{"report_id":"e567fcb0-2a52-4178-8c73-8ca822697dfb","version":0,"status":"done","tags":[],"date":"2026-07-30T21:29:24Z","url":{"schema":"https","addr":"gotoadvertising.net/","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":0,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"final":{"url":{"schema":"https","addr":"gotoadvertising.net/","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"title":"Invest in 5G","dom":{"size":33044,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19697)","md5":"99e9cd0c6dd44d69f981990eb301f2c5","sha1":"b58d531a2ee81aad403bb2aa0325994ee0abbee3","sha256":"ae232078f36cdefac4bc4be8417da2b4b2006a5533f6ed675cc526dcaf013c10","sha512":"75953f0f3e2d59c9c873464f456c007e13544034a76a376704f6bf293a2e64ae8bcfabec3438e1231b562125a77a0a118bb545e34bd6ca9ee0004bc7ec63bee0","ssdeep":"768:qYXVgHM6oWVirEB44rBIuqBPEr82OBeeqWtNRf8:veH/LiEB4sIuqB8Q5Y","tlshash":"2be2c670225924bf110347d0f6a1f72d25ab939dd617d56cb2ac12b2bfc7cb0ca9e294","dom_hash":"domhasha9280ea8278a1e7cfb85d8763c90c6c8","first_seen":"2026-07-30T21:29:28.625049Z","last_seen":"2026-07-30T21:29:28.625049Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gotoadvertising.net/","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":0,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-03T21:29:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"gotoadvertising.net","ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"domain_registered":"2026-07-27","domain_rank":0,"first_seen":"2026-07-30T21:19:09.167937Z","last_seen":"2026-07-30T21:19:09.167937Z","alert_count":0,"request_count":17,"received_data":678242,"sent_data":8140,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gotoadvertising.net/assets/HowItWorks-DXCEVDnc.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6d4b028d5022b67af4dfb0556c6b474","sha1":"52debcc0eab5f7efc0cc567675f305608db6fadb","sha256":"369bc68e14cd318f6b8360559ac99c7da280113d3f3ab878b7e8c601cfeeb73f","sha512":"c002fd12108d264848b507a0cbf9b2ed040485491b2fe7d55d56613c02a84be48319b9e1a06a3266d39fa0d2ad75af4c323434bd6bc39110f653b5f586495a18","ssdeep":"","tlshash":"01614286f3e596dd642709d5b19fd01c343fc888dbbb8da8b9f8310526414e8a72b78d","size":3204,"data":"","first_seen":"2026-07-30T21:19:13.618868Z","last_seen":"2026-07-30T21:29:28.645586Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Trust-BCrauVmI.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"77f01a5bb7742671918355523fcc2b13","sha1":"c19dca9110de7a6086902649d62b07bbcca3e257","sha256":"4b3cc17ca41f346baecb65516ce8b7cbc5c2ab335a2e05e0ac5d3436288c2437","sha512":"1ed71b4a58f63a41e4b97ef77db1aa0c7aad9601f99de3b7512fd525d042732e8a0d65012f9e7dbd219bec82b541c5be00d787d8cdfed3fd66a799207dc7e903","ssdeep":"","tlshash":"4e51965fa1d02aeba16789e4d006e00eb42b49f8ff6b4ce8f4d531066ed0460a32f7c5","size":2595,"data":"","first_seen":"2026-07-30T21:19:13.625078Z","last_seen":"2026-07-30T21:29:28.641919Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Footer-DNnNVyBR.js?v=contacts1","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"492b5dd38002f340aa3981e69f4f0c7c","sha1":"02a9e9aed156a7d92b0da1b6990d35425992c024","sha256":"22488b152ab2167cb7ab877ef51afd47d8e55bad0573854229ff16368ac31d2e","sha512":"26f4082d520fcba9b4ad64ed30a8756f4b9c3add8877d8a9a76bd26c6c8dc77401c3a42825d10ad3a799c01aa7737e53347bcabecae62810d5e9b36bf16c2cd3","ssdeep":"","tlshash":"24410e31b09479ef351745a4e05e900d38274abce72781f978b870366d95ce8a73ebc6","size":2339,"data":"","first_seen":"2026-07-30T21:19:13.625873Z","last_seen":"2026-07-30T21:29:28.638226Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/index-CQPE5DpE.js?v=assetnames1","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