{"report_id":"fc82e977-609f-497e-b00d-1677b8d329b3","version":6,"status":"done","tags":[],"date":"2026-02-19T06:24:32Z","url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"title":"Home - NorthWell Trust","dom":{"size":42836,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"fe450c1935a30b0764509f339707e45f","sha1":"7fcc1c0a055ac4d4b40cd44a5dbee3bd383ffa80","sha256":"6e74f7378f40974968b6a902d65801b19b5503da18c1cde6ca57e761134b8524","sha512":"df0b564b404b26953e4b565270943c35e03b09f4235f68ba79bf4fac678b8dad59d11ee2a53862bd69cfb2ae9043df3e00ec3d5654a4b27ee7a7c4da9b69165d","ssdeep":"768:Bj08FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYWw:Bj08FYTbfsTO+LDCPKHshqa/XOl6rw","tlshash":"251396276780462c9c5392a4f399a54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhashcc4bef9b46a1092a0c209c6a656b6ae8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-26T06:24:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-02-19T03:47:50.471886Z","alert_count":0,"request_count":1,"received_data":7667,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-02-19T02:33:26.946454Z","alert_count":0,"request_count":3,"received_data":323929,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-02-18T12:58:45.725034Z","alert_count":0,"request_count":4,"received_data":83460,"sent_data":2039,"comment":"","tags":null,"fingerprints":null},{"fqdn":"open.er-api.com","ip":{"addr":"104.26.4.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-01","domain_rank":1426466,"first_seen":"2021-11-19T12:15:38Z","last_seen":"2026-02-09T17:42:28.318056Z","alert_count":0,"request_count":2,"received_data":7340,"sent_data":908,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-16T04:38:04.463306Z","alert_count":0,"request_count":2,"received_data":1024004,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-02-19T01:42:18.401402Z","alert_count":0,"request_count":162,"received_data":172728,"sent_data":70470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":19,"received_data":1477948,"sent_data":10593,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.182.5.119","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-18T21:35:32.888573Z","alert_count":0,"request_count":1,"received_data":1550,"sent_data":531,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.179.182.13","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-02-19T02:33:26.324026Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":608,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":15848,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-18T21:35:32.96014Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"northwelltrust.info","ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-19T06:24:35.282036Z","last_seen":"2026-02-19T06:24:35.282036Z","alert_count":10,"request_count":5,"received_data":2923697,"sent_data":5321,"comment":"","tags":null,"fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d8bc027a7bf4c91f68977f4adb649aeb","sha1":"82c3083c1796dc1f05f8f4e00e4c2158b4d56329","sha256":"48561bf772de82456babafb030cb14cbd36d1df838a537e1e849213ad93d3832","sha512":"07abaf6c4c6e00577cca7c3a1442146bcaf97a0213771d6bfa5adbbaed6c41537ba992fa4b80fbdbbfcb7c6e6ed54c06a0f4129cb438df3f91c21228f1baa35c","ssdeep":"","tlshash":"e8c09bc458cb5d00c31b3a95d1365c3b713c2661e1bd84691a3df3549577116d15dc5e","size":144,"data":"","first_seen":"2024-10-11T09:02:16.41319Z","last_seen":"2026-06-08T21:15:03.058521Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d0c9096d7aeb29837dd80fd2da9749fd","sha1":"61f7fd60187a7297e0b6c630e725fafd05d5aa70","sha256":"501d1b04f9896c03853d50e6123a5a4af566e469e55d7af4a1ae9bf01f0fa4f2","sha512":"c423ae1d206c7a31408eadf51f14db8958acb449bf0b382f15132c88f4799b917196853024a856da8f7b86cbca390c1c2f07f40ca858841fa9d9497d7d745af7","ssdeep":"","tlshash":"54c02bc048c20900c30339c0c036583f22381a20c07d4467263ce3948433006e18ccee","size":139,"data":"","first_seen":"2024-08-19T15:11:24.173194Z","last_seen":"2026-06-08T23:28:12.51879Z","times_seen":2188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"913954f6ad82066002cadf365204a859","sha1":"374279eb00c9e5b8955cb05f9f689a95b1ebe59e","sha256":"666ea40c9d7dd2c95e6ba3e59255236268364eb4052b1a96460b0c2bd3c03c8b","