{"report_id":"f8c7a5b5-41dd-4faa-a6b5-f8d66411ecb0","version":0,"status":"done","tags":[],"date":"2026-06-20T04:51:57Z","url":{"schema":"http","addr":"endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.65.195","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"title":"Log in - REDLEGG","dom":{"size":23032,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2078)","md5":"cc7c856d6648818fd7bd728accd84e01","sha1":"959324a2f93e72555077dc78e2490dbeadbeabfa","sha256":"ee97043f132019bb8fdac7051aa52dd82d752d18afbcf3b435544de7da80ce26","sha512":"5faa39f7428a8f3d88018bb0f2739131974fd0d6c6bae72718933a34ee2dace56b23869545dccaa227726851333a2feffda093bd36af0bd6f82c4128ed2d042a","ssdeep":"384:eSzBDLnt9b5FR+jHTWyf8WldjU1WyFJru3i6mpPDycQ:jrr5FR8PU1rFJS3i6mVDs","tlshash":"caa2114075a00e352d276ea912dedb58e12be0c708df9d6d7ede014d8fc77a88ba2741","dom_hash":"domhashf4914028cb0e79c5382080fcd0fe08ee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.65.195","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T04:51:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"p.limacharlie.io","ip":{"addr":"34.54.249.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2016-12-02","domain_rank":0,"first_seen":"2025-09-01T20:29:28.53193Z","last_seen":"2026-06-13T08:27:17.061919Z","alert_count":0,"request_count":4,"received_data":103403,"sent_data":1929,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":1,"received_data":30425,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"endpoint.redlegg.com","ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2008-08-08","domain_rank":0,"first_seen":"2019-12-03T16:25:21Z","last_seen":"2026-06-14T18:19:10.38628Z","alert_count":0,"request_count":7,"received_data":7420374,"sent_data":4815,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-06-14T22:55:30.147967Z","alert_count":0,"request_count":2,"received_data":545455,"sent_data":1002,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":2,"received_data":90210,"sent_data":1137,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"p.limacharlie.io/static/surveys.js?v=1.372.6","fqdn":"p.limacharlie.io","domain":"limacharlie.io","tld":"io"},"ip":{"addr":"34.54.249.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53aacce44f3cfe8c31e9783ec21a2215","sha1":"14646da04520db7979d4650453184d36197b08a3","sha256":"cd8cf24f2d93f7425eba0f6c62c62f9e9b62618655c54bebbc8b7259e3822113","sha512":"8e8625a0b9c014245038bb40dacf293c4337c6a1d904bda771c4760ec8397fb7c8eab068bf538c867242213dc4df1ef96dd0152440f78403c62b82f5f5e9cbf2","ssdeep":"1536:d9/oVWud2FUfQvo7aTP09+k1IdxUSSPYdoDsimM:dxbuG9o7R57Ad/BM","tlshash":"d4934cd5ba00f06e51eb81b810be5843f33d6b1afa0d4c54b1179c943dd6988a39ffa6","size":96801,"data":"","first_seen":"2026-06-19T14:01:37.598707Z","last_seen":"2026-06-22T02:14:49.88197Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/runtime.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3e43b7b3b2465994ecb0fc401360965","sha1":"aa9e72a3bffb74b832bf5d41b2ca1988aec7dc46","sha256":"86d92b68e5650f044120d55d16fc66faa6f9c224e8d2c62f196c357810b705fc","sha512":"855fb144f449b4575b9cafd4b5724d1d1506be951ac26f98eec73d4f6d29aec5bd4b6efe6b3f2abdb6411f700b632c910189a7d897ad07ed24f0a00c7bc933fa","ssdeep":"","tlshash":"3e0168f6056d80278b00c2a8a00f3c4a7932621b1c4ebeb07aa87964761c91b50f5f9a","size":736,"data":"","first_seen":"2026-03-25T03:13:02.85433Z","last_seen":"2026-06-20T16:18:40.505344Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/dialogflow-console/fast/df-messenger/prod/v1/df-messenger.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9949df91ed7e79cc673d2848645e769","sha1":"e599fbf91d67ce3f7ea9844a555081e384e7d73a","sha256":"c4fea5a7f0e0769c55fcaabedd317f9f19124f9397f77bbb614c5053a9339f91","sha512":"24a8525c0f0b8e084cc1b14329c08fa35550fd5fa440f0829cb288482ef75c8dc1fd271747054eb07ef8302ea80faf19bc33959e44e0863f3b82c631e6ddb413","ssdeep":"6144:vxI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDL0vX2rH9s7jRmxpyj6Gxr6GqHoAsD+yc:CZzi0S0jRm+BwqD6VXV8lvUyk","tlshash":"1db44dd8f9d56936a69763e5267bd44daf2534b0f408988cf0cce4e10f969ca06a3f34","size":536519,"data":"","first_seen":"2025-06-10T07:03:53.662804Z","last_seen":"2026-06-21T23:31:56.066308Z","times_seen":510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/assets/index-6n7slKiv.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0c9c4acaadc02883d08855aabe9923","sha1":"b8f740557f90b861c2ff813c8ebb6c1526fef1d2","sha256":"678c61ae549907bb3006743b5dbfc4000faa28a3d03e9fab777b9b5ce300289a","sha512":"7dac75c849918e52c996fec3eb270ddec35ce67dc4ca41b33093b8ce2f4c408bc0f216b55b51449cd8c6597f868815b9f44caad36bb02ab0a36bac2f4872ebe7","ssdeep":"49152:2miRDIFIs60RZc5Yia8z+9d+tNEvbpAETwcf3alEF7HbtGyZmNqrxivKE7WLjaC3:oSZm+9d+tNeAETwcFZmMrxy1vxu","tlshash":"43762948726ab351d5cac0e7e83f2846d52dd446a00a40e4bf7987f726f4346f2aef25","size":7356563,"data":"","first_seen":"2026-06-19T01:14:14.482479Z","last_seen":"2026-06-20T16:18:40.517617Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/runtime.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3e43b7b3b2465994ecb0fc401360965","sha1":"aa9e72a3bffb74b832bf5d41b2ca1988aec7dc46","sha256":"86d92b68e5650f044120d55d16fc66faa6f9c224e8d2c62f196c357810b705fc","sha512":"855fb144f449b4575b9cafd4b5724d1d1506be951ac26f98eec73d4f6d29aec5bd4b6efe6b3f2abdb6411f700b632c910189a7d897ad07ed24f0a00c7bc933fa","ssdeep":"","tlshash":"3e0168f6056d80278b00c2a8a00f3c4a7932621b1c4ebeb07aa87964761c91b50f5f9a","size":736,"data":"","first_seen":"2026-03-25T03:13:02.85433Z","last_seen":"2026-06-20T16:18:40.505344Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/assets/Login-DeijkrSe.