"918f75b19f862c105cae0068fcf0f38f","sha1":"2abec767d2adf00f5cd084cfaac28a5a0ab91b77","sha256":"42c0dd9b4d9f68f16d136b2357778042f187640110b38d8b5e1dfd40a3dc5828","sha512":"a62f90b25923087f86af77599563ac0c447be9e92ba152ea3f0d53ae834a38e8ee11b6eb82a7425d93dfeb485db919ef8fb945c0960ea60d6411d7b80210a138","ssdeep":"","tlshash":"0671766f22816ea454cd0f0ef7ab944cb368c74cb508e47ab99c1c34396cca5a199f1c","size":3716,"data":"","first_seen":"2026-07-30T21:19:13.62691Z","last_seen":"2026-07-30T21:29:28.6482Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/rolldown-runtime-Cn8xt2Gj.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8edbe0c53f64883a825dc7a13da27f2","sha1":"527fb52f3f53e09102b52d49b275bbfc98b87f8f","sha256":"7b6934eaecf2faa9f402ca17e60198fda57a44e8c20c9d4ee08acafa16083e3b","sha512":"285be32f26f8630ab7e5d52a2f9497d007795a43e74ac53f9f91380400f4c2bc06bcbb9dd632cf7944e717ed436bf9836adf79f191acbda0bccaa7af161f8ff2","ssdeep":"","tlshash":"8501dcbb29c0e7f20382a28bc9681481e624243d853c70e4e7b4c8f6e8820c200e8e77","size":722,"data":"","first_seen":"2026-02-06T07:24:03.500089Z","last_seen":"2026-07-30T21:29:28.642864Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"448ada7c71982d76b392b7c1f87e272a","sha1":"d24a60acd8f36ffbf1624ffcc15974143a0d41b7","sha256":"0cd21d942ba036d467255918ba8ab1f0a1ee9fa7026057c28e1f125a3cbc2233","sha512":"4e69de0a7c85b19e34f79d4407c6c6e0cf6c3ff981a8e9e2436b847c8758f46defb6fb728b97f9c0d80b49b79b3511d0c5188e78472b503c6c67bcc3e35ee484","ssdeep":"","tlshash":"9b01762f10a20066c1a7701caa4b20207a3381b7398ce7997c1d6b141fe8c2a83967db","size":706,"data":"","first_seen":"2026-07-30T21:19:13.63362Z","last_seen":"2026-07-30T21:29:28.650007Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddd1480cb286d7e888be162c39726ce5","sha1":"9bbb9cccfb530b3aef017816b4df29626e1b442b","sha256":"1e846f6a5bfa46c8ed24de66c78359841a13e4364359864f93001861fad838d2","sha512":"470278c61e9704c886e463a0ef3a6478798ad4542255d75c1a2ed25b5a6e097eb22ba59ee1eb596e64b4a6a6c385e006e3848cda94433669b68c1ef849cd470d","ssdeep":"","tlshash":"313177e660d3b239072310bed657f746753820273006d3a8b45c45a86fd0b54c1b9be5","size":1602,"data":"","first_seen":"2026-07-30T21:19:13.634536Z","last_seen":"2026-07-30T21:29:28.651314Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/vendor-react-CjBuNvUt.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ae3782d9dcf85ba5b1c49bd76e0a46d","sha1":"7d6bf416f7464488ce8fdf2b6f842283044c0778","sha256":"d7c67ed45871ad30cf45052e71b49c8267fd86528de8c383ecab67d9c0efd964","sha512":"076dbea7282329c095e7496430089185409e0a7a2f59022b5baae1ea4329f44f65c0b28d1cb79363fb37b0f0c17daa307b7ca126715e27573be2417086f6c01b","ssdeep":"6144:nye0FVfG5BHJwcUT9JYJ41tzDZWgnQnwX:nBfUT5tzVWMX","tlshash":"0b244cec31e9b6655fa357b200af1507b3792823280d4820b214fdae7af548551bbfed","size":230209,"data":"","first_seen":"2026-07-30T21:19:13.632632Z","last_seen":"2026-07-30T21:29:28.631565Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/LandingPage-D6dOkTQn.js?v=assetnames1","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"65c7ddf10a3ac70fb2173d7b11d561cd","sha1":"df21430e4fc2e2a729f1f6e09c8c3c5f3a333a3d","sha256":"9a271d4e4da096d8fa47039628a9b86043bf810ff8e1f5bb87e3dcb8f54efbd7","sha512":"212b3eb3c84e3e3849494317f98358340bb14f19e72595d1e86e634ce8a5e214a1d7e8cfc16e197a20737260a028ce5c2c57bd3c5be77773cb857d524d28033c","ssdeep":"96:jTZ2X4D89XEsT3ApukgPhfen7kxED12EZf9nZcuTm:52X71bEpukQoQM2Y9Zcui","tlshash":"49a17007b184befcb46a0995d42ed04db51e9a18c70bdc79bcb538262482cd1b37dbe9","size":4968,"data":"","first_seen":"2026-07-30T21:19:13.629805Z","last_seen":"2026-07-30T21:29:28.634702Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/FeaturesCarousel-yBxIv8Mz.