sha512":"1a31520c8c590eda152dd3dc165e4d5cd9f9dbabb56a65dc68fb3ed4a1c7a4ad4ca4beb334e0d255bfa83ab67101c84bc34b15cb795d6cc7d69281dee6b5e460","ssdeep":"","tlshash":"85c09bc458c65900c21735e1d03b543bb2381661917d44a5663da7549533117e15cc9d","size":132,"data":"","first_seen":"2026-02-19T06:24:41.55148Z","last_seen":"2026-02-19T06:24:41.55148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9b616a4db60c3a4b18b3d8f4f131f910","sha1":"2ac0d072db2067fb715831f2d1d7b6e96d50f6ce","sha256":"13a12687d9bc162d40a5adb709a3d021d5331e0e7ddb9b6492ac920938091c54","sha512":"bdd194b53bc79e2e42fd816bf414f1a381279bb426c24d066163ebfcc518d43ae63efe050b7ca80e93057dba921c679afaafcc72f0b8ea1c6231f847c18c8bd2","ssdeep":"","tlshash":"8ac02bc018c21e00c3033480c037a037233422a090bd45a4173ca3a48033006d04cc6d","size":133,"data":"","first_seen":"2026-02-19T06:24:41.55341Z","last_seen":"2026-02-19T06:24:41.55341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"90b2f5822dd35a1b4bd273166e1d9f3a","sha1":"262d8a75805a2b503c35835b9480c2a8cf7531d5","sha256":"9f6fca521923fdf2ea6c56b1b7ea669ef7400c2499b18783bbc21450f64dc32c","sha512":"92347020fef1da67ae37a277e3af170ec9250604f6ffd39cea4681c5e998363f513691a0e3b40188605ea4b41036fe3b69c2746124a8c0b833056ec3e29cc650","ssdeep":"","tlshash":"e5e02b74004d0103807505bd74c659a466370063a035fd24761c827c6f9aa568351bcb","size":309,"data":"","first_seen":"2025-06-30T12:46:17.173855Z","last_seen":"2026-06-07T07:18:34.16177Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f53c06f93ae095221ff718c3a158a93","sha1":"9572c80b2918c796eea3c16eba905ef835aeb41b","sha256":"899842782a7fd16fcc2d7a7c877ff9ec159394044c87b158b2ef132786606932","sha512":"d9ac61274b8de67808c2bc86fbdfa5b45d9c9858285a5bbf6a1ad21db09d4159e66bfe2c2fa2a8759591c17b224667b559e82fc71e6343b2df8d26a0375abe9e","ssdeep":"768:gDWpHFKOT9onx0mD+zcyLAE+7jNb+mQmPl7cQqDTvmtfbYxeE3X5K:iWG1h+cMAE25+mQ+LqOf8p5K","tlshash":"dc23f8e97396b53283ef01b180bb460af33d2990550e5468f769d8da383948d41f3fba","size":46632,"data":"","first_seen":"2026-02-03T15:27:32.411372Z","last_seen":"2026-06-06T09:06:40.070484Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e914e1388422d93e2bf99e48aece0847","sha1":"4424b678cbe93d08edc1ba88d16b0cd3cf849d39","sha256":"b1c99daa6783f11de37c845aa6b4c3f7f6b962164bfa1814df4200e405b9a916","sha512":"2bc81a15f1260b514cde803867fbc47f379e60cb422b0a8a0d3eda7f3500a4ceb0a808873291939f7e6bfdf2a4512a87409fd1208ab39b5ecca2850455715bf8","ssdeep":"","tlshash":"cfc08c8418820900c21338a1c039622a6139172090be44a41a3da3608533006d00ccae","size":150,"data":"","first_seen":"2026-02-19T06:24:41.556922Z","last_seen":"2026-02-19T06:24:41.556922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"10c39bd19fa0b24c498364ef3e0187b9","sha1":"bd5e8d3164dc767680166ef72993ac0a5931a0fa","sha256":"bd8bd63b0b7782f263a9fb13622efdbdffb74b398f28c5fbe69d1743741bd009","sha512":"2528141a8ce54b9cd0f0a7a0c7776ba204c35f107460da578d952be197ae77cbbdf71057e47f286c73ff26ea036e52939912de488dde214a46314e19b6338a82","ssdeep":"","tlshash":"e7c08c8408c20930c2073882c03a543632282a6091be546917bde350a2b302ad10ccae","size":154,"data":"","first_seen":"2025-06-30T12:46:17.169412Z","last_seen":"2026-06-08T22:50:15.852472Z","times_seen":1231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"5e96958c269afaefffc790c2702e0ec2","sha1":"b3c630c4af6e72d1e8222b0a19a8718e91968f00","sha256":"577898cea7a144c1b5a7fbe399421a62854d9734a7b68972782e177571b91ef0","sha512":"291712c178807aa5f997dfd882d03e2e9325f38a47f79c097ef5d8fe066a1874b570d8e52511320cc99980193e74f9e6e8f1f0f135310ffc5612cf6c77076838","ssdeep":"","tlshash":"13c012b918cd1e04c1133883a02a5d76512816b5c17d44641639a37455bb055d519c5d","size":181,"data":"","first_seen":"2025-06-30T12:46:17.17745Z","last_seen":"2026-06-08T21:15:03.049665Z","times_seen":1266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"6c55fd9df56f3988441e52a5a2ca1c64","sha1":"9f860602c4f03532a0efe8eacf0031340f2e6382","sha256":"e870c0af988ddeadeabf58356348bf7acc1f5cb124a047061233f4084d884f51","sha512":"558786b94c2d92c675fea4edaf25243e2b5b894035452e59b17e8fbcf73efecfb93725d3c6124d2db6550bfc21ac755c1905659abb00f022f2d4da6f0c96e00d","ssdeep":"","tlshash":"ecc02bc418c61a00c20334c2d0b5c437323c1221c0bd9865