL4D9aWJN58FZdc8mdgo%2BJ7GUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204dbdf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1113\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":1945,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"2e0a7a993ccdcd8768b3c60efdbccc7a","sha1":"7339183285d303d4a287fd7104edaee2c56f8fec","sha256":"3bf6a904e87e66a4c8c2ebd601bdff6b2eb8adb26c261a4c79d70c216a160dd7","sha512":"eef688b2c6b236a33940765fddaf022b8274141576689a810a0136f970d4672a441ab97cc2d4c352f1cfe0ac14a73e2d6784c04a0f75a7da7a2e46028e302f33","ssdeep":"","tlshash":"5121b9836248dbefcb4b0a1a0f0e6058bef1239153138d1de05c6105de18b3547d419d","first_seen":"2025-08-29T01:16:58.532577Z","last_seen":"2026-09-05T10:01:03.415946Z","times_seen":99,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/preview_images/c1adf5b9acc94f5cbc2e44157523dbb9.thumbnail.0000000000.jpg?v=1788221382","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.169Z","timestamp":1788602384169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/preview_images/c1adf5b9acc94f5cbc2e44157523dbb9.thumbnail.0000000000.jpg?v=1788221382 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 87350\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sat, 05 Sep 2026 09:59:44 GMT\r\nsource-length: 654369\r\nsource-type: image/jpeg\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vfz8UHfjqmcc42mzri%2F218y5W02JNXW%2F2lSNbE5ptvlPiX44NrNtj1Rje5gP6oCOZZbl5YfIjKmm7SKvBlGL%2B5zHsm06EIOznxBygD3V0rAOkrG%2FC%2Brph3VHMOr9tVc%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 8ed86697-65ee-470e-84fb-5d01c77f0d26-1788221728\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=5,i\r\nage: 380655\r\ncf-cache-status: HIT\r\ncf-ray: a364620508bf569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=493.437, imageryFetch;dur=127.707, imageryProcess;dur=364.808;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87350,"size_decoded":88585,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10569add70bebe7cfbc99713cdfb9f8f","sha1":"37d20a550d33cbcec452de0b2101683e07528001","sha256":"440e7d6cd27979f5445d1d937631d550aba5dc9e4bb6245f067127c9eba6fc76","sha512":"762805cacdeb77fbe5d38185da0b42a72f560935dc21b85ea31e0b100ef965647201f6e6f983140305ab862b793759269d3b90a0ffdab7661e839b394a857bdd","ssdeep":"1536:l0G79pirR4uQsDoaV+WoPy4suhEZdoVHKXrPGGqCrzMaWyq3Odl8r:iLrPF3+WMy4vhu2+rGGqCrzX3q2l8r","tlshash":"048302c74c7859abce52377c78ad33ae5164005933a2dfe969783d2839019f12a17f2b","first_seen":"2026-09-05T10:01:03.416913Z","last_seen":"2026-09-05T10:01:03.416913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.utils_1bb8Zmgu.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.038Z","timestamp":1788602386038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.utils_1bb8Zmgu.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3084\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 17 Aug 2026 22:29:15 GMT\r\nage: 1946636\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.utils_1bb8Zmgu.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HH%2BHCJ9JWCwJMyFnMt1lXi%2B3p9YojeU3AqyPPSMTzymbAolFDyi8RCmRl7vzuIWCpz1AX7Yo1zHGGTNDkuYs3gYsUIAIn8XTfCrugNK51%2Fakn2eeCAp3sKdRJaNUPLs9Pg%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 923d5d5e-3f87-4bf2-a2bd-3ce8ff7725d6-1786655749\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210bf592678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=28.951, imageryFetch;dur=26.232, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9328,"size_decoded":4287,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9274)","md5":"74978a4856e3008417d753278e4e8ee9","sha1":"02d94c78f805fd91427fa364151e77e37a50a25f","sha256":"0d25464a8c29470b86175adc72671b5aadf97162ec62db9ecc3608a41cc58957","sha512":"baeb04d250ca7baed6e1d43b323daba384a802ce77718396c1d0d3851484bc0d851bca836fa3ada08faad73d47159f7d2faf3333d07791f980ca05898de81889","ssdeep":"192:naMKazqF8pelu+ErzFECchQ8dTUT1bIm35FykIZ2eJkY8hp/pryVWNwf:nHKazqFjvChYQT1b3ryvxJkYeyVWNwf","tlshash":"7512d8f2a37251fb9c2184d1843a50029324992878d7f5b0735c8f8b358d5ca2ef9e7e","first_seen":"2026-06-04T14:11:03.274242Z","last_seen":"2026-09-06T11:36:39.412166Z","times_seen":47097,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.css","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.366Z","timestamp":1788602386366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.css HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 420\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 11:35:59 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06c34-1aca-74eb-a546-d296269f1ecb/kaching-bundles-1971/assets/kaching-bundles.css\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYfdBJMTCu1%2FVucDuepb5Anw2Vzs3TwJbq7YaXbxmupG5qsqMa8%2BmOQjgd7rVZtAGX62dt8RxbovfRLBNFB2AECdz2ey2raLZW5t9WnB%2BxbNqJMQIvLNLHOrzn%2BgF6JE5A%3D%3D\"}]}\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: 8b67d4e7-d682-45b0-a38b-3a660a82b974-1788521756\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nage: 80629\r\ncf-cache-status: HIT\r\ncf-ray: a3646212d9102678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=172.947, imageryFetch;dur=172.467, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1277,"size_decoded":1642,"mime_type":"text/css","magic":"ASCII text, with very long lines (1276)","md5":"d76eba74913238502cedf7bf95d9ca5f","sha1":"f24f7d022e9b0b053c0cd27c4a00e9c702ce2aed","sha256":"6a79afefedc10f3c42a269445dacbc3c9037892d16b8f6bb03388048a0262a57","sha512":"1ba1e64e30db72f5cff0ae75b13130b9830916f27d73ce179e331645114d024d30e7650f074f7ff1296d6b04d9c29d2aa4512622f7bf036480c197eb121a438a","ssdeep":"","tlshash":"9a21cc209090241c709fb3219bc137a6933bad0a8e529d0b596ff3eb0b4e35d1351772","first_seen":"2026-07-05T01:48:57.855964Z","last_seen":"2026-09-06T06:24:29.231114Z","times_seen":675,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/theme-clear-cache-script.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.068Z","timestamp":1788602383068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/theme-clear-cache-script.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 336\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Fri, 04 Sep 2026 06:23:11 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a06b15-99d4-7c95-b2c0-768975b42748/v2.14.116/assets/theme-clear-cache-script.js\u003e; rel=\"canonical\"\r\nserver-timing: imagery;dur=25.675, imageryFetch;dur=25.258\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytNy%2BrFhST05uIQRsZ2llU06f1yqs2yUu8olvhApzQdlxbMTAnwtGRvmxL7cq4o%2BwdXR5dSUCfqmeL5yBKRoBGmR7v1sSYjhBYHWEpEpdOuJvpLtxI8UGUzEYF%2B00jdGuQ%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: a2a866ef-4f65-406e-8949-1cfcef4d062f-1788502981\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 99401\r\ncf-cache-status: HIT\r\ncf-ray: a36461fe4eac2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":1554,"mime_type":"text/javascript","magic":"ASCII text","md5":"71b12032120e583c1bf100a88712fa46","sha1":"9c1dc59b62b3b8cdf57971d85e1e442774f7734b","sha256":"467da41e1b7d9bb71f4ec4f20641bc014a7740f1c6fe3cfab2e4e5e22ef985c7","sha512":"a00f576135e040ea92769cd3da975e4cba33bf27fad32bc71d09cf09f338efdb22fc4cbeac5eba4f83e2d6d804b3e7acedcb4a96c7b93de3bb73e3300f4d44d8","ssdeep":"","tlshash":"b601490504a2260622b710fe2a832138b33a73c7b54ccabefd4e53007f1656b87f9b85","first_seen":"2025-02-20T08:50:01.924358Z","last_seen":"2026-09-05T10:01:03.418936Z","times_seen":163,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":56,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ai.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.693Z","timestamp":1788602383693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ai.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-28a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 380844\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uei5%2BHxXOfqTYdL36PpuC1S%2FW3HCoSq4zhtVchx70uLbZMAGeZcwjuBqqhgyLSkjB69SreaWjepxcR4e0ainy9uGogzv6QgWwbCaGpEVDysLKn%2F4ji%2BQ4Ur51f7ZWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462021adb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":650,"size_decoded":1481,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"c7158e76a8cd1bc2a22d4342d830bbc3","sha1":"6ab40b78eb43ef2c368934d7565d9427fed2191f","sha256":"cbcc9880359943665523fb359f92557c1f1ea50bb1bdce7c51c9be87d95bbba2","sha512":"a16add7364fbeed20ec48c29dc62fb3b0b051eb80545b1aa097cc2e05ee2876e3321ace90cdc84f56f2d211bdbac53eee6fda063a0d9e0366c1db18050dc0787","ssdeep":"","tlshash":"87f08887b73068b4c2e1c13205df7d70c3b81604d5b3050928df4b28646df5c7018460","first_seen":"2025-08-29T01:16:58.46306Z","last_seen":"2026-09-05T10:01:03.419519Z","times_seen":100,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ac.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.704Z","timestamp":1788602383704,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /w80/ac.