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4cfbd87a7c44eb0a736aef0bf8495ea","sha1":"040242f7f6a56ff9fcac95bda8efb73363bb4583","sha256":"dc588c599f7c83e1a971df5e046befb931215c3f0d2ad70677da09181c16737c","sha512":"15471157ef4c6d0eaef17fcf653135a49a003d54f75d65c4fedb5ab351881bcd10b2bfc8a648c23f4b31eb8fee532f344c2cd3b83924878350b5103cd7c9171c","ssdeep":"","tlshash":"6651d85ba26479fe959f05c4542cd81db837439cff578168b4e93c2024948f0db2eb5d","size":2472,"data":"","first_seen":"2026-07-30T21:19:13.623288Z","last_seen":"2026-07-30T21:29:28.644706Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Calculator-BxWX5F23.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b79d7f7326c981d5d5c413db2ff78d2","sha1":"e60534f959595dae0c047e8f3bd2f9b61395039a","sha256":"95d4928285d6205e370961089cef13485dee65785d8f121bcbb23a38b1daf183","sha512":"636b808f3fff631047ddd548dbb7f6948f79a68ebd3fc7863858b45f4fec162e67af59ff835779cabb52b2d72f3ebdd2b34363f0e8e061f8bc111775dd8ff891","ssdeep":"96:XtM03hXzjU2daNu7OWgs2z1Pid9uZdvzXOa+x:XtthXzfdaYOWIz1NX+x","tlshash":"5f915456b0516af9b42f0c98a19ec02d301fc644d75688bcf9ec7c205b024e4675fbcd","size":4242,"data":"","first_seen":"2026-07-30T21:19:13.617832Z","last_seen":"2026-07-30T21:29:28.649136Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/TargetAudience-BLSWJCS4.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a35c85f0ba51a0968df927e7d34a400f","sha1":"2fa5084053023a4d62b5aa5b6b3f390cb34c93f1","sha256":"7404dacb0d25e43495ad63f9c3a851b533f12fe0a2b233e0aeb411de2ba6c75c","sha512":"f076142be135d6365a692650fa777e4879b66a00f50b82dc35781849b6bafb6725eb580fd8d90dfea0d88a515daf7c6a96965a45d75bed93e3c2fc5658b592d0","ssdeep":"","tlshash":"5361861bb49526fe617718d0f48fe00eb42f46b8eb1a84a8b8e5351265c1885d73f7c8","size":3233,"data":"","first_seen":"2026-07-30T21:19:13.624198Z","last_seen":"2026-07-30T21:29:28.637306Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/vendor-framer-s205jMvf.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bb9ec9cc17a99f461a2fba457bf2a99","sha1":"2b855c74dc61738440bb20cdd6d9cd42e8440fc8","sha256":"a94789d011489a037b1ca6c4b14d00cd5f3f5cefbd7b0af6f93a26f37171ccd9","sha512":"f9d21989475e689d6e503ee8ac48ef4a441b0bbf7937ffe051b5bf85e9562ca88e466b431b7c196ebbcb9ba658771e2d531515409a3d1be4cc558fdb47e2d863","ssdeep":"1536:Dwdjz3JN00gDN3vs/fcEs1VqyF4BnfhfDKGG/51PX14:4jzZiD0PsUf9214","tlshash":"46c3f7d573917122c3db9266c0af4a45b33b18d8280d403c763da9df3961909a6fbf7a","size":125087,"data":"","first_seen":"2026-07-30T21:19:13.627856Z","last_seen":"2026-07-30T21:29:28.629744Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Button-2ILfFyoX.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"29806772fd590693a18d90f0b00573c4","sha1":"ae8d8bdfe638d094671107003a370ca385880e84","sha256":"8b975acbbd60e607d76cc211667b679874c14c6924e6899b1b81721821080b1c","sha512":"c63614860c688ec7d32eac92f20834ce1d43243f25bd2d3535871d466538b6518b4d9dddc46f9bf5932203465ff138b8d79c009680ff64bc130b08b422734c26","ssdeep":"384:X7SVGUZ+WgQ2v7V1e9KEpXPcYxU3QHbMJCzitivF2UoT3tQfR8ZJZkP:+U+gQsH+/cYHcCs+8tkP","tlshash":"fdb2d7237552196e26bfc677e15ceacdd9226301ca1ecb48f2420f3097797b15a85f0e","size":25513,"data":"","first_seen":"2026-07-30T21:19:13.621377Z","last_seen":"2026-07-30T21:29:28.636045Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gotoadvertising.net/assets/vendor-framer-s205jMvf.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:57.917Z","timestamp":1785446937917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/vendor-framer-s205jMvf.