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8b3d42ec5d0b18315c0cea80f1289c99","sha1":"5a6e773ebca4e0286294bdf61ca6038320900426","sha256":"de27e676e1bacfe204286038fb9b9effb2ea81b1c8d25b2950af1c35fc1e8261","sha512":"4010017594aca7b1dd6154a7fba6ab0026fbc50c0c98d20e03ca8f49a035db23e7a3d8605b60835ce45666011c4eb1bcdd458ee2223953f042ae3a346bcaa2bd","ssdeep":"","tlshash":"70f0ac4e4ef06bfb904a1badd963700672595033929dce91d128467e27a9b8edc0cb4b","size":599,"data":"","first_seen":"2026-06-19T01:14:14.459683Z","last_seen":"2026-06-20T16:18:40.508789Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/5ce46650-7428-4fcf-8bbd-dee3207f81ae","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"f16a7e69ee76e62051486aad2902abbe","sha1":"fd70d974b356e1db0363e6d84ccc3fc51ab1c1be","sha256":"2cc533eaba03b0202afad4cd23db32ffbbf59a19b3f06ca28ca5c7e8b21a3cdf","sha512":"c17195844a57c80ddee82b4eee1fc785235b5daab022e6d7836c1b1114b9c29bbd6031cd51ddce8484ff991dd5980ef5cf7d1f8a8da96404f1f61634e390f80c","ssdeep":"192:d4m0DpdV604R06FYsQH49N8I0DFneuvNvMJVHyAr5g0OVPFDhkw/NYGtvs+:d4mCfo0j6FdQY9N8nDFneyN+HyK5g08h","tlshash":"6022195437923179439395e1594f898e957238223c0380acbb08d8d96cf5dcb61eefbd","size":10329,"data":"","first_seen":"2026-05-25T18:36:25.848783Z","last_seen":"2026-06-22T02:03:01.051661Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.limacharlie.io/array/phc_i8vjJyvXZuLLCQary8Xf0U9Q1ZvvZuKgSIWXD9VwJGI/config.js","fqdn":"p.limacharlie.io","domain":"limacharlie.io","tld":"io"},"ip":{"addr":"34.54.249.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6c96f70fe7fa54b35f0092998000ec6","sha1":"0e89adedccad1dd584db13cfbc76aad3a013fce5","sha256":"4de58e998f012cab0ed3669f8e003d7c8f9f3dd01e4adf7cd1b51f6f860c0496","sha512":"40b580205f8aa9aad98d7ddc2b6e895537fcc082848d0b77d05788e33c8ecb990cd474d426e1f29f0d004c5aba5f9bcbc7dc65cf4e5c8550dcc7644fc8b9087d","ssdeep":"","tlshash":"5801af6da990003c80a65344a6ab35076fbf412331246a8cf9d8458575ef4cb5193b87","size":849,"data":"","first_seen":"2026-04-28T01:00:33.644036Z","last_seen":"2026-06-20T16:18:40.510559Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"p.limacharlie.io/array/phc_i8vjJyvXZuLLCQary8Xf0U9Q1ZvvZuKgSIWXD9VwJGI/config.js","fqdn":"p.limacharlie.io","domain":"limacharlie.io","tld":"io"},"ip":{"addr":"34.54.249.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:34.418Z","timestamp":1781931094418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.limacharlie.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 22:45:51 GMT","end":"Mon, 17 Aug 2026 23:38:44 GMT"},"fingerprint":{"sha1":"E4:9F:05:59:9D:CE:B7:AA:24:2A:D8:39:2D:49:F4:38:86:B0:B6:C5","sha256":"47:82:14:64:BB:8A:CF:47:0F:83:2F:5C:ED:DD:59:57:1B:FA:A2:FC:DC:67:5B:E2:85:87:20:BA:C7:11:1D:5E"}}},"request":{"raw":"GET /array/phc_i8vjJyvXZuLLCQary8Xf0U9Q1ZvvZuKgSIWXD9VwJGI/config.js HTTP/1.1\r\nHost: p.limacharlie.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://endpoint.redlegg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 04:51:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\nvary: Origin, Referer,origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://endpoint.redlegg.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 31\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":1023,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (650)","md5":"a6c96f70fe7fa54b35f0092998000ec6","sha1":"0e89adedccad1dd584db13cfbc76aad3a013fce5","sha256":"4de58e998f012cab0ed3669f8e003d7c8f9f3dd01e4adf7cd1b51f6f860c0496","sha512":"40b580205f8aa9aad98d7ddc2b6e895537fcc082848d0b77d05788e33c8ecb990cd474d426e1f29f0d004c5aba5f9bcbc7dc65cf4e5c8550dcc7644fc8b9087d","ssdeep":"","tlshash":"5801af6da990003c80a65344a6ab35076fbf412331246a8cf9d8458575ef4cb5193b87","first_seen":"2026-04-28T01:00:33.644036Z","last_seen":"2026-06-20T16:18:40.510559Z","times_seen":37,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":16,"connect":13,"send":0,"wait":347,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.limacharlie.io/static/surveys.js?v=1.372.6","fqdn":"p.limacharlie.io","domain":"limacharlie.io","tld":"io"},"ip":{"addr":"34.54.249.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:35.074Z","timestamp":1781931095074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.limacharlie.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 22:45:51 GMT","end":"Mon, 17 Aug 2026 23:38:44 GMT"},"fingerprint":{"sha1":"E4:9F:05:59:9D:CE:B7:AA:24:2A:D8:39:2D:49:F4:38:86:B0:B6:C5","sha256":"47:82:14:64:BB:8A:CF:47:0F:83:2F:5C:ED:DD:59:57:1B:FA:A2:FC:DC:67:5B:E2:85:87:20:BA:C7:11:1D:5E"}}},"request":{"raw":"GET /static/surveys.js?v=1.372.6 HTTP/1.1\r\nHost: p.limacharlie.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://endpoint.redlegg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 04:51:35 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a0e828c06ebf3e6a-ARN\r\ncf-cache-status: EXPIRED\r\nx-amz-version-id: HDHzTKscuHJeA_Y7zJlb.0KLuX3cd3b1\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Fri, 19 Jun 2026 15:52:20 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\naccess-control-allow-methods: POST, GET, DELETE, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nx-amz-id-2: ccXU+l9EZHP+FUTBwbunzWonavpdO8RNBQOQVMPvLtD+5raekuzh6JsJWCGikl6EV9IbiPCCiuo=\r\nx-amz-request-id: 8H5G5D4ZAW5TTVG8\r\netag: W/\"53aacce44f3cfe8c31e9783ec21a2215\"\r\ncontent-encoding: br\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96801,"size_decoded":33221,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"53aacce44f3cfe8c31e9783ec21a2215","sha1":"14646da04520db7979d4650453184d36197b08a3","sha256":"cd8cf24f2d93f7425eba0f6c62c62f9e9b62618655c54bebbc8b7259e3822113","sha512":"8e8625a0b9c014245038bb40dacf293c4337c6a1d904bda771c4760ec8397fb7c8eab068bf538c867242213dc4df1ef96dd0152440f78403c62b82f5f5e9cbf2","ssdeep":"1536:d9/oVWud2FUfQvo7aTP09+k1IdxUSSPYdoDsimM:dxbuG9o7R57Ad/BM","tlshash":"d4934cd5ba00f06e51eb81b810be5843f33d6b1afa0d4c54b1179c943dd6988a39ffa6","first_seen":"2026-06-19T14:01:37.598707Z","last_seen":"2026-06-22T02:14:49.88197Z","times_seen":238,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=Inter:opsz,wght@14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:32.992Z","timestamp":1781931092992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=Inter:opsz,wght@14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 20 Jun 2026 04:51:33 GMT\r\ndate: Sat, 20 Jun 2026 04:51:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29741,"size_decoded":1939,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c7b88021dc76a3db08da10cb2f92bd3a","sha1":"db1fb11b02fa69084eb28d81250664f5c0569883","sha256":"eafd6f8ab58f27d707ec4d9ab9f301f07a26d9bec6fb29bf107b8d192d18bf57","sha512":"64ccf90936826a0ec057c9acd401bf23839e78f07de24f6a8c3328835a0e6c0388a71e99012c6036370678c338377793f90626420837943d4326dee84466b861","ssdeep":"384:r3db3Ro3u3/3yQbnogDHQbnogDHT8bVXotnUnK+btomdR0bzosPzEbjo8/aI8iip:rFCevmEAr+U","tlshash":"f7d2dfc5816b9400ab431cd177cfbe35ad8ea1a47445c979abfe3ce49c9bc222364b1d","first_seen":"2025-09-27T01:41:42.182391Z","last_seen":"2026-06-20T16:18:40.504574Z","times_seen":168,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/runtime.