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVumF0DeiZw8TlobcGDh0mgfy0wPJsPrrltmtNbgU83Rs1lBXoz7uo0cEZOMpgxkaO9iJ6rXXAKC4y8jDXHjCl6AhXAlP9H9Q1l8u0ZN8J7qb2ZC9zDfKVw8HT8PiQ%3D%3D\"}]}\r\npriority: u=5,i\r\nage: 158\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36462022ae556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.760Z","timestamp":1788602383760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-257\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2Bxy%2FgT6SOW3%2F9%2BCEpU8y86N4TfxKIpkmQmQiZSy99Lh%2BJYdbManJ8z0HyN26RpcSkB4W31nJ3KRW1H98kakHtTEqiK3VjrTGk%2F%2FzjcPswLFvXrODSf9g%2F692mW%2FEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462028b0a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 599\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":599,"size_decoded":1440,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"320ca8e3304ef6a907d1efd72c4b214c","sha1":"26eab3921fb78fea14c35aa6bc495c7f28c1e022","sha256":"06e61a460b8d329dc81b5f3a312640f430914cb2fe2dba23599970a7e6527bef","sha512":"db72e29fd94fc8e29e7595ac000beac4c15471dc594d4213344bb1b93b325da4e814dd5ce70a47d5a45c4b9c6da99a89129f66b75b322defed2b980aef820dc8","ssdeep":"","tlshash":"36f062f028d046bae4c10853418b2ef2c7d9bb3d0321105f9b094dd06b90846f1a4a60","first_seen":"2025-08-29T01:16:58.556268Z","last_seen":"2026-09-05T10:01:03.420542Z","times_seen":95,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/kr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.016Z","timestamp":1788602384016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/kr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3cc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f41FTm%2BtrlhySzT9RnokYdhD7RrAwVCSK6G%2BuoFQ276J%2BZebh7ZLERXERDPbrAmXWQ2KpgE0t2MlfumFrM4Mrz10oMKM8cx%2F6etSE4RYnXSADWNy%2FmMFb7IEGT1LUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462041bb456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":1805,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"6de94d94bca9e0fa08ccbb852aae9e18","sha1":"8f798e45aec597b0b6ccb87791970292a7ec36c4","sha256":"8a0e8db363c5177c129bdc1140f5c219f17014153a5da592877c4b4c718c248f","sha512":"f9de35d2962b3a0a8928cee60efcc1ac314688fba32f7ef44aa021a8578df59180d3321ee14b9ef02605a3a340f08f3da0a489fce23ac6771f9c917451dde14c","ssdeep":"","tlshash":"f21194c3b76a943246b32363f8e27673f4b202635e6953be2419a64e51b71c9cd80605","first_seen":"2025-08-29T01:16:58.502281Z","last_seen":"2026-09-05T10:01:03.421564Z","times_seen":203,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.037Z","timestamp":1788602384037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-b04\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlavFzx8aXl3%2B3gcQG0JSvmdKQ5dgZ9kTjopLa9wIG7yyWjMjzIMNSOWMVx2OfXhWEuvxxZZFqObOux1sM8Qj696FHafJGOrk51J7DVhL1L%2B0BonrMZx3mIsl1P%2BjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462043bbd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2820,"size_decoded":3650,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"bb67a208bb549c156fd05fe9f835a1eb","sha1":"77181bb04533e1fa647c72c15747c47753377129","sha256":"982507196a0ab3cf707cddaf903d56b5855c7190037bbfe6303d2c2c41c8718a","sha512":"d1133cf33a837ae4c341564e4abbcdd5742666e54f772265ad7990fd8cc7975439fce330ac93925c1e127cb4d360b4fa555231010e0c37e3e57c64864dc9cd8f","ssdeep":"","tlshash":"1d514a6ae49ccab2cfa110040b0d4d92b6153c105163b20b836f8a7afe74ceba3c1dc7","first_seen":"2025-08-29T01:16:58.60843Z","last_seen":"2026-09-05T10:01:03.42251Z","times_seen":95,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.436Z","timestamp":1788602386436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 31529835\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-31529834/31529835\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/5739d7be32a04cd9b4e74219a3e143db/5739d7be32a04cd9b4e74219a3e143db.HD-1080p-2.5Mbps-86805018.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLosAwyht135OLFiNA2MC6LCVPPZJiDuXKl%2FqY%2FITLdldL0mLlacV2PAFtdsVmZWyxd43Ws38mM8urE2nHGw%2FYhlPe6YTKJQwz6nVS85H2IIMlpO6E7%2F1Rn6Dduj2Hc%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 3f06efda-f997-443e-8d10-4ba597ad1c6f-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e7b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=645.631, imageryFetch;dur=584.892, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1288423,"size_decoded":1290131,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f6cd289b36c0c980b73509ed79642ad3","sha1":"e8141c0b0a98a57c58d9f75e63812536489bedae","sha256":"7b412d10da6a93ab295360a312e5120b48ba6d5c7e8866ae95cf2fafc3ff6988","sha512":"00487243c8632620a7f06b0894d6acc2d55e695f49a2ec60edeb448ebf8e6e345c6e52de47f404d5ab7079354af13b605f830cd0b8ac9ecddeda61878c127fa1","ssdeep":"24576:BHQ7FHQkXbkwF2q9LGmmHJFzbTRwiBZigQ+Lv5MvFfGYGA/u3:q7FHQkXbkwFH96muJVH1YgQWevFuoS","tlshash":"f025235df314422bda3557b01ee99785b3b9d0b1931b0b3e0aad63189fd93ac3c49ac4","first_seen":"2026-09-05T10:01:03.260764Z","last_seen":"2026-09-05T10:01:03.260764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backend.shrinetheme.com/api/analytics/v2/stop","fqdn":"backend.shrinetheme.com","domain":"shrinetheme.com","tld":"com"},"ip":{"addr":"104.26.1.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.477Z","timestamp":1788602386477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shrinetheme.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 13:02:34 GMT","end":"Thu, 15 Oct 2026 14:02:30 GMT"},"fingerprint":{"sha1":"1B:F9:B7:D2:9F:AF:DA:E4:EB:10:98:0E:1D:C0:1C:69:73:DE:F7:07","sha256":"5E:9F:51:3F:AE:E0:46:28:1F:D7:14:F4:AE:44:69:D8:41:E6:8C:89:09:93:2E:3C:72:BA:77:A2:8C:89:1B:1D"}}},"request":{"raw":"OPTIONS /api/analytics/v2/stop HTTP/1.1\r\nHost: backend.shrinetheme.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tryrovina.com/\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLC%2FvJncOc721Kq6WOwcvfnFBtNSrkR6d2H5pYbFbMejPe1e6JsJInSloGYlC4U0qfGFqbIJYVseKATuO7mJL4O7doU%2FFZC85BF1xGJfSfKfg1V2Sl60tSsXN6pgtuqdQra%2BNZU6E8UP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36462139b7d2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":589,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":58,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/td.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.752Z","timestamp":1788602383752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/td.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-7a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 379620\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyEg8NC7JbQxFl6v7pXWnGTHmBTxiR6nLnsiSRgcgIaPqqTV3kyfF370Av9syHPiRAvuvAzimqQo6kSKVTkcG2Itrxv3UoZG6B8HTBIpECiQvsk4LA7LhaWG0fR2dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462027b0656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122,"size_decoded":944,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"ce82ae0506ece64545321a5377474eaf","sha1":"1e7b76989eb3e9104bf42a8eb64f169120bd8ca1","sha256":"9bc51a23aeca73146a0c5c43a1b79143654f5be5b340bfedef85c00b61bf4a44","sha512":"350e62e0edca316f7fdfaa0bf3e45648c251f969dd23105d48e5d05f9f2b8eef9d521fb4e0b607959dc8f92bd1b6c3e572c2f379569a0087ad4a1e927233b0ff","ssdeep":"","tlshash":"25b092e682a02e39dac6b5bf11e4d2a29cb21354226282891887846d134825971c4192","first_seen":"2025-08-29T01:16:58.645912Z","last_seen":"2026-09-05T10:01:03.423435Z","times_seen":100,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/do.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.784Z","timestamp":1788602383784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/do.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-18c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLlaQsERAUzMRH2x76fMdpLnba7pTDNx9xC9M6o4Mk9YxgYX1b%2BxcNyTVbE7ManpJdd0GIZbCLVTASdzdnM6Nn5XE1HbxHwljAuy2GaFlqClYByetCf%2FeHlcepnucw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202ab1c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396,"size_decoded":1223,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"8d661528bd3ae920aa23a8eee55453d3","sha1":"f8473017d3e05e6328f4261818009de720218f58","sha256":"2506bc21a52b79957cb20d08d2022cde9e1d02a058470caa7a96d38f6e724b4c","sha512":"31570fa56eeb5ae40213f62e0d6554d09d6e3bdb98f78ee953b1f46ca46676de9d0a93e88c61014374383407ff8ce15014cc32bcb8d683e61b2c3e9e7212c736","ssdeep":"","tlshash":"29e0f1f93bbe5cbfa9e10854ba05735bcc358349c7d84338cc8f82480b03980a465a01","first_seen":"2025-08-29T01:16:58.583511Z","last_seen":"2026-09-05T10:01:03.424932Z","times_seen":104,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.832Z","timestamp":1788602383832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-284\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjjqxOqqTH1sK%2BJVDoCOospRllbrKcIgDtWpsHwwPHzi9Kh%2FmKYEHly0S%2BSXydbgk9o0OwuUaI%2By4iJ0Bt0LxhDIk4xoJ%2B1n98Y6%2Bt1swy1Hn8KkW3ew7ZPAPILgQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202fb3a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":644,"size_decoded":1479,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"b59455a2d802ae0a21b01c14ad68dce8","sha1":"c9144a23b237d444ecbc9405d7243e87c2e6a50c","sha256":"48d2fc855ced8cee7fe368c9974bf1975ddf6517dd6dc9eb8683dd51fbe9fee7","sha512":"183bf50658652a6c7ed007a8f6fdb659fb77564e99c3386eb395b1a4aae572e62e7ec36f59cecd7c6438457ee1025895073013de8b9a9db986e0a43b6ef49732","ssdeep":"","tlshash":"e2f068fc3ac0083775a5884c2b3360637547cbe5f44518aec1060ed91c4252c56c5d97","first_seen":"2025-08-29T01:16:58.485408Z","last_seen":"2026-09-05T10:01:03.426912Z","times_seen":100,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.971Z","timestamp":1788602383971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1c5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2346282\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I92FPkFrbW9vA5Q5QZdpecuiQc%2B7Frh2OvG0FY8QD020MCk8XQ52s6PKdP1I4oGxwjEt9jtrtL5YmEELPwrN%2FNcPeUUWIk9LMX3lQjFSFdrV5KlDao2IdzY5MzHfhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 453\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":1281,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"233902b2148dd672f1b075aa99a99013","sha1":"552426f79ae705968a2b8ee4a56e290c4cb0ded5","sha256":"6b8b4ed3916a89ac16ca96278fa57a26ff3846fab049b7f25986e79bc17cdbf9","sha512":"a7e4073a8e17832f54cbf9d6b45895ec15a44bfe81fc22ff343fd447c8b36277e3d99a514d7fe44f538e14c7297d0f350c51d7a77066841ba0d04a8aff8a80e1","ssdeep":"","tlshash":"50f0dc97e3aa5d2c8e0712bb83411608e9a13289cc273866aa62e86866041983580160","first_seen":"2025-08-29T01:16:58.577676Z","last_seen":"2026-09-05T10:01:03.427658Z","times_seen":110,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/kn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.032Z","timestamp":1788602384032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/kn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-2fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1535885\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHvlf5y9nKaFG8LR9%2Fh5y%2F0mdkce0anz3ESqKCOlWTdg%2B%2FlTLEtFZvvNXgHOdoGt8GakdF4uXqbf4OQYYrUWec8y%2BZuimz3DAe0XRfYzIvRcktP1zHU2xl%2FF47TWBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462043bba56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 765\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":1601,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"a51d4ff1a8e43d4afd081df58228253d","sha1":"ee766c2cfe0100c5786cfdc7f0dcecb0747d81b8","sha256":"6592211d56a37d04207c20559ea52bc8cc3382f1f174364bceace52dd223fefe","sha512":"62f2801184fdc999774d6d2adf008cc0d68721e544c864c15ce0b5a2e5b571fdff39480378953e3e52c83dbde25e9d54597290132fc494008be04a2433958c0a","ssdeep":"","tlshash":"2c0165f9fb763de90b47513f59c904985c038453b017849c23a2c1539c480af01c6274","first_seen":"2025-08-29T01:16:58.535675Z","last_seen":"2026-09-05T10:01:03.428663Z","times_seen":99,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ua.