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39842\r\ndate: Thu, 30 Jul 2026 21:28:57 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125087,"size_decoded":40308,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9bb9ec9cc17a99f461a2fba457bf2a99","sha1":"2b855c74dc61738440bb20cdd6d9cd42e8440fc8","sha256":"a94789d011489a037b1ca6c4b14d00cd5f3f5cefbd7b0af6f93a26f37171ccd9","sha512":"f9d21989475e689d6e503ee8ac48ef4a441b0bbf7937ffe051b5bf85e9562ca88e466b431b7c196ebbcb9ba658771e2d531515409a3d1be4cc558fdb47e2d863","ssdeep":"1536:Dwdjz3JN00gDN3vs/fcEs1VqyF4BnfhfDKGG/51PX14:4jzZiD0PsUf9214","tlshash":"46c3f7d573917122c3db9266c0af4a45b33b18d8280d403c763da9df3961909a6fbf7a","first_seen":"2026-07-30T21:19:13.627856Z","last_seen":"2026-07-30T21:29:28.629744Z","times_seen":3,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/vendor-react-CjBuNvUt.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:57.919Z","timestamp":1785446937919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/vendor-react-CjBuNvUt.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 70745\r\ndate: Thu, 30 Jul 2026 21:28:57 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":230209,"size_decoded":71211,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (51998)","md5":"7ae3782d9dcf85ba5b1c49bd76e0a46d","sha1":"7d6bf416f7464488ce8fdf2b6f842283044c0778","sha256":"d7c67ed45871ad30cf45052e71b49c8267fd86528de8c383ecab67d9c0efd964","sha512":"076dbea7282329c095e7496430089185409e0a7a2f59022b5baae1ea4329f44f65c0b28d1cb79363fb37b0f0c17daa307b7ca126715e27573be2417086f6c01b","ssdeep":"6144:nye0FVfG5BHJwcUT9JYJ41tzDZWgnQnwX:nBfUT5tzVWMX","tlshash":"0b244cec31e9b6655fa357b200af1507b3792823280d4820b214fdae7af548551bbfed","first_seen":"2026-07-30T21:19:13.632632Z","last_seen":"2026-07-30T21:29:28.631565Z","times_seen":3,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/index-mXEfP7IK.css","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:57.920Z","timestamp":1785446937920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/index-mXEfP7IK.css HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, must-revalidate, max-age=0\r\nexpires: 0\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8684\r\ndate: Thu, 30 Jul 2026 21:28:57 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npragma: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52939,"size_decoded":9142,"mime_type":"text/css","magic":"ASCII text, with very long lines (52871)","md5":"004e77d99e398d4c20f783dc0f049010","sha1":"7dc541316648b46e5f003d78ff77a3634e8bd9ec","sha256":"d110a51750e5dc0e36d7cfde6da799976cf65d8076048369a876bacddf3b2c57","sha512":"73cc22ec603896b64f041ee4497b4ca0bf54a216e953662acd7f17e399409d144f37c2484849d7c37dddee3163b25f8a62047e6ec68c027015f5f66a3988a277","ssdeep":"768:KwoPyYBXCh2kNLsftts6uWEk7glD5T0XjG40NQx7T:vSXCh2jEk7gluK40NQx7T","tlshash":"c9339460f265c9bbad13b4e9a75cf84db50970cade2927dcfe42620267c7bf10c99604","first_seen":"2026-07-30T21:19:13.619923Z","last_seen":"2026-07-30T21:29:28.633264Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/LandingPage-D6dOkTQn.js?v=assetnames1","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.055Z","timestamp":1785446938055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/LandingPage-D6dOkTQn.js?v=assetnames1 HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Jul 2026 10:17:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1772\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4968,"size_decoded":2237,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4414)","md5":"65c7ddf10a3ac70fb2173d7b11d561cd","sha1":"df21430e4fc2e2a729f1f6e09c8c3c5f3a333a3d","sha256":"9a271d4e4da096d8fa47039628a9b86043bf810ff8e1f5bb87e3dcb8f54efbd7","sha512":"212b3eb3c84e3e3849494317f98358340bb14f19e72595d1e86e634ce8a5e214a1d7e8cfc16e197a20737260a028ce5c2c57bd3c5be77773cb857d524d28033c","ssdeep":"96:jTZ2X4D89XEsT3ApukgPhfen7kxED12EZf9nZcuTm:52X71bEpukQoQM2Y9Zcui","tlshash":"49a17007b184befcb46a0995d42ed04db51e9a18c70bdc79bcb538262482cd1b37dbe9","first_seen":"2026-07-30T21:19:13.629805Z","last_seen":"2026-07-30T21:29:28.634702Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Button-2ILfFyoX.