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:32.996Z","timestamp":1781931092996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carelabs.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 05:45:08 GMT","end":"Wed, 22 Jul 2026 06:43:42 GMT"},"fingerprint":{"sha1":"51:90:E6:77:7D:6C:AD:92:06:ED:96:3A:CE:4A:71:5B:32:EA:34:73","sha256":"60:22:C8:E2:33:07:4D:1B:DD:8D:00:55:22:D5:07:87:68:9E:D3:58:FC:F5:3F:31:AE:7D:7D:B5:6E:88:83:A9"}}},"request":{"raw":"GET /runtime.js HTTP/1.1\r\nHost: endpoint.redlegg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 377\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; connect-src 'self' https://*.limacharlie.io/ wss://*.limacharlie.io/ wss://*.firebaseio.com/.ws https://securetoken.googleapis.com/v1/token https://storage.googleapis.com/ https://o541605.ingest.us.sentry.io/ https://*.posthog.com/ https://identitytoolkit.googleapis.com/ https://us-central1-refractionpoint-lce.cloudfunctions.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/css2 https://apis.google.com/ https://www.google.com/ https://www.gstatic.com/ https://api.hsforms.com/submissions/v3/integration/ https://dialogflow.cloud.google.com/v1/cx/integrations/ https://downloads.limacharlie.io/urls https://www.limacharlie.com/ https://registry.modelcontextprotocol.io/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://www.gstatic.com/ https://fonts.googleapis.com/icon https://fonts.googleapis.com/css ; img-src 'self' https://storage.cloud.google.com/limacharlie-io/ https://*.googleusercontent.com/download/storage/v1/b/limacharlie-io/ https://storage.googleapis.com/ https://www.hpcsec.com/wp-content/uploads/2023/05/cropped-black-grey-rectangle-logo.png https://www.jumpsec.com/wp-content/uploads/2022/08/JUMPSEC-2021-Retina.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.misp-project.org/img/logo.png https://github.com/target/strelka/raw/master/misc/assets/strelka_banner.png https://img.youtube.com/ https://images.coursestack.com/ data: blob: ; font-src 'self' https://fonts.gstatic.com/s/ https://fonts.gstatic.com/l/ https://app.limacharlie.io/ data: ; frame-src 'self' https://refractionpoint-lce.firebaseapp.com/ https://js.stripe.com/ https://*.firebaseio.com/ https://www.google.com/ https://www.recaptcha.google.com/ ; script-src-elem 'unsafe-inline' 'self' https://*.firebaseio.com/ https://apis.google.com/ https://js.stripe.com/ https://*.posthog.com/ https://p.limacharlie.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/dialogflow-console/ ; worker-src 'self' blob: ; manifest-src 'self'; report-uri https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825; report-to csp-endpoint;\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"34d5abe9fef116ee2a5f33f01ae8692bbba6ac6ebe744ba58c8672c17de38026-br\"\r\nlast-modified: Thu, 18 Jun 2026 19:24:03 GMT\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"csp-endpoint\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=3600 ; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 04:51:33 GMT\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781931093.000871,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":736,"size_decoded":3565,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"a3e43b7b3b2465994ecb0fc401360965","sha1":"aa9e72a3bffb74b832bf5d41b2ca1988aec7dc46","sha256":"86d92b68e5650f044120d55d16fc66faa6f9c224e8d2c62f196c357810b705fc","sha512":"855fb144f449b4575b9cafd4b5724d1d1506be951ac26f98eec73d4f6d29aec5bd4b6efe6b3f2abdb6411f700b632c910189a7d897ad07ed24f0a00c7bc933fa","ssdeep":"","tlshash":"3e0168f6056d80278b00c2a8a00f3c4a7932621b1c4ebeb07aa87964761c91b50f5f9a","first_seen":"2026-03-25T03:13:02.85433Z","last_seen":"2026-06-20T16:18:40.505344Z","times_seen":34,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/dialogflow-console/fast/df-messenger/prod/v1/df-messenger.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:33.000Z","timestamp":1781931093000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /dialogflow-console/fast/df-messenger/prod/v1/df-messenger.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/dialogflow-console\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"dialogflow-console\"\r\nreport-to: {\"group\":\"dialogflow-console\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dialogflow-console\"}]}\r\ncontent-length: 130615\r\ndate: Sat, 20 Jun 2026 04:51:33 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlast-modified: Mon, 09 Jun 2025 15:03:15 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":536519,"size_decoded":131491,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1212)","md5":"b9949df91ed7e79cc673d2848645e769","sha1":"e599fbf91d67ce3f7ea9844a555081e384e7d73a","sha256":"c4fea5a7f0e0769c55fcaabedd317f9f19124f9397f77bbb614c5053a9339f91","sha512":"24a8525c0f0b8e084cc1b14329c08fa35550fd5fa440f0829cb288482ef75c8dc1fd271747054eb07ef8302ea80faf19bc33959e44e0863f3b82c631e6ddb413","ssdeep":"6144:vxI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDL0vX2rH9s7jRmxpyj6Gxr6GqHoAsD+yc:CZzi0S0jRm+BwqD6VXV8lvUyk","tlshash":"1db44dd8f9d56936a69763e5267bd44daf2534b0f408988cf0cce4e10f969ca06a3f34","first_seen":"2025-06-10T07:03:53.662804Z","last_seen":"2026-06-21T23:31:56.066308Z","times_seen":510,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":28,"receive":36,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/favicon.ico","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:34.075Z","timestamp":1781931094075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carelabs.