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.124Z","timestamp":1788602384124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ua.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-69\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 380842\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iiI6Hnjd3v%2FOsqWTsVXcDztQ%2F8aCXnm3pWTIUQCoa3DT%2BGb%2Fe7cJl6ILg5jWnQsmyPp9vUD6ac%2Brp7uEHwK2%2B2xHdDwfcNcEePa4IN7GQ%2BgTrPBOzCfjGiu7MnhKvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646204cbd756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":941,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 2-bit colormap, non-interlaced","md5":"d4b609a5bbbb93f2e2ea8dd01b4c940c","sha1":"b84f4273eda8a2d9337962c4d42aa48044eb7697","sha256":"a7474c46f2e957e4d27bd034119bc4be4bf9b1faf908338d0f5d97574e1ba07d","sha512":"90947b5eaeef6c31cc0fbf53877ae0e1f74b20da32dff0c675cdfeb9a32a005aa101586dd55c125982c40bc2956d4a37fabd4106d0f88a72764489e0aa0f5f01","ssdeep":"","tlshash":"d6b012c2228a3d32e3480337136811c1b534f3191321460ba14bca350011188c5e8fd9","first_seen":"2025-07-08T00:55:32.413416Z","last_seen":"2026-09-05T10:01:03.429591Z","times_seen":111,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.document_CC4DPZSc.esm.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.029Z","timestamp":1788602386029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /shopifycloud/shop-js/modules/v2/chunk.document_CC4DPZSc.esm.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.shopify.com/shopifycloud/shop-js/modules/v2/loader.init-shop-cart-sync.en.esm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 291\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, must-revalidate\r\nlast-modified: Thu, 27 Aug 2026 01:59:39 GMT\r\nage: 5005338\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/shopifycloud/shop-js/modules/v2/chunk.document_CC4DPZSc.esm.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eU6kqP5Z2%2BqxJRivSER7lptu9ycj6jIy3%2BvCrPH6mqhj2rtjNq2UBzlifWZv7QDidNoNkipTMA%2B%2F%2FAWDJcLLybzavMu2AUqSEcED%2FTR1tW5xz6b15feh%2Bq%2BmVCQALoeAgg%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 0874120f-e26b-4e08-b8f9-1d0fbde3ced9-1783597047\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646210af452678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=33.634, imageryFetch;dur=31.958, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":537,"size_decoded":1518,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (480)","md5":"d134ea68ae5524c53704c644179bc0fc","sha1":"b81b41ebc725fb869e21a6d33e39273fb97f6849","sha256":"18b1adf70472ce68ab4acb8fd8f654f2c527a0835befed8be0e43f6add6a8a77","sha512":"a8df99c2579e9105f7156465f5c73d8c8d933ba1c248732168fd75c78b88eed693a0334d7a996ce976d69cbc19d7182f2b54f259a30d5c3783588fc64167305c","ssdeep":"","tlshash":"4bf09ee12a74bdf808de56779114f1f99e8800dfb2b316e0e11d4f6c1870cb572040ba","first_seen":"2026-06-04T14:11:03.257549Z","last_seen":"2026-09-06T11:36:39.569382Z","times_seen":47189,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/fonts/plus_jakarta_sans/plusjakartasans_i7.b76bf83e39a192fa9b337a7676a53552236df177.woff2","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.256Z","timestamp":1788602386256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/fonts/plus_jakarta_sans/plusjakartasans_i7.b76bf83e39a192fa9b337a7676a53552236df177.woff2 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14620\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FJBDrEBwg%2BA0QqlSNWl5Fk0TcWRnXbPrzLa7jCN42wzpH%2BPfCV7Ns2TnR6Ixj%2B9mvGjvdBn9vkCM1Rmwjrl4jtAWC9C3KQUtOfKbRu8Ozb9muN6QYNaCYN4xK1CSEcQwjvFDg%2FP\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 18 Aug 2026 12:19:37 GMT\r\nage: 5191908\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-fonts\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nx-request-id: af4caaec-6209-4ea8-a0be-e36445e79eea-1783410477\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462121d26569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=223.906, imageryFetch;dur=112.634, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14620,"size_decoded":16101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14620, version 2.4653","md5":"6bfc72aa1b847bf72aa599dad1058718","sha1":"b76bf83e39a192fa9b337a7676a53552236df177","sha256":"75400c29331634f7b7c5a3fcda477033fd4c8f12cf36cbc61bc91705f35e2219","sha512":"920dfb5b0bd9f8d7afb3270cc6582b3e1785f38f709080e89461ea942668d7bdaeee27c2fce12cd3c1f670118776fabd977e3df9e6d2f165ddb7f50115e1ab27","ssdeep":"384:oERczWXqFEDxTNzsrYI+8BJWirekNB4gu4u0wiNjB67N:czOZNznI+8B9T4f0wiN16R","tlshash":"1b62c00a251bb44ef46eacb9ed33025e7c65adb89a04415977c33e73c7ef0c665740a8","first_seen":"2026-02-26T22:07:44.928228Z","last_seen":"2026-09-05T10:01:03.430916Z","times_seen":14,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.722Z","timestamp":1788602383722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-3f9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwZUfNMqYC20Muo9IDdERVZM7mmPd2tHaY56p5vYIhbG1Xu4SS%2FBMKwo1k%2B6TZrhz9ZfJIiozkAVHQywrAY%2BYG0hAhorVrvcG0nfVJ1ECnqnDA0amCKgnfpt7bjagA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462024af056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1017\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1017,"size_decoded":1849,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"b7fa081c23d835e5ae74b02e2965fd26","sha1":"cc4e22634223cf9b28468348ff7a0d800127b58e","sha256":"b76e7ac721e240e6db828ec050d7bad2ea317cb777514bcecbf4e8801d37ae9b","sha512":"4f291a4962e8a185bb38fba0091abb74d7ce771140ec30c67b66db59d4975664a29e31ba084c79ccb6252409eba62f7c67cdd62c606a5b4d91ba530cd68e7e40","ssdeep":"","tlshash":"b211a5520af19cc85305864be9a1c44f5d9132c60bf988da6860c6a3167147b18d5193","first_seen":"2025-08-29T01:16:58.420255Z","last_seen":"2026-09-05T10:01:03.431541Z","times_seen":100,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/si.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.011Z","timestamp":1788602384011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/si.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-139\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00S6bQeX10Et6%2Bl%2FCGmNaiO%2Bq0qGUApdkxIL8oL3bUYeP%2BRsZizPL9nbLGl72pPDLMEYXQZu8vYE9hO9R8Ba27oMAVuEpDO4dwyHJu3eBbHLRgqQUbaJ%2FQ8Hss%2BWSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462041bad56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 313\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313,"size_decoded":1148,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a632ac0afcef16ba6f7d6ec8c2e30236","sha1":"f3209b2c0e1859a769328a8f1ad33f7f5c13aeab","sha256":"37c463135e3fbd09539b6bbcd2edb668897657161b7e5a205ecd0294f4100f14","sha512":"171538645c065e8bae6842a5b2425b862c4b2c9db31efbbebb0900d12fb220064d28b9ba7484085b920c8b902f02cac18f46d24b313a6193c8da36fc33a2aea4","ssdeep":"","tlshash":"40e026052a29a934a924db2e2c98090e95f31a2cd72101a3a08b98529e6e09a9828686","first_seen":"2025-08-29T01:16:58.44048Z","last_seen":"2026-09-05T10:01:03.432424Z","times_seen":155,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.058Z","timestamp":1788602384058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-119\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hg3GgmtmZpyxuBBl%2BIC65s93DgWE55iDYh2p6Jz7VuHCHDbRgZt1VZ1jqajr9%2Fu76dCc5QEdQunO6QdKxDtkangqILt1fTlAj2xnP%2FO04gs%2Bny8OoarFAZLIAc0%2FOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462046bc256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 281\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":1114,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"f794084656d5a6c4c6c3501ab3cb4112","sha1":"7f73f8dae34b65d57aae779fc51e620a1c13dbe6","sha256":"49c57626ec7f16370a254b7020c6d1bd0dac8de1a303b9c614447db2259cce7a","sha512":"5d050ef5778ff2289788b5d6c0a5cf6b35e126e79206d11b2fbbc47bdef8970647984cf94b70c145ea2b23e93c8e7ef802931724ad6a42f95bc7b106232cfd25","ssdeep":"","tlshash":"8bd0ebd0e254be0ec1af3af3454c0b98f5f01419a300852733af80250f156efa081030","first_seen":"2025-08-29T01:16:58.441464Z","last_seen":"2026-09-05T10:01:03.432939Z","times_seen":100,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/tl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.079Z","timestamp":1788602384079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/tl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-17e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLN4wZkzt3TxUavqObuSg8zMCTtJUorywwh5u6KZ9JwmP4fFnKFe0pbutQ0DsG3zFZppkvON%2FObtdQtnAG%2Fo5sdW%2FDpamfdPos2A4nG4KN4wgz%2BKnt48vkOrmZHUdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462047bca56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 