163da374e473146d05ccdd","size":146,"data":"","first_seen":"2023-05-17T13:43:20Z","last_seen":"2026-06-05T11:29:53.044184Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f855df476c543bd4fda53f425eff42ea","sha1":"c81455f42c74e843e83b0218725ead585db2e25f","sha256":"2c37ac2489f729fcdd186c3465781e2e840700b0d4e7b11614d0480dd6bf32ae","sha512":"485864ed59828921850dd0c64b3053f58428d677be3db6857a6f25b88e20b2227219026fe0d93e2dfca702d0407cf67444873420e5f119cb93cfd56b1eb9e970","ssdeep":"","tlshash":"f19004771104101455c044445457541c415174dcf450445c7d1340c75cf0c375101400","size":41,"data":"","first_seen":"2026-02-19T06:24:41.561537Z","last_seen":"2026-02-19T06:24:41.561537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d9083f3ea9691bd61961b0507ef470b7","sha1":"46e225d0bd652e402314a1042fa4033b650ef92b","sha256":"2592d02a00a7236dba422bbe45007390e40c621ca390880dad5d900fbd807e69","sha512":"65d04049b7ebd66da31c622beaaaa2eb475bc32013fb8a075403d5b27b91f9a73898817bec9fbacfbb49777d59fc71975c5fc193c256d29d9cbfa2c20d65fb7c","ssdeep":"","tlshash":"8bc08cc088c20d10c21339c2c03a683f32281a60d17e486a2639a3948073026d09ccae","size":155,"data":"","first_seen":"2025-06-30T12:46:17.190409Z","last_seen":"2026-06-08T21:15:03.059572Z","times_seen":1229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4a2b0b4b8def347812f148c9eb4c0e0c","sha1":"da70324c25d4f9504e2d9fe4223d09f23799b1f3","sha256":"2f15477aa77dc2a4ea1df308ccf9a795d7cb57a45a27ca53e28879c296ed7713","sha512":"f180daf213dc367f1a2b1855a48b2fef378ba730821b4d9d8ece8f70981c28c94d9f1ac4bcde07b12c44a7330403a50dd2335bf555efada6b5084b7ab5ca7ce3","ssdeep":"","tlshash":"f7c09bd458c65900c2173dd1d136583f623c5a65d17d4466263de3949573116d15ccee","size":138,"data":"","first_seen":"2023-05-17T12:49:57Z","last_seen":"2026-06-08T23:28:12.533985Z","times_seen":3323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f855df476c543bd4fda53f425eff42ea","sha1":"c81455f42c74e843e83b0218725ead585db2e25f","sha256":"2c37ac2489f729fcdd186c3465781e2e840700b0d4e7b11614d0480dd6bf32ae","sha512":"485864ed59828921850dd0c64b3053f58428d677be3db6857a6f25b88e20b2227219026fe0d93e2dfca702d0407cf67444873420e5f119cb93cfd56b1eb9e970","ssdeep":"","tlshash":"f19004771104101455c044445457541c415174dcf450445c7d1340c75cf0c375101400","size":41,"data":"","first_seen":"2026-02-19T06:24:41.561537Z","last_seen":"2026-02-19T06:24:41.561537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f9ba45d8cd5453a4241e1f13d9fdf728","sha1":"f90e1a5664be4b37bb22b63953969dc5be67ec24","sha256":"5779253f8c35c7118790ba8ccd4286b5a69330745a69bccf1bc4537eed839a95","sha512":"50950f8058676b494c8ea93a7be41e3c4de577e544e842b867d7754e0c542cd13077de86b09de81b1b9df9f04647403196022356bba769aeb1023ef7143ddebb","ssdeep":"","tlshash":"94c09bc45cc65900c2133595c039543772342661917d4465563da3649533116f15cc9d","size":130,"data":"","first_seen":"2024-01-03T23:36:28Z","last_seen":"2026-06-08T23:43:29.975845Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c30cb165e6a637a32adf56e2a49c59af","sha1":"6a0d45b8805ebaa57d60a955e48b2c1b4d0ac7ca","sha256":"927852be684741fcd17f67fdadc067ab2cd09f9fad8960b4a46507c1ccc7643b","sha512":"06f9166f606087925cd73b156a62152ffb79858dd3f083c37eb07276661c7146b11a25afbc2b4a24425ddb11880e6d7090d7a4d9ae1afd4f8ad14e14cf4d0286","ssdeep":"96:VijvHKBNAsi+MptqRR1itSiQqmig4zbSCyn:V0HKB6vptqRGfSCyn","tlshash":"70a144f81db75907755a41ae80ae29164d6ce0ebac273c6b37df46940fcd1cc81b9129","size":4979,"data":"","first_seen":"2026-02-19T06:24:41.566397Z","last_seen":"2026-02-19T06:24:41.566397Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4760ceadcc6c2b6c033d521f76c357c5","sha1":"d93f6430855a46e0df512ba77c1df279f6bfd7b7","sha256":"a3fd83d24fce223a5e9430d1f01c4bec253d0dd640e298e3d18fce17f90dd046","sha512":"a7c7173f14163d806a9dcf8a79551ddd6f666b0e0e54d97536cba22abc3a3d397d2b9b2bd8dc124f10c356977976d18022fba0a24f18137355cafa5735a8e6ec","ssdeep":"","tlshash":"7fc09bc45cc65940c32335e1c03a54376135176191be84a9563de3649637116e15cc6e","size":136,"data":"","first_seen":"2026-02-19T06:24:41.568722Z","last_seen":"2026-02-19T06:24:41.568722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"2675917b71797397510559bea7fb0208","sha1":"81d962c82ab7fb537b4eb721c820760893f