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 05:45:08 GMT","end":"Wed, 22 Jul 2026 06:43:42 GMT"},"fingerprint":{"sha1":"51:90:E6:77:7D:6C:AD:92:06:ED:96:3A:CE:4A:71:5B:32:EA:34:73","sha256":"60:22:C8:E2:33:07:4D:1B:DD:8D:00:55:22:D5:07:87:68:9E:D3:58:FC:F5:3F:31:AE:7D:7D:B5:6E:88:83:A9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: endpoint.redlegg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 393\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; connect-src 'self' https://*.limacharlie.io/ wss://*.limacharlie.io/ wss://*.firebaseio.com/.ws https://securetoken.googleapis.com/v1/token https://storage.googleapis.com/ https://o541605.ingest.us.sentry.io/ https://*.posthog.com/ https://identitytoolkit.googleapis.com/ https://us-central1-refractionpoint-lce.cloudfunctions.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/css2 https://apis.google.com/ https://www.google.com/ https://www.gstatic.com/ https://api.hsforms.com/submissions/v3/integration/ https://dialogflow.cloud.google.com/v1/cx/integrations/ https://downloads.limacharlie.io/urls https://www.limacharlie.com/ https://registry.modelcontextprotocol.io/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://www.gstatic.com/ https://fonts.googleapis.com/icon https://fonts.googleapis.com/css ; img-src 'self' https://storage.cloud.google.com/limacharlie-io/ https://*.googleusercontent.com/download/storage/v1/b/limacharlie-io/ https://storage.googleapis.com/ https://www.hpcsec.com/wp-content/uploads/2023/05/cropped-black-grey-rectangle-logo.png https://www.jumpsec.com/wp-content/uploads/2022/08/JUMPSEC-2021-Retina.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.misp-project.org/img/logo.png https://github.com/target/strelka/raw/master/misc/assets/strelka_banner.png https://img.youtube.com/ https://images.coursestack.com/ data: blob: ; font-src 'self' https://fonts.gstatic.com/s/ https://fonts.gstatic.com/l/ https://app.limacharlie.io/ data: ; frame-src 'self' https://refractionpoint-lce.firebaseapp.com/ https://js.stripe.com/ https://*.firebaseio.com/ https://www.google.com/ https://www.recaptcha.google.com/ ; script-src-elem 'unsafe-inline' 'self' https://*.firebaseio.com/ https://apis.google.com/ https://js.stripe.com/ https://*.posthog.com/ https://p.limacharlie.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/dialogflow-console/ ; worker-src 'self' blob: ; manifest-src 'self'; report-uri https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825; report-to csp-endpoint;\r\ncontent-type: text/html; charset=utf-8\r\netag: \"65f8a413c3cb4653bb7dafdc97fefae6ca3840e17b822972b394b7287c0ff85e-br\"\r\nlast-modified: Thu, 18 Jun 2026 19:24:03 GMT\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"csp-endpoint\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=3600 ; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 04:51:34 GMT\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781931094.084468,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1228,"size_decoded":3575,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7edc04c5dbc23cc148a2e57e1fc1319e","sha1":"5f6b5c2d0b10708dc8f15b2cc95189c73dc5c72c","sha256":"1b66cfe0168be11b26def574a43e923b89421a1ad0582ce70fa11c2e07172546","sha512":"12b170121af2af6615ab56e0f65b09fef0236611c57ade2b389cfe5e8e4ee5e82d5a5c6fa2cfde655a69edbf41d990fedef7e9d7a52c0bd95b51061b6d535b74","ssdeep":"","tlshash":"4521179f4cdcc095131091567c50742ecd03624b82b9b985b1f580fdcfc47d14dcb669","first_seen":"2026-06-19T01:14:14.456683Z","last_seen":"2026-06-20T16:18:40.513919Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/runtime.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:34.103Z","timestamp":1781931094103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carelabs.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 05:45:08 GMT","end":"Wed, 22 Jul 2026 06:43:42 GMT"},"fingerprint":{"sha1":"51:90:E6:77:7D:6C:AD:92:06:ED:96:3A:CE:4A:71:5B:32:EA:34:73","sha256":"60:22:C8:E2:33:07:4D:1B:DD:8D:00:55:22:D5:07:87:68:9E:D3:58:FC:F5:3F:31:AE:7D:7D:B5:6E:88:83:A9"}}},"request":{"raw":"GET /runtime.js HTTP/1.1\r\nHost: endpoint.redlegg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 377\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; connect-src 'self' https://*.limacharlie.io/ wss://*.limacharlie.io/ wss://*.firebaseio.com/.ws https://securetoken.googleapis.com/v1/token https://storage.googleapis.com/ https://o541605.ingest.us.sentry.io/ https://*.posthog.com/ https://identitytoolkit.googleapis.com/ https://us-central1-refractionpoint-lce.cloudfunctions.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/css2 https://apis.google.com/ https://www.google.com/ https://www.gstatic.com/ https://api.hsforms.com/submissions/v3/integration/ https://dialogflow.cloud.google.com/v1/cx/integrations/ https://downloads.limacharlie.io/urls https://www.limacharlie.com/ https://registry.modelcontextprotocol.io/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://www.gstatic.com/ https://fonts.googleapis.com/icon https://fonts.googleapis.com/css ; img-src 'self' https://storage.cloud.google.com/limacharlie-io/ https://*.googleusercontent.com/download/storage/v1/b/limacharlie-io/ https://storage.googleapis.com/ https://www.hpcsec.com/wp-content/uploads/2023/05/cropped-black-grey-rectangle-logo.png https://www.jumpsec.com/wp-content/uploads/2022/08/JUMPSEC-2021-Retina.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.misp-project.org/img/logo.png https://github.com/target/strelka/raw/master/misc/assets/strelka_banner.png https://img.youtube.com/ https://images.coursestack.com/ data: blob: ; font-src 'self' https://fonts.gstatic.com/s/ https://fonts.gstatic.com/l/ https://app.limacharlie.io/ data: ; frame-src 'self' https://refractionpoint-lce.firebaseapp.com/ https://js.stripe.com/ https://*.firebaseio.com/ https://www.google.com/ https://www.recaptcha.google.com/ ; script-src-elem 'unsafe-inline' 'self' https://*.firebaseio.com/ https://apis.google.com/ https://js.stripe.com/ https://*.posthog.com/ https://p.limacharlie.