382\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":1213,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a3a2ef1b80b901d0e3691d3c5e2122f9","sha1":"54daf0a3c75a9c789d21d63506bd00b18019fdf9","sha256":"40f66b4ca1295526e85985f0b853b3bfadf821f3992de3500faa4faeaf0c53b3","sha512":"30aeae38df51c3be9c8a86087d6c4315b292c35bb5414d995ebc4dc571bbc3e7a37fe02d6b24036780a86a892c5388bed6cc383a1f237dbf92143ff9acff167c","ssdeep":"","tlshash":"02e060c025016bb4e2a38f0a237fc233b9b303808170b3e030e760a0af120e796c1982","first_seen":"2025-08-29T01:16:58.554243Z","last_seen":"2026-09-05T10:01:03.433743Z","times_seen":100,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vitals.js?hsj=1","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.274Z","timestamp":1788602386274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/vitals.js?hsj=1 HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yw7bCrVn2%2BqI%2B0HeaLXcAeM3TMAWnb3miOPqXtB3kKVra3oDj0Z8BJNm1iGTRrViTYNAo%2BiJqeneOUS%2Bk4K1yJOSMm%2BGX5ho0a%2BkRW0KlIOAo9UKDwx85zHT95Ntt9aiGw6LxwZmgQ%3D%3D\"}]}\r\nlast-modified: Tue, 18 Aug 2026 00:43:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6620\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"52be93018a39897ca218f0b4ea1514d2\"\r\ncontent-encoding: zstd\r\ncf-ray: a3646212387856be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32965,"size_decoded":13452,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32965), with no line terminators","md5":"52be93018a39897ca218f0b4ea1514d2","sha1":"cca76e2d064a121f7b50809b682a866b2d09d7ea","sha256":"ce774decf6858d0001a049a1ce7955fbb7c9b02803cfcf43768c24936319ad31","sha512":"15c66c939a03cfd29bb5e09efcae11f20a268ab8df700e088008d54d8789ac308e5b0390fa6a503b73473df66c05143b883756977db808ee0911e6ccea4743c0","ssdeep":"768:zj/PI0uQ1oDNIJcyrCWzPevkm1G1KWmsBKY/PL9UJw7f+/292peZlyrM3H2/Hvtg:f4ECiCBNCmTvTyFI43","tlshash":"99e2518227c5bc01279b5b77b717a1e2f43a9de9b588089ef104bc64f9a4903fdd5a30","first_seen":"2026-08-26T02:18:06.738231Z","last_seen":"2026-09-05T10:01:03.434761Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/vitals.html?hsj=1","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.645Z","timestamp":1788602386645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/vitals.html?hsj=1 HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pc1tjS2EpyHH3hbRc6RHmekzrYZE2o0G2qXPFVHo03c9o98n5HTZ4fujWVBwnqw2gIEVPU0QxW8TC7UNzkHZZyjt4p0d7gjX0DEmfzTv78pXLZKgujPaKdrQ%2FcHwdqBK7SWdypNCrQ%3D%3D\"}]}\r\nlast-modified: Fri, 07 Aug 2026 19:12:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 391\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a36462149b0d56be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":960,"size_decoded":1143,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9a177d5815444919bec6f5bbc653d4ba","sha1":"af030e8e3ec984e6916401a3afc19218d8f0aa45","sha256":"cd1c7f6424894ca33488ea987818ed859bcc88c595d83db9e0732935de7a8dcd","sha512":"ba7aae14c436bfe7966b468096724cf4ab3bc97738fea095e3104186c0c9f952ce1f2e3585968ea966f6aacc82953ec4218bf59361d083660376655976d48a9a","ssdeep":"","tlshash":"5311cc551cf6815245a2269667f3f608b26635076404e409b9cdc0ccaf85fdecc97eec","first_seen":"2026-08-26T02:18:06.787074Z","last_seen":"2026-09-05T10:01:03.436099Z","times_seen":3,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-accessibility.avada.io/scripttag/sea-accessibility-display-manager.5b2d851b6a1c71ac3290.213970.js?v=213970","fqdn":"cdn-accessibility.avada.io","domain":"avada.io","tld":"io"},"ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.561Z","timestamp":1788602387561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-accessibility.avada.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 16:09:19 GMT","end":"Thu, 22 Oct 2026 17:05:18 GMT"},"fingerprint":{"sha1":"96:21:05:71:CA:22:5E:9D:15:9B:F3:84:8E:00:80:50:AF:3B:17:CB","sha256":"E0:AE:C1:D4:8F:18:17:EB:0A:A9:80:81:6C:80:F5:0B:EC:2A:C0:72:FE:45:7F:1C:4E:AD:C7:AC:73:04:E5:22"}}},"request":{"raw":"GET /scripttag/sea-accessibility-display-manager.5b2d851b6a1c71ac3290.213970.js?v=213970 HTTP/1.1\r\nHost: cdn-accessibility.avada.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjP8j%2BSR34d4P049ZUxLIRg7PM04tSGeYAUdKWXWl7vu6oR5Gb1XdVYsB1Ij1pb0a8sEufyLogu2WOFUTGZ0LD4%2BD%2BsenLMY6R%2Fb6JH4e7elDSgO%2F6dlmnbWoHUrDKt%2FVVBcmLm3uuGS9aqWEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c08987008db9b2238f6d3222a55f4846\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15552000\r\nserver: cloudflare\r\nage: 93992\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a364621a48fe1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7026,"size_decoded":3619,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7026), with no line terminators","md5":"61640b8dea6cd9c19959ca1b44e7814b","sha1":"1b86eabcd222b44910602692765efd733a71b860","sha256":"2ab4eee8c8490745d768d07ddc906f8b454ff5dfdd214508593aaaed44ef3335","sha512":"e96c740785eb7285e121bcb6259df6311b78006c0ca85a6f8f21b949a5b9dd495bc536d05b7e9f0ff1ff5f04819d1b1f805352ceaa880861ed5d1c29640e45b2","ssdeep":"192:eN5sESZieWKdgaU/MUfnyxG4K0RNd+wXoZIvEbvjN:ZEGkMUfnyhRNu","tlshash":"8ae1a6cd3a8bf5b613866167d22f7582f1182c97203e1520b3268ef5682444ef772f6a","first_seen":"2026-09-05T10:01:03.437042Z","last_seen":"2026-09-05T10:01:03.437042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/bf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.742Z","timestamp":1788602383742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/bf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-f9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1634238\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bk3q2%2FVXrP6vIAD%2FOz8JF1%2BspjKSihlybnzZ35dqzlF3a6cdOUntT9gG%2BcDJRWnD1C83Epx%2Ba%2FE1dnUoUfqwBkCh8sCFDx%2BeFohX15FMVrH0cH4PN35nF4jrQ5V3Tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462026afd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249,"size_decoded":1088,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"c55ef920be57369d2d6f170615b4a2da","sha1":"8940112b8a5c2f5131e333a5ad9c38043ad5e340","sha256":"3c205416bda3c495e8a3e098ca5c73701ee854e73866dd1d43275261723ff83d","sha512":"066a235311929084626ae1de9d547a0f57424ba35ff5d9ed2302577eca33d3d6439c8d878ab52acdb15790bdb183562b8424d7a7314cdb6d8d6902b87456dff7","ssdeep":"","tlshash":"a5d097c082caaeb2c7ceef3fc0587c90980b7bbe52640b030621842b4342000ece368f","first_seen":"2025-08-29T01:16:58.588143Z","last_seen":"2026-09-05T10:01:03.4381Z","times_seen":99,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/open-dyslexic","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.794Z","timestamp":1788602383794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:00:31 GMT","end":"Fri, 27 Nov 2026 19:58:53 GMT"},"fingerprint":{"sha1":"21:BD:E9:CE:6E:DA:22:79:2E:84:AD:31:B9:95:7A:F2:8A:86:B0:88","sha256":"0A:FA:E8:69:3C:9D:0B:8A:41:54:77:83:1E:64:A7:20:19:8D:96:30:4E:AC:01:E0:BD:26:40:09:27:1E:94:6A"}}},"request":{"raw":"GET /css/open-dyslexic HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 2049412\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRoy4t0xAGubanMgQ7fMY%2Ba9a%2F0YdCPL2ZCuX53gihtfHiHMROnwSsV9bzX6CqEDSAz2yLIgMLTSoWOljlYa%2BTOzbe%2Bz8CSRMKloTOvg0KblNDaPPGv6VuK5jrcvdJi92zGETEM%3D\"}]}\r\nlast-modified: Wed, 12 Aug 2026 16:42:51 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3646202cf954e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207,"size_decoded":873,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"66d68e54302a05651f870e1bd8b09a23","sha1":"903d7cd840c7b9c89c333fd4a72dd9f38d21723a","sha256":"300533985279b2e1d3e22a276599bff1c6cd7424ea1e3b6c9a5e0931e3ed85cb","sha512":"e2c71394333cccd84b75a4feb32bc11b32f796f246a0aad93ffec4db431c8d2cd34d609c7e31002ce7fbf68f2c82ef9c5421a8d1b1079d3b270e1d63e764dca2","ssdeep":"","tlshash":"4cd02398f647690034310c4f33cf2124cd0ad007300dc6397f796c0c4db6915014179c","first_seen":"2025-06-06T04:15:51.063963Z","last_seen":"2026-09-05T10:01:03.438972Z","times_seen":914,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.config-security.com/event","fqdn":"api.config-security.com","domain":"config-security.com","tld":"com"},"ip":{"addr":"34.149.60.135","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:45.429Z","timestamp":1788602385429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.config-security.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 07:15:04 GMT","end":"Wed, 04 Nov 2026 08:08:17 GMT"},"fingerprint":{"sha1":"F6:56:AC:38:48:9E:2E:F8:3E:44:53:FC:6C:EB:21:15:A7:B8:AD:11","sha256":"43:B6:A6:19:A7:47:87:37:34:01:7E:A6:65:7F:5D:4A:06:DC:2A:22:60:F4:1D:67:7F:F5:7F:52:D8:07:AC:EC"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: api.config-security.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 273\r\nOrigin: https://tryrovina.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":273,"data":"{\"id\":\"mto7ofun_0.yg57gbx0ufl\",\"action\":\"profile\",\"avatar\":null,\"time\":\"1280:1024\",\"host\":\"igkqfc-ff.myshopify.com\",\"plat\":\"SHOPIFY\",\"url\":\"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\",\"ref\":\"\",\"ver\":\"2.16\"}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nx-tw-trace-id: b27f1227cf65c7fe70e9aa60f627a86a\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 09:59:45 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-09-06T14:01:44.058817Z","times_seen":771838,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":374,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trackcollect.com/metrics/beacon.js","fqdn":"cdn.