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.056Z","timestamp":1785446938056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/Button-2ILfFyoX.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7842\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25513,"size_decoded":8307,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25513), with no line terminators","md5":"29806772fd590693a18d90f0b00573c4","sha1":"ae8d8bdfe638d094671107003a370ca385880e84","sha256":"8b975acbbd60e607d76cc211667b679874c14c6924e6899b1b81721821080b1c","sha512":"c63614860c688ec7d32eac92f20834ce1d43243f25bd2d3535871d466538b6518b4d9dddc46f9bf5932203465ff138b8d79c009680ff64bc130b08b422734c26","ssdeep":"384:X7SVGUZ+WgQ2v7V1e9KEpXPcYxU3QHbMJCzitivF2UoT3tQfR8ZJZkP:+U+gQsH+/cYHcCs+8tkP","tlshash":"fdb2d7237552196e26bfc677e15ceacdd9226301ca1ecb48f2420f3097797b15a85f0e","first_seen":"2026-07-30T21:19:13.621377Z","last_seen":"2026-07-30T21:29:28.636045Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/TargetAudience-BLSWJCS4.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.244Z","timestamp":1785446938244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/TargetAudience-BLSWJCS4.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1220\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3233,"size_decoded":1685,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2849), with no line terminators","md5":"a35c85f0ba51a0968df927e7d34a400f","sha1":"2fa5084053023a4d62b5aa5b6b3f390cb34c93f1","sha256":"7404dacb0d25e43495ad63f9c3a851b533f12fe0a2b233e0aeb411de2ba6c75c","sha512":"f076142be135d6365a692650fa777e4879b66a00f50b82dc35781849b6bafb6725eb580fd8d90dfea0d88a515daf7c6a96965a45d75bed93e3c2fc5658b592d0","ssdeep":"","tlshash":"5361861bb49526fe617718d0f48fe00eb42f46b8eb1a84a8b8e5351265c1885d73f7c8","first_seen":"2026-07-30T21:19:13.624198Z","last_seen":"2026-07-30T21:29:28.637306Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Footer-DNnNVyBR.js?v=contacts1","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.393Z","timestamp":1785446938393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/Footer-DNnNVyBR.js?v=contacts1 HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Jul 2026 10:17:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 946\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2339,"size_decoded":1410,"mime_type":"text/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2020)","md5":"492b5dd38002f340aa3981e69f4f0c7c","sha1":"02a9e9aed156a7d92b0da1b6990d35425992c024","sha256":"22488b152ab2167cb7ab877ef51afd47d8e55bad0573854229ff16368ac31d2e","sha512":"26f4082d520fcba9b4ad64ed30a8756f4b9c3add8877d8a9a76bd26c6c8dc77401c3a42825d10ad3a799c01aa7737e53347bcabecae62810d5e9b36bf16c2cd3","ssdeep":"","tlshash":"24410e31b09479ef351745a4e05e900d38274abce72781f978b870366d95ce8a73ebc6","first_seen":"2026-07-30T21:19:13.625873Z","last_seen":"2026-07-30T21:29:28.638226Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/site-favicon.png","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.093Z","timestamp":1785446938093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /site-favicon.png HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:28:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Jul 2026 