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/dialogflow-console/ ; worker-src 'self' blob: ; manifest-src 'self'; report-uri https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825; report-to csp-endpoint;\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"34d5abe9fef116ee2a5f33f01ae8692bbba6ac6ebe744ba58c8672c17de38026-br\"\r\nlast-modified: Thu, 18 Jun 2026 19:24:03 GMT\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"csp-endpoint\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=3600 ; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 04:51:34 GMT\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1781931094.108126,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":736,"size_decoded":3565,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"a3e43b7b3b2465994ecb0fc401360965","sha1":"aa9e72a3bffb74b832bf5d41b2ca1988aec7dc46","sha256":"86d92b68e5650f044120d55d16fc66faa6f9c224e8d2c62f196c357810b705fc","sha512":"855fb144f449b4575b9cafd4b5724d1d1506be951ac26f98eec73d4f6d29aec5bd4b6efe6b3f2abdb6411f700b632c910189a7d897ad07ed24f0a00c7bc933fa","ssdeep":"","tlshash":"3e0168f6056d80278b00c2a8a00f3c4a7932621b1c4ebeb07aa87964761c91b50f5f9a","first_seen":"2026-03-25T03:13:02.85433Z","last_seen":"2026-06-20T16:18:40.505344Z","times_seen":34,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.limacharlie.io/e/?ip=0\u0026_=1781931097331\u0026ver=1.372.6\u0026compression=gzip-js","fqdn":"p.limacharlie.io","domain":"limacharlie.io","tld":"io"},"ip":{"addr":"34.54.249.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:37.336Z","timestamp":1781931097336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.limacharlie.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 22:45:51 GMT","end":"Mon, 17 Aug 2026 23:38:44 GMT"},"fingerprint":{"sha1":"E4:9F:05:59:9D:CE:B7:AA:24:2A:D8:39:2D:49:F4:38:86:B0:B6:C5","sha256":"47:82:14:64:BB:8A:CF:47:0F:83:2F:5C:ED:DD:59:57:1B:FA:A2:FC:DC:67:5B:E2:85:87:20:BA:C7:11:1D:5E"}}},"request":{"raw":"POST /e/?ip=0\u0026_=1781931097331\u0026ver=1.372.6\u0026compression=gzip-js HTTP/1.1\r\nHost: p.limacharlie.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: text/plain\r\nContent-Length: 1059\r\nOrigin: https://endpoint.redlegg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 20 Jun 2026 04:51:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://endpoint.redlegg.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 22\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":483,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-22T02:14:49.875244Z","times_seen":36692,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/dialogflow-console/fast/df-messenger/prod/v1/themes/df-messenger-default.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:32.998Z","timestamp":1781931092998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /dialogflow-console/fast/df-messenger/prod/v1/themes/df-messenger-default.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/dialogflow-console\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"dialogflow-console\"\r\nreport-to: {\"group\":\"dialogflow-console\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dialogflow-console\"}]}\r\ncontent-length: 1157\r\ndate: Sat, 20 Jun 2026 04:51:33 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlast-modified: Mon, 09 Jun 2025 15:03:15 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7173,"size_decoded":2044,"mime_type":"text/css","magic":"ASCII text, with very long lines (7120)","md5":"d95f3632e4215c1bec7d6a06e58fd19d","sha1":"25d104f1d8fddb547eff54665e35d58596ee13c3","sha256":"ce54a6ae25414fb24964545dfa4885303ce0e941d14fe33c1d3aaae54f59077b","sha512":"583584cbde915c5c0e8ea1f7f99591c4df70ec62396b490e8faa0a12b29ce2e1023d9e1bcb89c2871930766e243f6aa91f7a825d32b1d33d0c47d615800c517b","ssdeep":"48:utdhcX4oprgaII6xLTazN6VoYTeelz28V+g65Vi1yz9iYJRVxVkN1VCJkW:0hcoopXIAzNJYTflz2TKqp","tlshash":"8ce1299ba1c811ebf32e8fedad00ad9957142b41ab5c1e8db4d4dc6f238cf6016d1b09","first_seen":"2025-05-08T14:43:15.241061Z","last_seen":"2026-06-21T23:31:56.099194Z","times_seen":248,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":34,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/assets/Login-DeijkrSe.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:34.421Z","timestamp":1781931094421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carelabs.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 05:45:08 GMT","end":"Wed, 22 Jul 2026 06:43:42 GMT"},"fingerprint":{"sha1":"51:90:E6:77:7D:6C:AD:92:06:ED:96:3A:CE:4A:71:5B:32:EA:34:73","sha256":"60:22:C8:E2:33:07:4D:1B:DD:8D:00:55:22:D5:07:87:68:9E:D3:58:FC:F5:3F:31:AE:7D:7D:B5:6E:88:83:A9"}}},"request":{"raw":"GET /assets/Login-DeijkrSe.js HTTP/1.1\r\nHost: endpoint.redlegg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://endpoint.redlegg.com/assets/index-6n7slKiv.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ph_phc_i8vjJyvXZuLLCQary8Xf0U9Q1ZvvZuKgSIWXD9VwJGI_posthog=%7B%22%24device_id%22%3A%22019ee35e-b13a-7754-a518-4a78cf80896f%22%2C%22distinct_id%22%3A%22019ee35e-b13a-7754-a518-4a78cf80896f%22%2C%22%24sesid%22%3A%5B1781931094362%2C%22019ee35e-b15b-7c75-ad85-2e5501bc7d8e%22%2C1781931094362%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fendpoint.redlegg.com%2Forgs%2F2dd8b737-c762-4dde-8b78-c127292a2028%2Fsensors%2F6ed57fab-364e-4648-9c63-1917d2cb291c%2Ftimeline%3Ftime%3D1781929288%26selected%3D4e05a868f1b1de47d93582466a361bd9%22%7D%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 347\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; connect-src 'self' https://*.limacharlie.io/ wss://*.limacharlie.io/ wss://*.firebaseio.com/.ws https://securetoken.googleapis.com/v1/token https://storage.googleapis.com/ https://o541605.ingest.us.sentry.io/ https://*.posthog.com/ https://identitytoolkit.googleapis.com/ https://us-central1-refractionpoint-lce.cloudfunctions.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/css2 https://apis.google.com/ https://www.google.com/ https://www.gstatic.com/ https://api.hsforms.com/submissions/v3/integration/ https://dialogflow.cloud.google.com/v1/cx/integrations/ https://downloads.limacharlie.io/urls https://www.limacharlie.com/ https://registry.modelcontextprotocol.io/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://www.gstatic.com/ https://fonts.googleapis.com/icon https://fonts.googleapis.com/css ; img-src 'self' https://storage.cloud.google.com/limacharlie-io/ https://*.googleusercontent.com/download/storage/v1/b/limacharlie-io/ https://storage.googleapis.com/ https://www.hpcsec.com/wp-content/uploads/2023/05/cropped-black-grey-rectangle-logo.png https://www.jumpsec.com/wp-content/uploads/2022/08/JUMPSEC-2021-Retina.