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"104.21.31.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.273Z","timestamp":1788602386273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.trackcollect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 15:21:59 GMT","end":"Thu, 29 Oct 2026 16:21:55 GMT"},"fingerprint":{"sha1":"B9:C1:51:0B:DD:59:B2:06:99:B7:C0:12:AD:00:33:EC:68:DC:15:97","sha256":"48:64:BF:B1:71:64:52:EF:5A:20:A3:45:4F:37:9A:6E:03:C7:A3:A8:27:2F:57:70:57:C6:92:8C:93:02:EC:03"}}},"request":{"raw":"GET /metrics/beacon.js HTTP/1.1\r\nHost: cdn.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Y9IgqyCSms37xso3oEUnJ5rMH1ixORbMhuMuiCFoorT8XAc2ZiZ9QuSa9%2B90Rnv330YKbrFebg4EEJI7ioSiObBG2NFknKJtyUM7Rv4xWXs%2FqeJE2MKqA8XhdtGvGK%2BINp8ZpbNYA%3D%3D\"}]}\r\nlast-modified: Wed, 05 Aug 2026 16:42:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 6843\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"50fd403df914b6cc430c52bc28c30089\"\r\ncontent-encoding: zstd\r\ncf-ray: a3646212387556be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32094,"size_decoded":13679,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32094), with no line terminators","md5":"50fd403df914b6cc430c52bc28c30089","sha1":"00a21c3c57a15caaf990f0a7db041518156f4ebf","sha256":"f408b36739114c344ee083ec218c41ac9436f3c8f3855f84512c246a7319abe4","sha512":"5387cdafcc9a7b344e82559be8f9c591622f81a5529a281fd0f8dde423407d4da20147a66e47af2e1b71be060d2d66bb5a73a5604e782571b6aea724b1bd17d3","ssdeep":"768:m2r8s1+J88//afQSCpSCGB00k7nf5Q4dNRri9KCboZqQSacrRRWv0z2vKkS9/yoC:f+hSFrAGIo1l6SJ9UINfwGc","tlshash":"b6e23e8277c1b88103978bb7372ab1d5e02e6de9f688085bf541bc90f8a9502f9ed574","first_seen":"2026-08-26T02:18:06.752611Z","last_seen":"2026-09-05T10:01:03.440029Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.trackcollect.com/api/h/v2/edge","fqdn":"pixel.trackcollect.com","domain":"trackcollect.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.trackcollect.com/metrics/vitals.html?hsj=1","date":"2026-09-05T09:59:47.602Z","timestamp":1788602387602,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/h/v2/edge HTTP/1.1\r\nHost: pixel.trackcollect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cdn.trackcollect.com/\r\nOrigin: https://cdn.trackcollect.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T13:58:32.12414Z","times_seen":18311889,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17889453959","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.526Z","timestamp":1788602383526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=AW-17889453959 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\nexpires: Sat, 05 Sep 2026 09:59:43 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 05 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159816\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464792,"size_decoded":160466,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"822fb9664c73db38870a771a85f34c25","sha1":"35f757036bdc09ed6ef94f17c2fdb427af07808d","sha256":"bede191df179890a4e10705fca11571899213a3d49ecbffeeb83e66f843b095a","sha512":"455cf9ceb38fd66645d697e0cc3a9fb3e782fe1f485c5ecd448a3b7fab32d0b1cd0e8ded623b04480b15130e5be213c5a2ee75177efe2d5b6ccc8509127f914d","ssdeep":"6144:sFH1lxPJfMXrrzudf1UZyc3DR/dEpv3yg+0guMlc+p:sfJkqHg90gBcM","tlshash":"2aa42acd73d674229392f574903f018bb67a29a2b84cc899f289dcd42e3469a5173f7c","first_seen":"2026-09-05T10:01:03.441107Z","last_seen":"2026-09-05T10:01:03.441107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":44,"receive":46,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.776Z","timestamp":1788602383776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-22f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374726\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46BHtuKnxYWkeOW021n%2F75kC5WiAtpYUUndvFf04tj6vqW101n%2FWd%2BA9Y4lYRyewt49TBcyF6HzD5ziN9q9mt0fsHGpZct1QDL8e9iPSdRxNL405KCcpfxaiGLHbvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462029b1656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 559\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":559,"size_decoded":1388,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 8-bit colormap, non-interlaced","md5":"439fb1a81e7d8a8f2dadf08e28327ca2","sha1":"c4813cdc32f845d9caff38972d9e123dcac3e215","sha256":"1a3d4cebcea35731d023e5ba47474129d4490e59d83bb348f36a60a8c64a7ab5","sha512":"315a27a42881a8409750eea236bfe35f9016d1f8855b1b4725a2f95a60dc1b980d7c799011fb7a602ab9b805021ad2096eda491ddb3afa07b94395e4bf9bc2e1","ssdeep":"","tlshash":"66f096d321dcacf4ef149fa100f9879648253b0154a14c974d5150744d824009080423","first_seen":"2025-08-29T01:16:58.558542Z","last_seen":"2026-09-05T10:01:03.442306Z","times_seen":129,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.836Z","timestamp":1788602383836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-ec\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 359159\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LwPtWoxvsR0sThdaEwF%2FkiaAYcf1JmkyAbs1136sZrA%2FEhON%2BHFLjoZkVyObFvGZRxZ8PSlR9ZBIj3xOtO1BVUaSGMnzVPwv4s36sl0AikoPoMfJDjglsU7GRubOHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202fb3d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 236\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236,"size_decoded":1064,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"8793236122d9cb78a751dba258430dd9","sha1":"f960195a61c9925d791a753473e6331c2d6cfb47","sha256":"57ce45d70c9d3a81a2e4d79a3974676d556e49aaf3ec302ab5bcb547fb4b3c9b","sha512":"94e9df25689d525c49e8e59533f410b7206370bfe7ff681b54a4487b0e4dc08551cd8cead3618fce04754e04ebde10aa62f4784ae48fc315aec7ffab5995f3f5","ssdeep":"","tlshash":"aed097a022406dace650fa1b62e86080f6e31600b3140055039e88ac939825764a80e7","first_seen":"2025-08-29T01:16:58.686433Z","last_seen":"2026-09-05T10:01:03.443139Z","times_seen":100,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/md.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.941Z","timestamp":1788602383941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/md.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-262\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 113239\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKFrL82jg1m6vcALncWybqfNDVLASClsfsmexli17PelHSNu%2Fye4rDI%2Bahaxr3%2Bewb%2B%2BKSEHviJ6NTTDhHTI57KNX1RM4qph73ddvKsItoQFV5QlNfl%2BRYU95otizw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203ab7856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 610\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":610,"size_decoded":1445,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"77896fd9c2979ce8a98791b912151c1f","sha1":"8ba810776f938326641ce0c07595315850973731","sha256":"31b2f57e339d539d943f9199efb00dbd289a4518e461e3d2f724d41db9c9fe0e","sha512":"4bf8bceffc1e6d37c11afaa6fbe3548b1a0080b0fd9877f4b223116e9155d15717aee8844d647bb95a38e21d97e0cd5f0bd3d4c6769ad5ea6d4cd463c2c2b25c","ssdeep":"","tlshash":"18f0628262889d786552472353678c8bfe1612a432028c45a039d2211e3ee6ec242087","first_seen":"2025-08-29T01:16:58.506199Z","last_seen":"2026-09-05T10:01:03.444065Z","times_seen":103,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/pg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.975Z","timestamp":1788602383975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/pg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-310\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2276523\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u61EmgXhU0GhJOLWyaOx2gg%2BFVxQq32hq2KT1eFk7BX3pxdeee%2BIbdlgTuvFuXl6i36IxVjbHeLNRaPYVDuTgsyTfm5KTHRF6NxK3P8CzfJVzau1DZJkYbYulCiBbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203db9456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":784,"size_decoded":1612,"mime_type":"image/png","magic":"PNG image data, 80 x 60, 8-bit colormap, non-interlaced","md5":"7c3aebca74594c426af2ce718f1732f7","sha1":"7d041234b720dda5368aef8ca0768de1da6ce52f","sha256":"fc790fba9d6b76f8e7fdc7436c0b6a01ac42e19820a17eb272c4e7b48d466f32","sha512":"5d8ed08de4f392706a293b520a2e1f0726278411b98896d77fba9cd6b881088a442d41a05e2940d8aaa048d04606b6d33c3b941734c44d027ca2fd7cd013b56b","ssdeep":"","tlshash":"3c01bad679000cacc7b3c227437d2525655485ae51c9e3fd344f90f2d3c35970493e65","first_seen":"2025-08-29T01:16:58.430917Z","last_seen":"2026-09-05T10:01:03.445248Z","times_seen":99,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/to.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.085Z","timestamp":1788602384085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/to.