11:21:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8115\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8115,"size_decoded":8525,"mime_type":"image/png","magic":"PNG image data, 374 x 383, 8-bit colormap, non-interlaced","md5":"113b7f57ba95791c41dcd78b71309eb8","sha1":"0c941da1356a0c274bec1ed1aee774e086204ad6","sha256":"09045bb82304a920bd7583090d4a292f3855484d5691edcd36c6a8b5874e88fb","sha512":"974c18f874845d884232be809f0626f8ee158563703d143fffbecc840769f181dc4637f597b50ffa792b362b64a132ecbbdfbfce2f8e8b988e29c6010d491584","ssdeep":"192:3xVPrj4SijuRoL/DLyKuIjW3t7OB+HdFfswnMe81J:hVH18VTaoB+HTpn7I","tlshash":"fcf1bf753388048cdeeb4c2a4126ca5c75663f693201979e1671f8ad91f5dde74cce43","first_seen":"2026-07-30T21:19:13.615679Z","last_seen":"2026-07-30T21:29:28.639089Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/kyivinvest-logo-main.png","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.108Z","timestamp":1785446938108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /kyivinvest-logo-main.png HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:28:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 24 Jul 2026 09:31:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13535\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13535,"size_decoded":13946,"mime_type":"image/png","magic":"PNG image data, 1700 x 449, 8-bit colormap, non-interlaced","md5":"ace2b45095f7564fa7d511c1aff0d971","sha1":"1f30d4419ad251573511acfc817cef8e6aae5cc7","sha256":"3b0d5bc78a9d1f8fed3b915c6fe1a49a31db62446703e975c5d99a07f6424ec1","sha512":"b37800279444d934a7d35e198ef3bb556a1bb5866ae00de093be781c73e46b89c370b68876c56ea7a411162c56cc7f552f18f59082a64c3a46c446cee25e9865","ssdeep":"192:fNEPrZ4SotDqtSC993lGuqiPwEcE1oZ234Cfkv3fDR+r8pjXdo6HSpMZoY1pCsdD:FEtOKSCn3lhqswEbBILMrEXx7r+sdchY","tlshash":"6552af91c843c12aa52314e6dbf1d923e8f3dda612174737269ff4947db3a5a1283c2b","first_seen":"2026-07-30T21:19:13.616755Z","last_seen":"2026-07-30T21:29:28.640752Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Trust-BCrauVmI.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.334Z","timestamp":1785446938334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/Trust-BCrauVmI.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1098\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2595,"size_decoded":1563,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2336), with no line terminators","md5":"77f01a5bb7742671918355523fcc2b13","sha1":"c19dca9110de7a6086902649d62b07bbcca3e257","sha256":"4b3cc17ca41f346baecb65516ce8b7cbc5c2ab335a2e05e0ac5d3436288c2437","sha512":"1ed71b4a58f63a41e4b97ef77db1aa0c7aad9601f99de3b7512fd525d042732e8a0d65012f9e7dbd219bec82b541c5be00d787d8cdfed3fd66a799207dc7e903","ssdeep":"","tlshash":"4e51965fa1d02aeba16789e4d006e00eb42b49f8ff6b4ce8f4d531066ed0460a32f7c5","first_seen":"2026-07-30T21:19:13.625078Z","last_seen":"2026-07-30T21:29:28.641919Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/rolldown-runtime-Cn8xt2Gj.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:57.916Z","timestamp":1785446937916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/rolldown-runtime-Cn8xt2Gj.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 722\r\ndate: Thu, 30 Jul 2026 21:28:57 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":722,"size_decoded":1141,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (722), with no line