618aa","sha256":"2878bde10df14bb020b58b45edbc9fb38b8a00dcc5e6e178cf94eee108508d41","sha512":"aaf2b83eefd4166e2e88b9a24ed3d3ec73a18ba61eb6d796ecd6277dc8d8ea4a8087ff4fb94ee0815a4b68e67ea0d79afbc2c0608713da673f11f22b0e7e4932","ssdeep":"","tlshash":"11c02bc018c60900c2033490d07940372138122080bd4864163db360a033006d00cc9d","size":130,"data":"","first_seen":"2023-05-17T13:43:20Z","last_seen":"2026-06-05T11:29:53.0699Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f5773dd014e0b329da1b778fb44cd2ab","sha1":"cd2212fd4d8b2e96abdade39038bfc9644f66f4a","sha256":"2d32b5876cfe371d984976b468decd30767da1a8b9394abec6180e54a960b0f9","sha512":"efbef86fff26582ccdb65306e0981e9d23709d519bc5c8f293ef2c40d068721a030f17596d1991c9a681ce84d5b968c26a70af7068046ce2236adb30504494af","ssdeep":"","tlshash":"97c09bc45cc65900c3133591c035547761351761917e48a9563df3649633116d15cc6e","size":134,"data":"","first_seen":"2026-02-19T06:24:41.571332Z","last_seen":"2026-02-19T06:24:41.571332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"55d21c6cce3f0add1a9ddf677232a974","sha1":"16efc29b93f9509df125e6431632c155a626222a","sha256":"9268f037b83074cb4cbd38bd6d92bb824846fb91c44892a82b73128f58d201a6","sha512":"3b6db7e1c6289303828986b0a7b53de87280277fe36e0adfe15caa17d9c21e55c33914a8f64db9acf7f8c671586c85dc3fa5ec0cc6ea0e26aa496d9480ab06c6","ssdeep":"","tlshash":"95c02bc418c60900d20335a2c036443b61381a61807e4475163ca350d033006d01ccdd","size":141,"data":"","first_seen":"2023-05-09T21:06:18Z","last_seen":"2026-06-07T14:29:34.298256Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f855df476c543bd4fda53f425eff42ea","sha1":"c81455f42c74e843e83b0218725ead585db2e25f","sha256":"2c37ac2489f729fcdd186c3465781e2e840700b0d4e7b11614d0480dd6bf32ae","sha512":"485864ed59828921850dd0c64b3053f58428d677be3db6857a6f25b88e20b2227219026fe0d93e2dfca702d0407cf67444873420e5f119cb93cfd56b1eb9e970","ssdeep":"","tlshash":"f19004771104101455c044445457541c415174dcf450445c7d1340c75cf0c375101400","size":41,"data":"","first_seen":"2026-02-19T06:24:41.561537Z","last_seen":"2026-02-19T06:24:41.561537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"004c3626de240d2449a5a9252881968e","sha1":"4b3e76f47e518801f8a2839085b2e16bb6be00e5","sha256":"8627f3d44e479e78d929cb5fb9e13ed9a57daac494fa2346fec8924ff38b168b","sha512":"b16712cefe477ed260e8bfe4b8119fd6a1a7a664d6e2020e63bd5a5f36040541fd50c408cd95186e88f5111fff783be2fc5b9c2f5d710033b01becd8e3c206ba","ssdeep":"","tlshash":"61c08cc408c31920c2433480c03a403622282b6082bd546a2738f350a6b700ed10ccae","size":152,"data":"","first_seen":"2025-03-09T12:46:44.894004Z","last_seen":"2026-06-08T21:15:03.057468Z","times_seen":1290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a5f15e73db65f2bdab6c4b60abf54c3","sha1":"5604df638c31d81559ab90c182541f3ea2c26b7a","sha256":"6cca212727d81406a5c7db79e02338411298416e59c9acafb1efcfcf06ea1cb0","sha512":"6eff91b1bb4f966df8df9e554ef7b1fbb4ff8cf359c3f29d1494899ba9951008a1e3aeefb9a4ccd8d6d6492987788b7783291196d88c1d9fa672ad221ae4f618","ssdeep":"96:42LnGXmmieamtbhUggDtFmmlG/o6E3sEBEQ9Jbw/aWdSsEtGXw6ObevehR4:TGXn3higGtcmlaLIsEBEiw/aW0sEtGXF","tlshash":"aba1229966eb14abc1b230ad0b8b5110712e454bbd86ed8efd9d03981f4c966c171fbc","size":4905,"data":"","first_seen":"2026-02-19T06:24:41.575115Z","last_seen":"2026-02-19T06:24:41.575115Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3abb06a2aeda3f705f8634eb4eda93d0","sha1":"f75ea40435c3c92d254f7e931526f96d33a6ef5c","sha256":"d99211814348261a1213cc5fb05895573ce91684f65f445678fc04a183fdeb5b","sha512":"e6778959c315684d8e2bf9b80ecfa7c04f985769074a9112f0a69df0f99c2ab195975c03036702eab1a09abcb39430ef8c816c181556ece2196ed4cb6c5a5c46","ssdeep":"","tlshash":"51d0229448c11744c32330c48074402aa2342329a0fd85b4622a9344a433627f079c2e","size":198,"data":"","first_seen":"2026-02-19T06:24:41.577187Z","last_seen":"2026-02-19T06:24:41.577187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"8dce7bbdba57092071825523798d9e3e","sha1":"cd3e22b4a261de1f30ece6f32fc1b0f15c84156f","sha256":"342da57aca44a64d262c8e4a1fcaf0cd5768895dce192bd275936d82aa953f05","sha512":"4630b2eedc64f7518e1ef0bd79925f694ebdc2bc2337b8f4c83322cf25bf1d34d2d34f64814c02f9ef74e648c8e6f59614293c334865967536867848196d2aeb","ssdeep":