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-9e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 729327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33CO2KPzMyMdINZjXo8dbMogJCQhZQ1eOYITznpxKu5YcC%2F5r4mzJ4lyTaRFENgcAWZc2kuXlYnp8pdzb1btI%2F2bfT%2ByPD%2FRqjH4pg3Bxv2%2BUFy0ciWW%2Bs26WhQYDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462048bcd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158,"size_decoded":992,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"cbaabf4f467712194b2ddbd92cfc87b4","sha1":"bfe12545d4d078449464c34a1b394d950e26a3e1","sha256":"d416c9218cb371a4caf10d156d3c15f962ec68e74ade00888fb088e8c8221f64","sha512":"f43c8957d6095eaa12dabe2aeab6726f1e37086040f0635bce2c797137ea4103623315cc33461963293933b9ff24f4b9bcdf08d48a0c9b6d77a9fa2337346d1d","ssdeep":"","tlshash":"5ec08cbaf0831c34d652a86381708341fae26a8ca267231a6701982d3b80be2a914996","first_seen":"2025-08-29T01:16:58.536622Z","last_seen":"2026-09-05T10:01:03.446163Z","times_seen":99,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/t/27/assets/component-predictive-search.css?v=76514217051199997821782994699","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.364Z","timestamp":1788602386364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/t/27/assets/component-predictive-search.css?v=76514217051199997821782994699 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 1162\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Thu, 06 Aug 2026 08:38:53 GMT\r\nage: 4847966\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/s/files/1/0793/5619/9133/t/27/assets/component-predictive-search.css\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11wWFc%2FrIuxuAD6j5CwiDbN3dLTB3cT3bjb2XsWyquulBBHNrT7cWaY%2BQddgy1w%2BP5bc83sVDTOrWZwbonbyF0eYxz86wbU2HNrpbX7xjh9%2F2sybCAp7OaIlAk19MwM%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: ea59de3b-fe6b-4537-bfce-f3c8d8c29cd4-1783754419\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a3646212de0c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=137.647, imageryFetch;dur=136.068, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4974,"size_decoded":2463,"mime_type":"text/css","magic":"ASCII text, with very long lines (4859)","md5":"24da19bcaf8ecc423869bb7a76217bbc","sha1":"26567f7822618c13e58cbc3332c7cebc06b1052c","sha256":"1796a9b161ea41d9c73360d28a09f3273d3be0a1ee04307412a9233a4b2e37bc","sha512":"c6b95cc7ea49a48ad9e87a41650df03ea2cb7497ad7bd84ea3493302aa03ce01731cf3158e3581051217d3d3499739fec46db2f7795e487b409bee481c9cfe1a","ssdeep":"96:CquwrJqWq/KqDqwq9Gqj2qqbCq72q3qSqm3qB2qRqFqGqcqm3qqqm6qRqmzqvqnY:CpwVJ2K07Te20Pw573u2QMvH73776Q7a","tlshash":"7ca199b3f63bbd3b3837503cfedd76cf9024a082999616f8fb461a122587ea11427446","first_seen":"2026-09-05T10:01:03.447175Z","last_seen":"2026-09-05T10:01:03.447175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.427Z","timestamp":1788602386427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14798638\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-14798637/14798638\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/c4ff4944ac6545349a57f6aa714683b0/c4ff4944ac6545349a57f6aa714683b0.HD-1080p-3.3Mbps-93124260.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=io1vxS1nthjP4l%2Fx4aeZeRMzKwNDV9kTChQ2FPH1jiAfPTM6pziHIikXP1nCoQkQIAWX%2B73VkgaY%2Bq9Mxg6XkFXiMFVhEzXGp%2FCAeMpXK1rNy3PmEr4N%2B5W9IQAex7A%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fc98f90a-099d-416c-8923-8ab843fc7d40-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e69569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=265.563, imageryFetch;dur=265.274, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1083840,"size_decoded":1085550,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a08b1a403cbfac47ee8b854c7b39e105","sha1":"52bc615666049705c8380595ea659213223489a8","sha256":"3de67846310eb5af7e15ad5177e58d128c44382d4b1b0ef740cd8884267c9d68","sha512":"23db8a57ac757bdf011f36f9387fb00970f89c3857c3e53f1b03e7c9e71360a4d32420a1de466d3e1f8d7f58728a2b0de021d739e6f2b9af09a637943fc37dda","ssdeep":"24576:SQrbS/aiaFSvSyT/i33NXgh8n205EDDjSx4vUIag:S+G/aiaWTLcNXgh8n25jeE","tlshash":"1625232a3b1910d3cb194fbc68f6478b7378e0a4db1a623b9ac12f585ed27ec81445d7","first_seen":"2026-09-05T10:01:03.334635Z","last_seen":"2026-09-05T10:01:03.334635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.shopify.com/extensions/01a0674f-e340-7c39-856d-a810d6687196/judgeme-739/assets/loader.js","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.583Z","timestamp":1788602383583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 00:46:45 GMT","end":"Fri, 06 Nov 2026 01:46:39 GMT"},"fingerprint":{"sha1":"59:C4:BC:7F:96:26:C3:13:7B:52:E6:97:C5:6A:7C:D4:BA:EC:C1:E1","sha256":"A4:44:86:4C:87:C5:9A:33:DA:D4:87:65:75:98:47:A2:80:3D:3A:C2:3B:A7:18:7D:97:16:74:B1:33:EE:42:83"}}},"request":{"raw":"GET /extensions/01a0674f-e340-7c39-856d-a810d6687196/judgeme-739/assets/loader.js HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3088\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Thu, 03 Sep 2026 12:48:22 GMT\r\ncontent-encoding: br\r\nlink: \u003chttps://cdn.shopify.com/extensions/01a0674f-e340-7c39-856d-a810d6687196/judgeme-739/assets/loader.js\u003e; rel=\"canonical\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQ%2Bc4ZuryXzPgrCF5vCFf6n%2BHH%2BkdWJhPKTXXwgkWZtovRW54QpBOkh7zPQLoofxqX1tmWxEd4dh7q77HJXLLvru2OrK3vy8v%2FSnrjpWfudLHCIdk60nLmB18kaXhYhQAQ%3D%3D\"}]}\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: 60dad184-54ba-4a27-a274-912f0f8a60ec-1788439697\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 162686\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a364620169702678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=98.722, imageryFetch;dur=97.829, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9874,"size_decoded":4304,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9873)","md5":"10bfa12a69a36f0d08dc0235818d3b07","sha1":"3335b2c3b9d41f88da6fc7670e2c22c42b6ff43c","sha256":"298063ae70af67c3ead16a8ff7e90d2a85bca0b8159f32b7f3321ccea8d4f9b7","sha512":"ac94b09a8c72c410001e5ed2af1df43c53afdf30080917744acbcc30cb8dac96c849a7caef97839894f91ace7dbcadbbc430e8069971c481ba134fe38a2c99c1","ssdeep":"192:WYcJNcONEfEsPlZWpYCoZmwxjdvjb3yAP59D+rPFzQNEXfMYMAvJF4NHe9ARfyvh:jcJNnNEc/wriAW4qfMYMAvn4N+9ARfy5","tlshash":"fa12a480756482f303532afb69ffb20372d2248df691f808e879a8587975dc25563daf","first_seen":"2026-08-12T14:10:15.946217Z","last_seen":"2026-09-06T11:16:55.777863Z","times_seen":1188,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/files/Untitled_design.png?v=1774866521","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.190Z","timestamp":1788602386190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/files/Untitled_design.png?v=1774866521 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAL-U8ot-7OdNrgo6sa6y2F4gHlnwQ73qIyR_WmOt9cSglkHGH6maqVhKIlxeOyxdR--mr6sHnMJmEIvgP6Aby4L-GmDguFnd_6-arjoJZgBF8ZAQGYpMYRXSAEyAVwWKHSlZOiQ-A4N0lRie_tVnENl7eNQ5Ad54JZObng1UN1hSOfaEpTi_bOIGl3bSnMiMUgq4pNRfNbw2oIS03CsIKdtUbT6s28CzPqwl9GOwBnmNK3KxopUFlaLV0fA2m8bQs0fFfq_XaqenrbFNqtc0kYvMRxCRZArZICItzCnOG3E4OY5a1RLByRwIftDmTs1IqaarnOVVscl1fbM_NEojAcwAimVMXkWVA2pvzyJTAgIiSsbnw26rZC6tWO5IV4fjgy2Lel9brNHClE4sGgEDxwdDzHerXtsYSt55BHF1R-WpCaWvr1gszZcTnnC8zTlQK6HKhjYOpIqQl0N_nbi6j00f1wh2YdGRA5RkPURQKcwic:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: image/avif\r\ncontent-length: 7915\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlast-modified: Sat, 05 Sep 2026 09:59:46 GMT\r\nage: 2459814\r\nsource-length: 15174\r\nsource-type: image/png\r\ntiming-allow-origin: *\r\nvary: Accept\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITWv3mJuIaVdHCfWS9TpSLWmlahxdGaZ4%2F0Vy8gdErlBwTB7GaINIyhWj0hBXi%2B6t%2BFwnYbqQWALwOKb5hg%2FdTXK1wWulFGsvIzwWhQxP8miN1qii3gnYoZXF6bknJU%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: d6e8f968-1e49-43c3-b4cb-647153842d39-1786142571\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nx-download-options: noopen\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncf-ray: a3646211acbb569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=569.775, imageryFetch;dur=82.193, imageryProcess;dur=304.057;desc=\"image\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7915,"size_decoded":9151,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7d9998dfbd89be8845ce8b7f00856ec5","sha1":"9072f523f01eef90d07d39c00689064b82557b14","sha256":"f71e2937dc8ac1835dca0fcd70b53293034128663f65df43272871d635c4a8dd","sha512":"eb5c5fc089deda0f3e8e5405c20e6119fb4578504ad40bfb597c451b34536aac3b788c99968fe8793fe1273196b821c6ba85a192f6bec22684b10cdad740824d","ssdeep":"192:rGEJ5tEEMHnhAWFkEFTb8LDcxxieP3hAv56rRZSIb:rfoHnJH8PcxximAcrRZSE","tlshash":"3ef17da627e24f53cedf73309cc77b99872382b596c2438fb8a2e8124d10191a5bb146","first_seen":"2026-09-05T10:01:03.448582Z","last_seen":"2026-09-05T10:01:03.448582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tryrovina.com/cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0","fqdn":"tryrovina.com","domain":"tryrovina.com","tld":"com"},"ip":{"addr":"23.227.38.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.428Z","timestamp":1788602386428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tryrovina.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 06:49:32 GMT","end":"Mon, 26 Oct 2026 06:49:31 GMT"},"fingerprint":{"sha1":"77:65:EF:E4:B9:C4:E8:5D:2D:D7:FA:0D:5A:C0:73:E7:57:8F:6D:D6","sha256":"A2:45:72:FE:39:8F:59:48:9C:E1:CC:F7:65:3F:32:BD:44:7E:16:42:F8:E6:ED:F7:8D:04:3B:5D:AB:E3:33:D6"}}},"request":{"raw":"GET /cdn/shop/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4?v=0 HTTP/1.1\r\nHost: tryrovina.