terminators","md5":"c8edbe0c53f64883a825dc7a13da27f2","sha1":"527fb52f3f53e09102b52d49b275bbfc98b87f8f","sha256":"7b6934eaecf2faa9f402ca17e60198fda57a44e8c20c9d4ee08acafa16083e3b","sha512":"285be32f26f8630ab7e5d52a2f9497d007795a43e74ac53f9f91380400f4c2bc06bcbb9dd632cf7944e717ed436bf9836adf79f191acbda0bccaa7af161f8ff2","ssdeep":"","tlshash":"8501dcbb29c0e7f20382a28bc9681481e624243d853c70e4e7b4c8f6e8820c200e8e77","first_seen":"2026-02-06T07:24:03.500089Z","last_seen":"2026-07-30T21:29:28.642864Z","times_seen":35,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/hero-background-main.jpg","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.107Z","timestamp":1785446938107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/hero-background-main.jpg HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 06 Aug 2026 21:28:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jul 2026 10:56:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 183812\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":183812,"size_decoded":184225,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 714x1280, components 3","md5":"fa832812149c94ef7568ad01bb83d5cb","sha1":"c560c38e823e94c07b51aac2f422a039978e8182","sha256":"2eb91146c65afd4329566a6c26bebba868330aae795877b67738595c95d95b93","sha512":"3f8df2d2f4410dabe24df6c8f89a3fbf5ab538fa134fee5ed31de208ce16bbabe68956992bb845de286c19a828a867b09db8c0ccc8a3d9e4614888c25c56dca2","ssdeep":"3072:6rphQj9yYJVv/jIqBAHBPod9+62JjuEsmM9IbF25QKaTpsIJsHxoDLeq+tWISqV0:6E9/0hwd9+tjD/MGF25QJ9gWDMIqYgi","tlshash":"2f041296ad46a3465b2fc6f2cdc25907ceb043ed48a5af441309dfdae5b1304ef2658c","first_seen":"2026-07-30T21:19:13.62225Z","last_seen":"2026-07-30T21:29:28.643804Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/FeaturesCarousel-yBxIv8Mz.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.110Z","timestamp":1785446938110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/FeaturesCarousel-yBxIv8Mz.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1233\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2472,"size_decoded":1698,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2321), with no line terminators","md5":"d4cfbd87a7c44eb0a736aef0bf8495ea","sha1":"040242f7f6a56ff9fcac95bda8efb73363bb4583","sha256":"dc588c599f7c83e1a971df5e046befb931215c3f0d2ad70677da09181c16737c","sha512":"15471157ef4c6d0eaef17fcf653135a49a003d54f75d65c4fedb5ab351881bcd10b2bfc8a648c23f4b31eb8fee532f344c2cd3b83924878350b5103cd7c9171c","ssdeep":"","tlshash":"6651d85ba26479fe959f05c4542cd81db837439cff578168b4e93c2024948f0db2eb5d","first_seen":"2026-07-30T21:19:13.623288Z","last_seen":"2026-07-30T21:29:28.644706Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/HowItWorks-DXCEVDnc.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.288Z","timestamp":1785446938288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/HowItWorks-DXCEVDnc.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1341\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3204,"size_decoded":1806,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3053), with no line terminators","md5":"f6d4b028d5022b67af4dfb0556c6b474","sha1":"52debcc0eab5f7efc0cc567675f305608db6fadb","sha256":"369bc68e14cd318f6b8360559ac99c7da280113d3f3ab878b7e8c601cfeeb73f","sha512":"c002fd12108d264848b507a0cbf9b2ed040485491b2fe7d55d56613c02a84be48319b9e1a06a3266d39fa0d2ad75af4c323434bd6bc39110f653b5f586495a18","ssdeep":"","tlshash":"01614286f3e596dd642709d5b19fd01c343fc888dbbb8da8b9f8310526414e8a72b78d","first_seen":"2026-07-30T21:19:13.618868Z","last_seen":"2026-07-30T21:29:28.645586Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-30T21:28:57.411Z","timestamp":1785446937411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 27 Jul 2026 10:17:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1304\r\ndate: Thu, 30 Jul 2026 21:28:57 