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.misp-project.org/img/logo.png https://github.com/target/strelka/raw/master/misc/assets/strelka_banner.png https://img.youtube.com/ https://images.coursestack.com/ data: blob: ; font-src 'self' https://fonts.gstatic.com/s/ https://fonts.gstatic.com/l/ https://app.limacharlie.io/ data: ; frame-src 'self' https://refractionpoint-lce.firebaseapp.com/ https://js.stripe.com/ https://*.firebaseio.com/ https://www.google.com/ https://www.recaptcha.google.com/ ; script-src-elem 'unsafe-inline' 'self' https://*.firebaseio.com/ https://apis.google.com/ https://js.stripe.com/ https://*.posthog.com/ https://p.limacharlie.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/dialogflow-console/ ; worker-src 'self' blob: ; manifest-src 'self'; report-uri https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825; report-to csp-endpoint;\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"3a1510325fe33b47e60f7d1bdbca6dbf859440737961126b4213356652a463c5-br\"\r\nlast-modified: Thu, 18 Jun 2026 19:24:03 GMT\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"csp-endpoint\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=3600 ; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 04:51:34 GMT\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781931094.425602,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":599,"size_decoded":3535,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (555)","md5":"8b3d42ec5d0b18315c0cea80f1289c99","sha1":"5a6e773ebca4e0286294bdf61ca6038320900426","sha256":"de27e676e1bacfe204286038fb9b9effb2ea81b1c8d25b2950af1c35fc1e8261","sha512":"4010017594aca7b1dd6154a7fba6ab0026fbc50c0c98d20e03ca8f49a035db23e7a3d8605b60835ce45666011c4eb1bcdd458ee2223953f042ae3a346bcaa2bd","ssdeep":"","tlshash":"70f0ac4e4ef06bfb904a1badd963700672595033929dce91d128467e27a9b8edc0cb4b","first_seen":"2026-06-19T01:14:14.459683Z","last_seen":"2026-06-20T16:18:40.508789Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:34.703Z","timestamp":1781931094703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://endpoint.redlegg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15620\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 04:21:10 GMT\r\nexpires: Fri, 18 Jun 2027 04:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 174624\r\nlast-modified: Mon, 15 Sep 2025 17:09:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":15620,"size_decoded":16433,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15620, version 1.0","md5":"5a2ce7798732476dec03a9561de231fe","sha1":"ce9a5ca3a874da9201c2630c5cb7bfaa9688c052","sha256":"0d1f0b8d0722224e32e9f28261bdc86c79115be73444ae5eceb73976a1bcdf83","sha512":"5c4ebd97feaabdb478b615990f286b114ee3b76ce43dfe4122b4e6ec998ae3d4110a4a893b65f6ba81c25da0d3ad7e5a5221fb8c8efb58e5d06e9b3c890f9832","ssdeep":"384:AcHslrQJgsgNQhzVr/oaqSeH04dAM4PmV:7slrULvz9/NqSZLZOV","tlshash":"4162d010270e7176dc461378dd56c9e30476ffbec8120f6b7e91a9a258c5fd4722127a","first_seen":"2025-09-19T17:22:27.512197Z","last_seen":"2026-06-21T21:43:54.86287Z","times_seen":1004,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.limacharlie.io/flags/?v=2\u0026ip=0\u0026_=1781931094355\u0026ver=1.372.6\u0026compression=base64","fqdn":"p.limacharlie.io","domain":"limacharlie.io","tld":"io"},"ip":{"addr":"34.54.249.26","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:34.416Z","timestamp":1781931094416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"p.limacharlie.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 22:45:51 GMT","end":"Mon, 17 Aug 2026 23:38:44 GMT"},"fingerprint":{"sha1":"E4:9F:05:59:9D:CE:B7:AA:24:2A:D8:39:2D:49:F4:38:86:B0:B6:C5","sha256":"47:82:14:64:BB:8A:CF:47:0F:83:2F:5C:ED:DD:59:57:1B:FA:A2:FC:DC:67:5B:E2:85:87:20:BA:C7:11:1D:5E"}}},"request":{"raw":"POST /flags/?v=2\u0026ip=0\u0026_=1781931094355\u0026ver=1.372.6\u0026compression=base64 HTTP/1.1\r\nHost: p.limacharlie.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 293\r\nOrigin: https://endpoint.redlegg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 20 Jun 2026 04:51:34 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://endpoint.redlegg.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-posthog-rate-limit-warning\r\nx-envoy-upstream-service-time: 5\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3353,"size_decoded":1192,"mime_type":"application/json","magic":"JSON text data","md5":"61515fafcac3cff67cdd807facbc3834","sha1":"1a22ad3b7b1ef6334e7fab0ffb06d09b3dcf4b40","sha256":"7af41451978d6b94caceb1d539711570512f59526aabfd6e02361842002e5f64","sha512":"fb971fc9ad1e6c1e9bfbab99a4a55d52f26065bf3b87820bb243248250f74c8a4eae275f466b17214d667656b7df1c5edc0ef024aeef2ab1c3d9d025e5c7cccb","ssdeep":"","tlshash":"4c610832ac64f9b7548fc3904ca8fd05477e276b1a524c514c869b3803f76f97a2bc61","first_seen":"2026-06-20T04:52:06.887168Z","last_seen":"2026-06-20T04:52:06.887168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":18,"connect":12,"send":0,"wait":324,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:34.422Z","timestamp":1781931094422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://endpoint.redlegg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:30:41 GMT\r\nexpires: Mon, 14 Jun 2027 10:30:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 498053\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-06-22T01:32:50.134283Z","times_seen":27422,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":17,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T04:51:32.282Z","timestamp":1781931092282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carelabs.