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949\r\nCookie: localization=NO; cart_currency=USD; _shopify_essential=:AaBxAnriAAEAra3vQhB6QYGIZDY32Hwrfd_yOrE2ErMtIDiDpkrn6oXVcpSGlmQIbCWYoxjuMLEzjcMmTm8STcLdFQkfcTNjggI9o0dXHXFSmBXmz0O3SOCKk90Wb417lj6HEUjJx-M8K8Fj8IqqTw7H9zVtnS-mPhLKv_oGik_8OgXCFJyMIAoE0FC8p8y2h2IisiilWl1xkTjEYgyJ3UrcQ3wmDUte5N0zf7j3EkcgvnfDTnA8XelQL1crDFG7FnF53AaE6iyWoyr0RhZZXH-HoAc0vTK1JLNX7BhWgxK7ySliwD-GzW3zH0xPB7I1u8VJ-o4ElN2gGmXxRupJlLV9_noOSv-MwA5D0hhKlwUZDSp2W3VOUK3qxgZ0L3FSyubVmIrzWDOzV5A15FDukVKJDGOuxn40kFqVGypTrJwfsC8Vu2Ry4JNntkgWtiNc87nBJ34nYhM13TTtraR-LNgVsF4W_j5LFxnizgbgqX7AK6o37wMCUU3m9uNpmFzOyMFh:; abconvert-session=5c8b14e5-a007-46e0-9ff9-febc71a79ebf; _gcl_au=1.1.681753161.1788602385\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 20496823\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type, Range, Access-Control-Allow-Origin\r\ncache-control: public, max-age=31557600\r\ncontent-range: bytes 0-20496822/20496823\r\ncontent-security-policy: sandbox allow-scripts allow-forms allow-modals allow-popups allow-popups-to-escape-sandbox allow-downloads allow-top-navigation-by-user-activation; report-to csp-reports\r\nlink: \u003chttps://cdn.shopify.com/videos/c/vp/b6bd551b6ddb409791e0a7924b2466a8/b6bd551b6ddb409791e0a7924b2466a8.HD-1080p-2.5Mbps-93124259.mp4\u003e; rel=\"canonical\"\r\nreporting-endpoints: csp-reports=\"https://security-reports.shopifysvc.com/reporting-api?source_app=cdn-shopify-video-production-core-processed\u0026policy_id=aab9a444-ea1a-4369-a32b-f5a658701a14\"\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIYf1M7b2BSNKJxlW1W3QZD%2F12LhdDhtPi8cZbxue%2BMl4CwFuDGC5zpuEqCII9iMEztvWQJOpygHExLHQSkcDee5r3wPCbwzssvJ3%2BnRNsccePPE1Hzn5LZG%2FJ6Gbfg%3D\"}]}\r\nx-permitted-cross-domain-policies: none\r\nx-dc: gcp-us-central1,gcp-us-central1\r\nx-request-id: fe8c3da5-c6cd-4e6f-b923-62d9b798aab8-1788221719\r\nserver: cloudflare\r\nage: 380666\r\nx-download-options: noopen\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a36462132e6c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: imagery;dur=505.798, imageryFetch;dur=505.421, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1541700,"size_decoded":1543408,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b309f2626ddb71207161e19c67a6b48f","sha1":"ac7270c6deb7a782bc101d3571c67b91df963682","sha256":"405fa375afd3cfa3610475c3fa52446252d93cf32ea3cca57361812572cdc563","sha512":"98a359dba93d58bc6d260848b075c699b475bcc4f0a59d8d5bbd0508637a37e36a8f6b956a35cf54304a06c7fa7279ecfa1edae8ece7d8dd0dda787d28b50428","ssdeep":"24576:VRW08ASQ3ioSfC48tHsJ5cAD+/J3M2hGFGl2JcZCy:4RjojIeMkJchG8ccy","tlshash":"6b25228ef7a9915bda641770a6ed93d377bac0a40737460b886c034cedc3b5c52e62e1","first_seen":"2026-09-05T10:01:03.232811Z","last_seen":"2026-09-05T10:01:03.232811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"tryrovina.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-accessibility.avada.io/scripttag/sea-accessibility-vendor.b83738d3097e4c0d3ca3.213970.js?v=213970","fqdn":"cdn-accessibility.avada.io","domain":"avada.io","tld":"io"},"ip":{"addr":"172.67.70.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:47.554Z","timestamp":1788602387554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-accessibility.avada.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 16:09:19 GMT","end":"Thu, 22 Oct 2026 17:05:18 GMT"},"fingerprint":{"sha1":"96:21:05:71:CA:22:5E:9D:15:9B:F3:84:8E:00:80:50:AF:3B:17:CB","sha256":"E0:AE:C1:D4:8F:18:17:EB:0A:A9:80:81:6C:80:F5:0B:EC:2A:C0:72:FE:45:7F:1C:4E:AD:C7:AC:73:04:E5:22"}}},"request":{"raw":"GET /scripttag/sea-accessibility-vendor.b83738d3097e4c0d3ca3.213970.js?v=213970 HTTP/1.1\r\nHost: cdn-accessibility.avada.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:47 GMT\r\ncontent-type: application/javascript\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHSXsfFHT7pCdjbfcphx9oXMjK1qD6W8pnhnpoSwJKq7h%2F7ACT3UwqtLWSnDjONseAKi%2FZkMjsue8IuyNoqqGc4hyXtdPehbrKQ5g7z95M6PX3kspRZgZQiG6FLGiESmOym3CIYPbZCkqAFu3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"587fc13e18985b20c800df46499f9088\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15552000\r\nserver: cloudflare\r\nage: 93992\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a364621a38e41525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75349,"size_decoded":25412,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4ba0a7fb610a5a3bfa488466e38d20e2","sha1":"f437a6800a9fcbd9caba488e02ed582a0d4bf928","sha256":"5fab5eff74ed4d3c0c2cc39a91e2ab0cc911bffc9336bd45bb6540b47e2985b2","sha512":"d1dc9de9a86ae2ef01c0bd6e96a3f13c25769f9939363ed9139b3fce5bbb3b00bcac08aa94b5b4e828cc8a0a6787da514d3a64e493e8830d986ca9bae83ede25","ssdeep":"1536:mlnCAVC31aLoNFHWEhzqptgyMbzcw3VETVOmko3mb0wC1ve/2Mb+9p:XAs0oLHUtgo8xmko3nwC1p","tlshash":"9a73f7d474e4f0a547ab60f5803f100bf336a8297859d490f319ace67c7894ea26bf6d","first_seen":"2026-08-26T00:00:10.873223Z","last_seen":"2026-09-05T10:01:03.449517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/kh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.744Z","timestamp":1788602383744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/kh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-287\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05OFwoEYX2oAe0184mFQs%2B2QW178SXr0KRMBp8NzI8L25ap4d0XcYEaJLq3%2FkVZ%2B%2BimpH2NpbknWEgvgIkuozZNcIxfxFz2Ek7MFwS1QBIoF7%2BapEvZz0gWJIehwnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462026aff56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 647\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":647,"size_decoded":1480,"mime_type":"image/png","magic":"PNG image data, 80 x 51, 8-bit colormap, non-interlaced","md5":"a53a3429571669eca14ea9879987d2d7","sha1":"89cf6df7ba2e585f8700854946c5bc5b3650e140","sha256":"1a6db9f204c13dc79e077689c22d7755fea802e807b7bfd6b431a3bd677cf93f","sha512":"3b72fe01e340cd41cf23ad89858cc4a4acec5f6dbc9bebf07a421a51f7b2b514888c598bb2c8693a4c08d02735aa9c3f1eca24f8f39d48af884e08812738b658","ssdeep":"","tlshash":"49f0689561b15e1c3e7854b52dd5702584244d94055257ca351dba90612781dd2641ca","first_seen":"2025-08-29T01:16:58.427523Z","last_seen":"2026-09-05T10:01:03.450628Z","times_seen":105,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/cd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.767Z","timestamp":1788602383767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/cd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-1bf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQVGQ9pAU8KG2dnaR%2Bc6mQ0J1BYRMfDOahW%2FuPH99a2%2F%2BxaFNw02uvaraCF3nTJ3u2LmQ%2FyZRDuouBYjTZXe62YblO8%2F%2FBlja0Z5HKFwN1wPujnLd3pKcDJFZr9XBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462028b0e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 447\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":447,"size_decoded":1284,"mime_type":"image/png","magic":"PNG image data, 80 x 60, 8-bit colormap, non-interlaced","md5":"0321bea99f53b5b0c5e7a7916049b33a","sha1":"2b853e0ae85edc5a062986de93ce4e88a2ac58c0","sha256":"c90de0651604a09bc297cd1f6bdbbab88ad51e65ef0aa933bb3191c943b69acc","sha512":"213f54c353f941809d6a69bf726257ed01971571e47798105651791064d6f9f79ecc814ad82c3d41001c5bd7a703ed43e7a7ce8d9c4973183f4cb21c3da1e1bb","ssdeep":"","tlshash":"a4f023d356f1ecfc17d6e52191d7d603912248e89315b435f1376e30754b210d0df984","first_seen":"2025-08-29T01:16:58.45681Z","last_seen":"2026-09-05T10:01:03.451363Z","times_seen":100,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/hu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.849Z","timestamp":1788602383849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/hu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-77\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2609222\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCKaJAM8iVueb6eiAhEfXm9aidypB2xPZtibRaObe99FiajtYZUsent9Bnms0EeG5dp3LnNN9Qq%2FRPxaXZlaiMLlTAr0bTf09enf7AKpK%2BHyVoCRE2uj243TOvzWFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462030b4656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":946,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 4-bit colormap, non-interlaced","md5":"cd317e56facc2edc298dc57c8aef3192","sha1":"bec819be2885085d56af3e152d24945ba82e6d40","sha256":"5e54bb353099fd19f6e6ce673d7248bf83090909d5b4728367971fae097b23b0","sha512":"35a6fb4ce26bc75afd44456e2922c60b373966e39f15f94e86d70aa5c6d24fa76458930741f9793117d22ca772b007d1120a1a9ac308cfc38e9b0a69ce3d4694","ssdeep":"","tlshash":"3fb092e3f650ad20d795383bab30a010ea7a59442d2646010e5ac81650a01bea49c6e2","first_seen":"2025-06-27T06:32:51.091939Z","last_seen":"2026-09-05T10:01:03.452423Z","times_seen":179,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MSRSKVZB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:46.465Z","timestamp":1788602386465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-MSRSKVZB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 09:59:46 GMT\r\nexpires: Sat, 05 Sep 2026 09:59:46 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 05 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 117087\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":331222,"size_decoded":117717,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4889)","md5":"7371dc3e21baab0d1f02d6c6bf33c01f","sha1":"545ca5b32c665bc7a68d8decabe20cc136c88122","sha256":"0bf263f0304287089aef34d2d35400908f010bfc716644a96ceb9a106abeaf27","sha512":"466239af546ba0ad415d222f225aebc0bce6f4d7cd771d4e5606fa78d057f94b602a077f88a88127030ade9862bbf284a55efb071d7c4867a860dcd4fed4494a","ssdeep":"6144:2H1l3Pzfo78xfPZyc3DR/dEpv3ygUpSxdIp:AzsCFpS2","tlshash":"9d6408ccb7d6b46283a3b574503f014bb23a7992b84cc894f286e9d42d74a5a5237f7c","first_seen":"2026-09-05T10:01:03.452995Z","last_seen":"2026-09-05T10:01:03.452995Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/al.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.687Z","timestamp":1788602383687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/al.