"","tlshash":"b9d0c294444e1a01c1722ab6a0aa6c75923b1063907ce9257a344238a47b50bd359d8f","size":278,"data":"","first_seen":"2025-06-30T12:46:17.203341Z","last_seen":"2026-06-08T21:15:03.055917Z","times_seen":1264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ced813f55e45729742a654b6e072c048","sha1":"1f8ddad8d728f11a463d93b87b6e72571fc71880","sha256":"dc21e7ff100229d34ed09713229196546f6fc5062c00bb1dc9fd67e8366702b5","sha512":"7e6f3f826fbc9985bf152a53f19c3cb2392af7ab7d0ffc60277c7a54101f68e605e2c2c7f825a3a39300a58c894a61f3a9589626724325011285544906e43285","ssdeep":"","tlshash":"6bc09bc458c65900c21335a2c035543b62791665917d4575163db354d573116d15dc5d","size":133,"data":"","first_seen":"2023-05-09T21:06:18Z","last_seen":"2026-06-07T14:29:34.32151Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d5de885c35d38b9dace65a1c92136040","sha1":"e64686ea07e6664fe85c15d27433d3fc1baf5a22","sha256":"02941af38cfc62d8c1b97901b9c4ab63e1eba239678b072413e194f732848aed","sha512":"1da9ea283dcae345ce29c58d6593e13f878d52b08ffb878cd106fc8ebd5d00b561c0528dd76e4c49798376b3fdc66f5b51f6c6d2b6866168ae697dc2e60a20e5","ssdeep":"","tlshash":"e5b09bc458c65900c3133591c035553b62341661917d44a5163da354d573117d15dc9d","size":128,"data":"","first_seen":"2023-06-16T17:22:45Z","last_seen":"2026-05-28T09:11:08.545913Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"73c5871a701ca51d16fced228899db53","sha1":"93052f7b14a21ed285ae9f1f7839c2c02e1606e0","sha256":"62800bb4bd4983d74ebef60202bc03a8a6ad14819862097fc319b41009d8bcbf","sha512":"b5fc65e29fb522d68f82a418ea9ccf138044c01b3e0e45eb7c3cfb76f8e864c398fe34ceb743c71bf332c542fed5cee5cc7c0e92f5a6b9ecda9cca1567846f64","ssdeep":"","tlshash":"39c02bc50cc22d00c2133891c039543771381371e0be48a82b3de350a673006d00ccae","size":145,"data":"","first_seen":"2026-02-19T06:24:41.583274Z","last_seen":"2026-02-19T06:24:41.583274Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f855df476c543bd4fda53f425eff42ea","sha1":"c81455f42c74e843e83b0218725ead585db2e25f","sha256":"2c37ac2489f729fcdd186c3465781e2e840700b0d4e7b11614d0480dd6bf32ae","sha512":"485864ed59828921850dd0c64b3053f58428d677be3db6857a6f25b88e20b2227219026fe0d93e2dfca702d0407cf67444873420e5f119cb93cfd56b1eb9e970","ssdeep":"","tlshash":"f19004771104101455c044445457541c415174dcf450445c7d1340c75cf0c375101400","size":41,"data":"","first_seen":"2026-02-19T06:24:41.561537Z","last_seen":"2026-02-19T06:24:41.561537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7adde4bca19b78c6c21fc0a981c1c05a","sha1":"130fa3751c1d9f42ed853f624093a5a695f32e2e","sha256":"8132c759191d30909ff8782001225934bdf3bac6886e2bfdcc567421820764be","sha512":"2e649efcbf945dfcaae6a364075403eddf3c18400c74d853a01ce2ae22dbf302f484a73fab601e5e509bbf9814b329201a5be009c203c96dfac94adf06e2b23e","ssdeep":"","tlshash":"0811c81b28b510bf41b3232b935b0312773800673846ae163f2d83864fd5a385ae2a8a","size":1010,"data":"","first_seen":"2025-06-30T12:46:17.183759Z","last_seen":"2026-06-07T07:18:34.178697Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"24930e8ea5b035e4b999db39df9d11ee","sha1":"3938a2fb6a4e42ea5d162aa152c201a07e67012e","sha256":"a95058ecd0c1ac0e235503e09b59062d0430390af286fed229644ead379b1367","sha512":"66c292af83eeea67912e128d404c59dd5e6468b02f656f6a48f8025f5aa629984cb07326479bd7d30214a61f8f9573760ec897371b0ef0f614c9755a241c3306","ssdeep":"","tlshash":"4eb09bc458c65900c2133591c136543761382661d17d44651e3da3589533116d15cc9d","size":128,"data":"","first_seen":"2023-05-06T08:03:11Z","last_seen":"2026-06-08T11:34:55.288592Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"02ccf92d10b3aa3db21812dccdedb84c","sha1":"56308a5877d49273c0e06d9f0f8d291f2f3fe8ba","sha256":"0ac75196b60e92af871f399e2352d442bd9b75fe4d592cea47e80da51aa06a4f","sha512":"a630908d00be6195f63cf17c7de1dfc462f0fe2d89b91d2119d5176afb1ae6e192455408fe12b40594998ffa16c4c90b4fda58fe9c11315923c9646416d36c69","ssdeep":"","tlshash":"80c02bc408c20a00c21734c0c035d43722381221c27d84a5163cb374e473587d01ccee","size":146,"data":"","first_seen":"2023-05-28T02:08:41Z","last_seen":"2026-06-08T11:34:55.001408Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f855df476c543bd4fda53f425eff42ea","sha1":"c81455f42c74e843e83b0218725ead585db2e25f","sha256":"2c