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 05:45:08 GMT","end":"Wed, 22 Jul 2026 06:43:42 GMT"},"fingerprint":{"sha1":"51:90:E6:77:7D:6C:AD:92:06:ED:96:3A:CE:4A:71:5B:32:EA:34:73","sha256":"60:22:C8:E2:33:07:4D:1B:DD:8D:00:55:22:D5:07:87:68:9E:D3:58:FC:F5:3F:31:AE:7D:7D:B5:6E:88:83:A9"}}},"request":{"raw":"GET /orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9 HTTP/1.1\r\nHost: endpoint.redlegg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; connect-src 'self' https://*.limacharlie.io/ wss://*.limacharlie.io/ wss://*.firebaseio.com/.ws https://securetoken.googleapis.com/v1/token https://storage.googleapis.com/ https://o541605.ingest.us.sentry.io/ https://*.posthog.com/ https://identitytoolkit.googleapis.com/ https://us-central1-refractionpoint-lce.cloudfunctions.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/css2 https://apis.google.com/ https://www.google.com/ https://www.gstatic.com/ https://api.hsforms.com/submissions/v3/integration/ https://dialogflow.cloud.google.com/v1/cx/integrations/ https://downloads.limacharlie.io/urls https://www.limacharlie.com/ https://registry.modelcontextprotocol.io/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://www.gstatic.com/ https://fonts.googleapis.com/icon https://fonts.googleapis.com/css ; img-src 'self' https://storage.cloud.google.com/limacharlie-io/ https://*.googleusercontent.com/download/storage/v1/b/limacharlie-io/ https://storage.googleapis.com/ https://www.hpcsec.com/wp-content/uploads/2023/05/cropped-black-grey-rectangle-logo.png https://www.jumpsec.com/wp-content/uploads/2022/08/JUMPSEC-2021-Retina.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.misp-project.org/img/logo.png https://github.com/target/strelka/raw/master/misc/assets/strelka_banner.png https://img.youtube.com/ https://images.coursestack.com/ data: blob: ; font-src 'self' https://fonts.gstatic.com/s/ https://fonts.gstatic.com/l/ https://app.limacharlie.io/ data: ; frame-src 'self' https://refractionpoint-lce.firebaseapp.com/ https://js.stripe.com/ https://*.firebaseio.com/ https://www.google.com/ https://www.recaptcha.google.com/ ; script-src-elem 'unsafe-inline' 'self' https://*.firebaseio.com/ https://apis.google.com/ https://js.stripe.com/ https://*.posthog.com/ https://p.limacharlie.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/dialogflow-console/ ; worker-src 'self' blob: ; manifest-src 'self'; report-uri https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825; report-to csp-endpoint;\r\ncontent-type: text/html; charset=utf-8\r\netag: \"65f8a413c3cb4653bb7dafdc97fefae6ca3840e17b822972b394b7287c0ff85e-br\"\r\nlast-modified: Thu, 18 Jun 2026 19:24:03 GMT\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"csp-endpoint\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=3600 ; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 04:51:32 GMT\r\nx-served-by: cache-bma-essb1270076-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1781931092.358914,VS0,VE62\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 393\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1228,"size_decoded":3597,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7edc04c5dbc23cc148a2e57e1fc1319e","sha1":"5f6b5c2d0b10708dc8f15b2cc95189c73dc5c72c","sha256":"1b66cfe0168be11b26def574a43e923b89421a1ad0582ce70fa11c2e07172546","sha512":"12b170121af2af6615ab56e0f65b09fef0236611c57ade2b389cfe5e8e4ee5e82d5a5c6fa2cfde655a69edbf41d990fedef7e9d7a52c0bd95b51061b6d535b74","ssdeep":"","tlshash":"4521179f4cdcc095131091567c50742ecd03624b82b9b985b1f580fdcfc47d14dcb669","first_seen":"2026-06-19T01:14:14.456683Z","last_seen":"2026-06-20T16:18:40.513919Z","times_seen":6,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":41,"connect":9,"send":0,"wait":71,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/assets/index-6n7slKiv.js","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:33.002Z","timestamp":1781931093002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carelabs.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 05:45:08 GMT","end":"Wed, 22 Jul 2026 06:43:42 GMT"},"fingerprint":{"sha1":"51:90:E6:77:7D:6C:AD:92:06:ED:96:3A:CE:4A:71:5B:32:EA:34:73","sha256":"60:22:C8:E2:33:07:4D:1B:DD:8D:00:55:22:D5:07:87:68:9E:D3:58:FC:F5:3F:31:AE:7D:7D:B5:6E:88:83:A9"}}},"request":{"raw":"GET /assets/index-6n7slKiv.js HTTP/1.1\r\nHost: endpoint.redlegg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 1378226\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; connect-src 'self' https://*.limacharlie.io/ wss://*.limacharlie.io/ wss://*.firebaseio.com/.ws https://securetoken.googleapis.com/v1/token https://storage.googleapis.com/ https://o541605.ingest.us.sentry.io/ https://*.posthog.com/ https://identitytoolkit.googleapis.com/ https://us-central1-refractionpoint-lce.cloudfunctions.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/css2 https://apis.google.com/ https://www.google.com/ https://www.gstatic.com/ https://api.hsforms.com/submissions/v3/integration/ https://dialogflow.cloud.google.com/v1/cx/integrations/ https://downloads.limacharlie.io/urls https://www.limacharlie.com/ https://registry.modelcontextprotocol.io/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://www.gstatic.com/ https://fonts.googleapis.com/icon https://fonts.googleapis.com/css ; img-src 'self' https://storage.cloud.google.com/limacharlie-io/ https://*.googleusercontent.com/download/storage/v1/b/limacharlie-io/ https://storage.googleapis.com/ https://www.hpcsec.com/wp-content/uploads/2023/05/cropped-black-grey-rectangle-logo.png https://www.jumpsec.com/wp-content/uploads/2022/08/JUMPSEC-2021-Retina.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.misp-project.org/img/logo.png https://github.com/target/strelka/raw/master/misc/assets/strelka_banner.png https://img.youtube.com/ https://images.coursestack.com/ data: blob: ; font-src 'self' https://fonts.gstatic.com/s/ https://fonts.gstatic.com/l/ https://app.limacharlie.io/ data: ; frame-src 'self' https://refractionpoint-lce.firebaseapp.com/ https://js.stripe.com/ https://*.firebaseio.com/ https://www.google.com/ https://www.recaptcha.google.com/ ; script-src-elem 'unsafe-inline' 'self' https://*.firebaseio.com/ https://apis.google.com/ https://js.stripe.com/ https://*.posthog.com/ https://p.limacharlie.