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-283\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 511928\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIy7SSHHsp2V8zXWtsvqYZzsZ9VgBCsxA9Nib5PAOWX0NNned3ns5ie0zxAuttMmPjjKhXKl8Ty0FcUcAbGH%2B5dA9NGpesjDMyVBq%2BjD8WKrI8IDAknHXwi0hefN2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462022ae256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 643\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":1470,"mime_type":"image/png","magic":"PNG image data, 80 x 57, 8-bit colormap, non-interlaced","md5":"5ed86603786c1b775c3bf2508f92ed2c","sha1":"42109c8860b3b08f971c7f60e87542b4700cead6","sha256":"d3bc5980296f0635d91f8afc6d91ff0e4f8434c88a6c59039743dd60529df6ac","sha512":"ce5b5265816e1faffea8b4a72949b97bca74b612ffef02c2217780e010dfc41567c2cc3bbf944d5928fb2117d19c7247362b262eacf5945c05e45e9b1a586403","ssdeep":"","tlshash":"7ff0629f5034880ad651f3fd997c215c44bbda281fb9032a390131fb74368b8e0b45d8","first_seen":"2025-08-29T01:16:58.52283Z","last_seen":"2026-09-05T10:01:03.454011Z","times_seen":109,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/io.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.735Z","timestamp":1788602383735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/io.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-65f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 374726\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkF1ld6Xq1yxBKnpNqZ4IoMIZxHackO6oWA2EE2g%2FP8sRMvUsIUEjLSYT5hJX%2FovNlaUMVZSuIgUWuzI2q%2FZVfTpJgLqFMBbJdEx2DjwBoYn3xF406N0ZfLTatFeig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462025af856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1631\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1631,"size_decoded":2461,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"826a276954d9dcafb3d37eec52464861","sha1":"d1793d6a7acb185dacc122896642429ca8f797e1","sha256":"56b6e296e73ce7b20576ea08bac9615ffb5d613bf25b90a22f2aa2bca904341d","sha512":"2d1ba528885b9b5ed3c6406591311a9ea4bd64a7d93ffcadbca9de16a92d55721e98dffa575f9077632d860a2e8960ac80a166e2ecdf9d127c2237485aff8c02","ssdeep":"","tlshash":"9f31e893523acfa05944bb2f4aaa4fc3b65941b225f641ec4112f7c44f5de7622e354c","first_seen":"2025-08-29T01:16:58.549594Z","last_seen":"2026-09-05T10:01:03.455051Z","times_seen":94,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ee.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.805Z","timestamp":1788602383805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ee.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-6a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2523939\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GAQEQpynIfzkl4Vvixkeq%2BkgXESntuqXLJocCJ1iFW28CCORQDbnahwBNFyyCSC%2F4%2F05fisGeWLL%2B2QzrsI07SrvOlJ3c6dRoDPpM%2FoJyZGwaE2gVjmW11vvSHOw0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202cb2356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 106\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":939,"mime_type":"image/png","magic":"PNG image data, 80 x 51, 2-bit colormap, non-interlaced","md5":"a9bcfe753130a3967c1bcfb54278b841","sha1":"b2b2bd37e0b79a54006e74ea92179df4546f0611","sha256":"7d6d0649338f46de56927d05a4430f471f572c6e5e46dc52aae9d5cf3cfdfd03","sha512":"2994fe4b7c3093fe449bca2ef504954c3995c4175fd4f94619b9c3aa32f606a47ab9bbc582f3401e049f50e22ea1d2e765815ac6533dec8a52808c0cfd4a2496","ssdeep":"","tlshash":"46b012d329b6bcfddb94813712140144a831024883ab235b6007c46606ec588d085383","first_seen":"2025-08-29T01:16:58.435524Z","last_seen":"2026-09-05T10:01:03.456116Z","times_seen":150,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/gm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.822Z","timestamp":1788602383822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/gm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-91\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1304751\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9Zamy%2Fa%2BNsOQ%2FMAy2m%2FdNUg2IntJZMj0tMObSm4OwqZHMVvJgLUySZ3N1UZte2y24yCBJJfuVxinewBeE3%2F32sAefJMo5Jkzce3uuZpr0A0XdFxxS%2BbslZi2anD3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646202eb3256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 145\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145,"size_decoded":980,"mime_type":"image/png","magic":"PNG image data, 80 x 53, 4-bit colormap, non-interlaced","md5":"0c96775c63bcc77b43004acf0a46bfaa","sha1":"0fabc2e3d0e5d762d25ede6945e2b8fc1b4b061c","sha256":"c76dd7a8e26e4170c5ac7953aa3709f7559c35667b73b24ad7ba465c8e2c2051","sha512":"d1ad60d14435b94ec158fe0b0f668358d4e8ca09941d7e814db9bacfdf2bd7bead5ee64b20055608c9b1497564501f185afef17349bcf48c3b682c110623a2d2","ssdeep":"","tlshash":"bac02be293c12cacd56658b377753de47fc1e69c35912127694bc1ba46e730c9084113","first_seen":"2025-08-29T01:16:58.59886Z","last_seen":"2026-09-05T10:01:03.457057Z","times_seen":100,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ht.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.845Z","timestamp":1788602383845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ht.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-367\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 591671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FuxLhY0acpV0jBgcvanuWIg%2FVPsUVxjBCeRc%2BwaPtD3kmwo8KWTXCwjkj2Vc6EnUPBrerLrBuqCouTujC0BCOwMv4fUU7h7K7Syu0jWrQnuQBXG2zg5RnK78dJV7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462030b4256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 871\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":1700,"mime_type":"image/png","magic":"PNG image data, 80 x 48, 8-bit colormap, non-interlaced","md5":"3bf2db039a8e1afa966561c35894f297","sha1":"57eeb5f52a18f2bf7545ea988954f13609ed8e80","sha256":"ab0c955b1ce98b43984fa9c00d6e3002cc677893638b26066b9534230be27de3","sha512":"53d9f5e99e3e466a08fcfc52cf70ce1ca08d9788952ee867a45f7b71ccb0cd6ff0109549b986453c162868a4f438fb4a563e00cfaca96e296eaed05fc7140fdd","ssdeep":"","tlshash":"9b119661530bd90b7ab6f9f3cb1cb1c2787635b59550b3c201202b88513b33b30c6302","first_seen":"2025-08-29T01:16:58.622032Z","last_seen":"2026-09-05T10:01:03.45818Z","times_seen":101,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ly.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.913Z","timestamp":1788602383913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ly.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-e2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 380271\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8RAOdjto5mplbyHnJjHRXOT60LfCEKjArfXldHGL%2FEJiVxAr2DSm90W0R3YgDNPrq%2Bvg%2BK8plFJzAXS76mgqbtmL%2BwYOTSofX7Bz3BczlFkc8BkJ3svfhQKIF1SjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462037b6656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226,"size_decoded":1056,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"35722b7d0e77eb8eef7fb16396380ac7","sha1":"47c8fa41dd811811093e5960f19555aecbd15a6f","sha256":"27cc5866d042cb27e297c68e5def5c081763ea2be1cad2bbf008719dd289a360","sha512":"2ef37934190ff765f2e0241aa927eec63b775c0b15008386c2d229806524d6ae7fef78519cfe3e3400b2ccf9ecad0c0eb0bd0ce4f713abecb1f9b9de50593209","ssdeep":"","tlshash":"a1d023e67b08cd7497c08b2102738b4bc357042c55d2528ce10f7c108408160c000274","first_seen":"2025-04-25T03:41:10.111561Z","last_seen":"2026-09-05T10:01:03.459052Z","times_seen":100,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/ms.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:43.946Z","timestamp":1788602383946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/ms.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-304\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2517507\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BucWzQJJsnFuaAYg0GJ3xhZBD2BhM9L8wEUfOVNePzH6zsT%2FWRJz7QsnxeXh%2Bw0pgHZA8GbPiaNSh4LGvy%2FtgPTUj9MGUpgTVGCEhVl7eZBQni4qPiBrmTewLKJ4%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3646203ab7d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772,"size_decoded":1604,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"a3e67a7cfde2417ef0c362df1a60f7e4","sha1":"20bae2134fbafc3d2e53f1f63ca59c7b2d8f3215","sha256":"a2e339adb8b62755d083bfdaf51f0cb73b8a233eddef9d694dc80174bbda53f3","sha512":"155f2e0637a4b73876c1d7ed2f7b74910ae043cd3620f39c82d54f915bb12778e184b45ccf515ec1260ff79f13f34b43e149cf0fc6c6742d963694ad94939438","ssdeep":"","tlshash":"4901bad6874b553c4cb036b676f50f2c3436916c122103095569def359904ff7418bc3","first_seen":"2025-08-29T01:16:58.541297Z","last_seen":"2026-09-05T10:01:03.459892Z","times_seen":98,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w80/sh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tryrovina.com/?snowball=KIT53949\u0026utm_source=snowball\u0026utm_medium=default-program\u0026utm_campaign=KIT53949","date":"2026-09-05T09:59:44.026Z","timestamp":1788602384026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w80/sh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tryrovina.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 09:59:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-34d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 362204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFHIkSLjdL3oZsuXkwD3%2FT%2BJ0Au8rEP81D3Qr84yHwXYYpZOwQvD0dL0LAvLeXPxu%2FjAy6OH%2B5qpSLWUINm6yfdlHWtm0SDcHe8H2sfKs4LUFG2048h9%2BXLlhZEFRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a36462042bb956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 845\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":845,"size_decoded":1678,"mime_type":"image/png","magic":"PNG image data, 80 x 40, 8-bit colormap, non-interlaced","md5":"83d8636d3e0bbe4861a0cfd8853075b5","sha1":"038415c430b99f64c28b97612e0865b2c0efeb9c","sha256":"26a133a1856c25a1ba89edc50dc88001f48d70663dde23dae96d10ff847e8468","sha512":"54ae90b51c58a595606911972cf597fb652fd6c87102f4a0595fd2ed98ba8986f7efba29039007af27c7034bc94344a1ec2dadb0695329bd0f01ecd625c77af1","ssdeep":"","tlshash":"6201daf0f975cb3cc1bd4e1113b8171321e15e013c96b41d154229240bc15607efe95b","first_seen":"2025-08-29T01:16:58.562829Z","last_seen":"2026-09-05T10:01:03.460788Z","times_seen":95,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}