37ac2489f729fcdd186c3465781e2e840700b0d4e7b11614d0480dd6bf32ae","sha512":"485864ed59828921850dd0c64b3053f58428d677be3db6857a6f25b88e20b2227219026fe0d93e2dfca702d0407cf67444873420e5f119cb93cfd56b1eb9e970","ssdeep":"","tlshash":"f19004771104101455c044445457541c415174dcf450445c7d1340c75cf0c375101400","size":41,"data":"","first_seen":"2026-02-19T06:24:41.561537Z","last_seen":"2026-02-19T06:24:41.561537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e47801a91b35dd524816ac4e173b9753","sha1":"92be344419512733b492b15aaba7cfca40e90e79","sha256":"d46ab33cdcf4a27b85b57502c228957a761bb21354bc040795512ad63c1eaad2","sha512":"459be352c05c0e7a615d3fa2bbd0870d8deb4688a55d7dd063fa414c51c77ec3bfcd7ec68cc59340ad821e97d38e1970d5eb2558d53e240563ab5da404f817ca","ssdeep":"","tlshash":"c2c02bd0d8c71900c30335c0c075543b6234172090be8474573ca3e4d033026e00cc5e","size":144,"data":"","first_seen":"2026-02-19T06:24:41.587228Z","last_seen":"2026-02-19T06:24:41.587228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4de4fccd6de75317f836126409cc6af0","sha1":"20b532e33df9657ff5ae882eed2eb5d6b1f1ce9b","sha256":"48a9868d3bdaf51e2498d7eaba08339e239b740606d5566fd366610170a55647","sha512":"0c8c9187458a0ce04d06947a417f26434d6fa2b9478f60649d7add5509dbc5534a85fdf874382d0092214fb3c1edf779b8ac67a81f8c0a88e92229657798b20b","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbgkgaFO0s:kg5CjcfkN/YVy61LLCe83nnEeFO0s","tlshash":"94b42ba97356b13647aba1e850af1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","size":511274,"data":"","first_seen":"2025-08-04T04:38:41.903663Z","last_seen":"2026-06-08T21:15:03.032784Z","times_seen":1355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"bed1b2e35defe3e2549a0e04d9d71858","sha1":"c51ec58b717e8f5c5548fd54292515814147f182","sha256":"b9239d3215babe7c7e1a4982e6121d28c20abecbfb05e827368ac933a1b9c439","sha512":"f219cad4dab95f7eff7c63aa1f786eaa0f1b5d40b41756d5cc1a6545696777e37fb1a693d1f90b70ed787fb9b01781858cd26af6fc78ee5b33d1254e14555bcc","ssdeep":"","tlshash":"cec09bc458c65900c2133591c035543b73381661917d84a55a3da3549533117d15cc9f","size":130,"data":"","first_seen":"2026-02-19T06:24:41.58873Z","last_seen":"2026-02-19T06:24:41.58873Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"cd36664396a79bced34836593890a107","sha1":"5828d2f1a9a6ba9436a23c90456490c22c8df341","sha256":"10c488c2abcd479019c16d14e788a8c0638dc2447b7e2f73c1fb1a2d97fa7dc4","sha512":"2d43834aacfb6a3a5fb4bdd44ed83a850b9de29b954c6ef28a59280b6c08111ca32b69c313d6d379c363d84eb6920790a3a08c433dfd42cb6b6af85851f84572","ssdeep":"","tlshash":"06c02bc50cc26d40c22338d1c03a583731343371d1fe84a82b3de3509273006d00ccae","size":147,"data":"","first_seen":"2026-02-19T06:24:41.589927Z","last_seen":"2026-02-19T06:24:41.589927Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"b8fd50032047922583c06000cbe20321","sha1":"747acb65b6682ba5aa78ca981ae60607aba627a0","sha256":"9beebec4b35abb15a8f1cd650de0017dfa1295b2e22b5f7d03d7831d3e689ffa","sha512":"9c89348ff979e6f84607fc78e31c06078df3ca502774df4e9af89483e75f18a5c5c90f786853c518ee6332249e698e6c75168e6ff9cd343d81884e45ef745da9","ssdeep":"","tlshash":"4fc02bd188c31a00c2033680d036843f62341761d1be8474173ca3a4d033026e00cc5d","size":142,"data":"","first_seen":"2026-02-19T06:24:41.591129Z","last_seen":"2026-02-19T06:24:41.591129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"923f7f6110eda5beca012a3d31f98d3c","sha1":"77e8a6b30db7c2515cefc32b10a9775f82851c92","sha256":"ee85e0b54f6b3f926a2fe86648718511e2c512d8faf553bb57094c16ca8962ff","sha512":"daf513a3b5120d997638c46131ca3f0d30e2ea59c4f8700cbafaa6dcbfcc4b7dbee6599e8769cdcb40fd060a6d539e55d6bb5cb1dbc8b01d3d45f957391737da","ssdeep":"","tlshash":"ffc09bc458ca5900c2173992c0395c3761381665917d84651a3da3549537116d15dc9e","size":132,"data":"","first_seen":"2023-05-18T18:40:20Z","last_seen":"2026-06-08T21:15:03.060473Z","times_seen":1619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"225459815c523081214799b61aec5eea","sha1":"d0adf88c0a8358c13a7cd8b796c2567eba7df6bb","sha256":"5ebcdc3b6e55da31a1ffc46e19ceaa6d3270331b6d609bbc3fd81a82db08e1a7","sha512":"23116a6c05a8866e51c8517c894131f7020ea2488470e573844b93ad45fc47a8f0fe598758080f74cf88b13ec34c4314e6425fc32c9f4ad831e9d9f28bb48f