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/dialogflow-console/ ; worker-src 'self' blob: ; manifest-src 'self'; report-uri https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825; report-to csp-endpoint;\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"bd5c2d7810899d8b253d1da6e9be61289e44f4a0cceb49bba7559c3209e5fba7-br\"\r\nlast-modified: Thu, 18 Jun 2026 19:24:03 GMT\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"csp-endpoint\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=3600 ; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 04:51:33 GMT\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781931093.007474,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":7356563,"size_decoded":1381418,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29663)","md5":"e7e9496a73f8a298996e117126b35011","sha1":"2b523844270335a39392e8d3a4dfd3ed9c71252d","sha256":"edcbf74461a52b6689b45564236e41f25696f59991eb1776cf0cac9f5b14ee84","sha512":"bedbd2929788bc336716cf1685cc418f97b7da0160575a02fa4206c8b226f3dcd77dd171a1e9160714ec19e120d3cef59f33410c8cb759cbbf478df143ad4e00","ssdeep":"12288:26HPO2OO0SiRJNfkDFIs3BwmNRU8c5YiaG:2p0iRJNIFIs60RZc5YiaG","tlshash":"f3254cc973baa0328a9644e6547f4003f62c5d02601cc4ecfe5ddae939e9545a2bbf7c","first_seen":"2026-06-19T01:14:14.471682Z","last_seen":"2026-06-20T16:18:40.506083Z","times_seen":6,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"endpoint.redlegg.com/assets/index-DoEwEje5.css","fqdn":"endpoint.redlegg.com","domain":"redlegg.com","tld":"com"},"ip":{"addr":"151.101.1.195","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9","date":"2026-06-20T04:51:33.004Z","timestamp":1781931093004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carelabs.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 05:45:08 GMT","end":"Wed, 22 Jul 2026 06:43:42 GMT"},"fingerprint":{"sha1":"51:90:E6:77:7D:6C:AD:92:06:ED:96:3A:CE:4A:71:5B:32:EA:34:73","sha256":"60:22:C8:E2:33:07:4D:1B:DD:8D:00:55:22:D5:07:87:68:9E:D3:58:FC:F5:3F:31:AE:7D:7D:B5:6E:88:83:A9"}}},"request":{"raw":"GET /assets/index-DoEwEje5.css HTTP/1.1\r\nHost: endpoint.redlegg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://endpoint.redlegg.com/orgs/2dd8b737-c762-4dde-8b78-c127292a2028/sensors/6ed57fab-364e-4648-9c63-1917d2cb291c/timeline?time=1781929288\u0026selected=4e05a868f1b1de47d93582466a361bd9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 4893\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'; connect-src 'self' https://*.limacharlie.io/ wss://*.limacharlie.io/ wss://*.firebaseio.com/.ws https://securetoken.googleapis.com/v1/token https://storage.googleapis.com/ https://o541605.ingest.us.sentry.io/ https://*.posthog.com/ https://identitytoolkit.googleapis.com/ https://us-central1-refractionpoint-lce.cloudfunctions.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/css2 https://apis.google.com/ https://www.google.com/ https://www.gstatic.com/ https://api.hsforms.com/submissions/v3/integration/ https://dialogflow.cloud.google.com/v1/cx/integrations/ https://downloads.limacharlie.io/urls https://www.limacharlie.com/ https://registry.modelcontextprotocol.io/ ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://www.gstatic.com/ https://fonts.googleapis.com/icon https://fonts.googleapis.com/css ; img-src 'self' https://storage.cloud.google.com/limacharlie-io/ https://*.googleusercontent.com/download/storage/v1/b/limacharlie-io/ https://storage.googleapis.com/ https://www.hpcsec.com/wp-content/uploads/2023/05/cropped-black-grey-rectangle-logo.png https://www.jumpsec.com/wp-content/uploads/2022/08/JUMPSEC-2021-Retina.png https://images.squarespace-cdn.com/content/v1/647a0e6d7e0f640683184bf4/d8bef655-332f-4709-b56e-0a5bc05fe009/full-logo-periwinkle.png https://www.misp-project.org/img/logo.png https://github.com/target/strelka/raw/master/misc/assets/strelka_banner.png https://img.youtube.com/ https://images.coursestack.com/ data: blob: ; font-src 'self' https://fonts.gstatic.com/s/ https://fonts.gstatic.com/l/ https://app.limacharlie.io/ data: ; frame-src 'self' https://refractionpoint-lce.firebaseapp.com/ https://js.stripe.com/ https://*.firebaseio.com/ https://www.google.com/ https://www.recaptcha.google.com/ ; script-src-elem 'unsafe-inline' 'self' https://*.firebaseio.com/ https://apis.google.com/ https://js.stripe.com/ https://*.posthog.com/ https://p.limacharlie.io/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/dialogflow-console/ ; worker-src 'self' blob: ; manifest-src 'self'; report-uri https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825; report-to csp-endpoint;\r\ncontent-type: text/css; charset=utf-8\r\netag: \"fd9cb84100fbc5688c09c8475612d6206d0bffb22d44711c7053e34c30ce6e8c-br\"\r\nlast-modified: Thu, 18 Jun 2026 19:24:03 GMT\r\nreferrer-policy: same-origin\r\nreport-to: {\"group\":\"csp-endpoint\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://o541605.ingest.us.sentry.io/api/5660726/security/?sentry_key=9aceeec567e940de825127c5c33fd825\"}],\"include_subdomains\":true}\r\nstrict-transport-security: max-age=3600 ; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: sameorigin\r\naccept-ranges: bytes\r\ndate: Sat, 20 Jun 2026 04:51:33 GMT\r\nx-served-by: cache-bma-essb1270037-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781931093.008848,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":36960,"size_decoded":8075,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (36958)","md5":"df11d7e07bd26fa8a4f1bb2f3c35dff1","sha1":"1dc7ad0c69207b54b6ca6b5966b8d117e9ed6e75","sha256":"41560b9ab147db8b352cb6358fd506b6f623a962c377967a679283ee8e523cc5","sha512":"874208e08f94017b84a82c75572324ea9773a01bf9ecb854e513db58cee403af8885debeb5708cf1dd2bb0de7290545eb7d352f1504cb4d879ff6f46cd493ad2","ssdeep":"192:K5SqUgOGfRibhE3XNVyl6dJkdo/k1bKJK4cK4hRyK4hwswK4hwafK4hwzK4hwGKu:icEib8paSTUIpytszbeq","tlshash":"eef2dd0098001dae9d3b197256dcfd4ae30fa69fc57e85e9b949b80913ba3cc06ef645","first_seen":"2026-05-02T01:01:47.277465Z","last_seen":"2026-06-20T16:18:40.506808Z","times_seen":36,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}