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3469,"size_decoded":1971,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"c0d65181a65daf465efb6f0921e3c0a0","sha1":"2cbe0e09751a6e8e58ffe0ae8fa404213271803c","sha256":"b28594e2068f9172dd77fe3826952927310859d6e9c15cf296ea2a12b121b1b4","sha512":"584ebebf8c81c69a2de5a9060b27c5393d567561c0234d981dc1fb20bde0c5ccb77a7e3ca54e22a6ee5fbf484ab185795137e1db5aadd41b61136ead4e3d759f","ssdeep":"","tlshash":"a361c79620e241360323216dea97f508bd77605b3649d698b8ac407c5fd0f9187bbbed","first_seen":"2026-07-30T21:19:13.630797Z","last_seen":"2026-07-30T21:29:28.646439Z","times_seen":3,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":29,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:57.912Z","timestamp":1785446937912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Jul 2026 21:28:57 GMT\r\ndate: Thu, 30 Jul 2026 21:28:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-01T19:20:12.318598Z","times_seen":38869,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/index-CQPE5DpE.js?v=assetnames1","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:57.915Z","timestamp":1785446937915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/index-CQPE5DpE.js?v=assetnames1 HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 27 Jul 2026 10:17:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1393\r\ndate: Thu, 30 Jul 2026 21:28:57 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3716,"size_decoded":2036,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3295)","md5":"918f75b19f862c105cae0068fcf0f38f","sha1":"2abec767d2adf00f5cd084cfaac28a5a0ab91b77","sha256":"42c0dd9b4d9f68f16d136b2357778042f187640110b38d8b5e1dfd40a3dc5828","sha512":"a62f90b25923087f86af77599563ac0c447be9e92ba152ea3f0d53ae834a38e8ee11b6eb82a7425d93dfeb485db919ef8fb945c0960ea60d6411d7b80210a138","ssdeep":"","tlshash":"0671766f22816ea454cd0f0ef7ab944cb368c74cb508e47ab99c1c34396cca5a199f1c","first_seen":"2026-07-30T21:19:13.62691Z","last_seen":"2026-07-30T21:29:28.6482Z","times_seen":3,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gotoadvertising.net/assets/Calculator-BxWX5F23.js","fqdn":"gotoadvertising.net","domain":"gotoadvertising.net","tld":"net"},"ip":{"addr":"85.158.57.2","port":443,"asn":20473,"as":"AS-VULTR","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gotoadvertising.net/","date":"2026-07-30T21:28:58.175Z","timestamp":1785446938175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.gotoadvertising.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 11:31:41 GMT","end":"Sun, 25 Oct 2026 11:31:40 GMT"},"fingerprint":{"sha1":"35:54:D1:53:04:51:AA:13:2F:E7:40:5C:FB:F4:B6:A4:28:48:CC:A7","sha256":"C9:DF:FC:87:8E:D1:39:F0:EA:CF:DB:FC:B0:BF:A3:0B:7F:91:B8:DE:7B:3A:57:DC:65:A2:F3:8A:E3:80:D6:DB"}}},"request":{"raw":"GET /assets/Calculator-BxWX5F23.js HTTP/1.1\r\nHost: gotoadvertising.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://gotoadvertising.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 20 Feb 2026 10:27:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1711\r\ndate: Thu, 30 Jul 2026 21:28:58 GMT\r\nserver: LiteSpeed\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4242,"size_decoded":2176,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3408)","md5":"1b79d7f7326c981d5d5c413db2ff78d2","sha1":"e60534f959595dae0c047e8f3bd2f9b61395039a","sha256":"95d4928285d6205e370961089cef13485dee65785d8f121bcbb23a38b1daf183","sha512":"636b808f3fff631047ddd548dbb7f6948f79a68ebd3fc7863858b45f4fec162e67af59ff835779cabb52b2d72f3ebdd2b34363f0e8e061f8bc111775dd8ff891","ssdeep":"96:XtM03hXzjU2daNu7OWgs2z1Pid9uZdvzXOa+x:XtthXzfdaYOWIz1NX+x","tlshash":"5f915456b0516af9b42f0c98a19ec02d301fc644d75688bcf9ec7c205b024e4675fbcd","first_seen":"2026-07-30T21:19:13.617832Z","last_seen":"2026-07-30T21:29:28.649136Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}