45","ssdeep":"","tlshash":"53c02bc448c30924c3073490c03690373239176091bd446f173cf350a53301ed00cced","size":147,"data":"","first_seen":"2025-06-30T12:46:17.18677Z","last_seen":"2026-06-08T21:15:03.061547Z","times_seen":1278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d48402d80b22f0181eb2e24673c1d10c","sha1":"b7103c0c3061f88be951019e0e386ab4c59b2376","sha256":"1067f2927ee303594931a5c8ce98038cf9c27abba18f2f552bcaac723bb79060","sha512":"307ffd760fda5e64c8fca16910e000c94746e2d9aac46f2e9c14129a7577259d79cba193094a3fd83b9a859298688fa534e72e03069fcab15460229af953d95c","ssdeep":"","tlshash":"3fc09bc458c75910c2533591c03a54377239176191bd5469173df354957711ed15ccee","size":136,"data":"","first_seen":"2025-03-09T12:46:44.850215Z","last_seen":"2026-06-08T22:50:15.832467Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"cbcc73822bbfa59129ec8fd50be3cd61","sha1":"7d381acaef335c3834c957ec406ac7bebba26d91","sha256":"7376f4c0170017110cf0ba5bc0d92f6ecf22d0fc313969b78984cb41dafea422","sha512":"b36b20bf6d3dba6b99eceb45fca1897bacd8784f6739a968a7a212c2e0add95e59b63a2bf3f865698f1fecea0fe969156f23d9bf2fdd5f288f5f37f74698e03e","ssdeep":"","tlshash":"83c02bc008c21e00c30338c0c03e943ba338126180be8d64173ce3509433006d01cc9d","size":140,"data":"","first_seen":"2026-02-19T06:24:41.595918Z","last_seen":"2026-02-19T06:24:41.595918Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c6af961ba8041f1390f65f95bd02b515","sha1":"c675943ae2b9c479eef24b14d313c9d1696492cb","sha256":"a62577d457a7bd249689cf4b07df3ab843591cbb9dbabd7a588dcc991cb13487","sha512":"b08ab99ca54e7e58c9c2cdbba2f71580d16d7eb68e2003a0e2663b8885c2528c25c21c7c093cf959222178f57c4fbc1a106a10ba4218d2da13c2ff20ed22456a","ssdeep":"","tlshash":"3bc09bd45cc75a00c21335a1d236543f61752b61917d44652a3da3549573117e15ccad","size":142,"data":"","first_seen":"2026-02-19T06:24:41.597332Z","last_seen":"2026-02-19T06:24:41.597332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c84390888f1b005250f8abf6ebfdc0f3","sha1":"2c922804d7768bb2fbcfa9f8f225dff3806d0035","sha256":"b2a187936b456dd47cd42f00ecc42a5c1f3ccfe1ffc56513befa5719e3acab3c","sha512":"ad62d8bb00bd331f4fa830a3a228528418757c838d9c9afc328f939ceb7cd923456cc4102d98a234ee65c30f0e823f4fd095ee8da5cdae5fff21ae151cd6dc91","ssdeep":"192:yxii8N6o68+WhE49YjPcn8gss8K2b/J/K8uMoIE8IiDq44c+60i6BQTreUd84Zlq:euE4R27poItq6+7t6Hp2hJ","tlshash":"b04240f934b32128c457207ea75f2548706b8147dc12fd067b4d23416fcba2d9bb9ab9","size":12650,"data":"","first_seen":"2025-06-30T12:46:17.197971Z","last_seen":"2026-06-07T07:18:34.18254Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c15b8789c12a6e0519b0c603ba40258f","sha1":"10d7367ce28e5173283fd30bbdac23aa720827fa","sha256":"b9e583c9f8f5a5070732e470e613ec8ff665b7c8ce62b97b80f6aa820a67cea3","sha512":"3c79e4ca282e44eb433e1524f7d4249dad6810749bc74b2ccdfb9fc31b22644dab63c5f36889832047ba16b54be127e549a94b2928e8cd32e046b076a6619c6e","ssdeep":"","tlshash":"78c02bc01cc21b00c21735c1c03540373137272090bd44a41b3ce3648533006d11cc6e","size":140,"data":"","first_seen":"2026-02-19T06:24:41.600481Z","last_seen":"2026-02-19T06:24:41.600481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"42c7ff95a7f3e5a8dd5feceba6e81a3e","sha1":"bc62a562c8e719d7fb110c77c46806c3fde0ee3d","sha256":"d9f797a61f144f93b61d553f7e20bedbc6ec8161a97c29841a434d98a2aa327f","sha512":"b47bb7f0849ec727bd36fe9d7669d3a371abd0f0a46c720fd3ea46a74f96194a2b68944fac999f6f8e7a20be99948ac42943ceab92c60740148ee751b35e7582","ssdeep":"","tlshash":"d1d0229058c11700c31330c48074402aa2242329a0bd49f4622a93449433223f179c6e","size":196,"data":"","first_seen":"2026-02-19T06:24:41.604037Z","last_seen":"2026-02-19T06:24:41.604037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"abd6abad4da5b244ebef8660306beec8","sha1":"35f06a618df8c318052f177f6770b8bae5847380","sha256":"ebf7ffa7311f6a31b8e4b3f805d39ceb39b75bdc48265f90212e6c72956c8bff","sha512":"9428cde75e28a416e4260f48b1d2409063f347eb3e6cc552e57eef327e78332e799c04a1c1c05f013c4b605835ed461d28da070365fd7cf2fa0f43750baf2fb1","ssdeep":"","tlshash":"34c092c558c65e00c2273991c03aa43b6239266192be88a92a3db3a4a53311be15ccae","size":130,"data":"","first_seen":"2023-05-01T14:43:39Z","last_seen":"2026-06-08T11:34:55.11576Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0adb6d9394f5e0a53ceceeae0b83cb1f","sha1":"c42b37faa7b1f616304de135f4caad32ad0db31b","sha256":"517a8e3f2b6729a57f24f58428965cd9a42e43371302bc1f0ccef9ae108a75a5","sha512":"5626945fcca7cc2c7df9d0849fa1dd9d1e5c232336a8a737f275fc31c56825883e34bdbd3e7adf1e324a8a4c745c040a342502f7303b18e62116b46903b1e181","ssdeep":"","tlshash":"a8e0f13d3c344194479301b8c1bbf62c3d0630644489dc539496882c5cf0fcd6e029e4","size":418,"data":"","first_seen":"2026-02-19T06:24:41.606122Z","last_seen":"2026-02-19T06:24:41.606122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"927e2aa58dc9e19d31a2642e0b93530e","sha1":"3fc0043defe196deec580923f452dd8580a66c4b","sha256":"24bc1ad206ab789c05246d4cd13ae6094af54862c7a748ea66252b0cff00a61e","sha512":"eb0176e932ac62d943a28ae81136e5847dd027c7c0915fcfc13cb959484404681f6fc2dbcb9916423729e5f3e3df82adecad64843e69f6f710e8547d58bc75dd","ssdeep":"","tlshash":"66c08cc088c20d10c20339c2c03a583e32281a60d07e886a3639a3948073026d05ccad","size":154,"data":"","first_seen":"2025-06-30T12:46:17.180302Z","last_seen":"2026-06-08T21:15:03.056948Z","times_seen":1229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3e0133200b163a76d2de796f1318cc42","sha1":"5f05a3893892388f4aefc7ee7cc43c9c233e4b42","sha256":"df7846a94b04452e44446e90a4245168182a3833b55b11f318846a5a2ecfe592","sha512":"b4acf88a50bda22a4a340bfce02c63dd249aa6a1315d52794facf621d0ff77893d7120a8c531201571c87735530d037ee0d13601147d798df40a31a9b0e08790","ssdeep":"","tlshash":"ecc09bc458ca5901c3173591c036543761381661917d84652a3db354d537116d15cc9e","size":133,"data":"","first_seen":"2023-08-02T16:33:10Z","last_seen":"2026-06-08T21:15:03.056426Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0e46fbb7ade51a86ff8abee085231141","sha1":"3975255b46c0df094360b7801d44a52ff84b583b","sha256":"c3822501459b0ddbcef277b24e2bfedd329d564c467e7ab0a3014cd794623911","sha512":"baddbbe4b9a29455543ecd006520983059617aa4688b5eacfc1e97fd69929ae89b07835b3824e79d1ab4883ba54966906273a7a19668411a34e62b7f8e76e3be","ssdeep":"","tlshash":"26c08cc488ca0919c30b39d5c236dc3e223c1a61d07d847ba63da398a433026d14dcee","size":166,"data":"","first_seen":"2025-06-30T12:46:17.193302Z","last_seen":"2026-06-08T21:15:03.060084Z","times_seen":1232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"259963a0234dab9f4c86c36344234908","sha1":"7e5a96cbbc80978847055418469fbb252e74ed68","sha256":"8adf67b26d2f112566db1bebd1bef80e1e34f3baeee5741f091678d117e15415","sha512":"f3cc9b22c2b19f7a161a099e8d4fb8405cd64e9a5a50b369387599368606092b38336b19abcb569246ae64bcbd8077facc2d5055d45bf19c2f5caf51e4ec5c1e","ssdeep":"","tlshash":"a6d012d028c61950c2373591817d4176513a1760b17e459a3a3d93ac5677045e258c6f","size":197,"data":"","first_seen":"2026-02-19T06:24:41.609391Z","last_seen":"2026-02-19T06:24:41.609391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f855df476c543bd4fda53f425eff42ea","sha1":"c81455f42c74e843e83b0218725ead585db2e25f","sha256":"2c37ac2489f729fcdd186c3465781e2e840700b0d4e7b11614d0480dd6bf32ae","sha512":"485864ed59828921850dd0c64b3053f58428d677be3db6857a6f25b88e20b2227219026fe0d93e2dfca702d0407cf67444873420e5f119cb93cfd56b1eb9e970","ssdeep":"","tlshash":"f19004771104101455c044445457541c415174dcf450445c7d1340c75cf0c375101400","size":41,"data":"","first_seen":"2026-02-19T06:24:41.561537Z","last_seen":"2026-02-19T06:24:41.561537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-AIm7gawg.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"58de573622a38f62db9d2a272e43fbcf","sha1":"49e950e0379784f144c07d6114384baff4b74e8a","sha256":"b42ec41323945db7018887a79887e94e5e324b56642a07aa33f19e0c486dde96","sha512":"d9482f7493b2ec8fe9ecf11b4c6888fe6ea1acf1508f86126744b931534ffa1d1bb089cdf8f6679bb4085bc920fddd7b0dd4c617574e1bfcc5e939eba47d9eb3","ssdeep":"6144:VRJU8SN+KtxKR/ZgQuTlBraPPMHPVsddG:VLU8SNjTlBraMvVg4","tlshash":"5e544ad47295b43443a700e5507f2006b33e5c29a809c068f6adddf67db9989a2b7fbc","size":283085,"data":"","first_seen":"2026-02-17T09:27:34.892087Z","last_seen":"2026-03-02T07:55:13.406489Z","times_seen":786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"62eb0af7972e9da272f01d2a8ce9ecf1","sha1":"fcf3f3928b71b79ec158461ae730e61b21a78297","sha256":"f84d67bc6c6156d0129907b8f69433c67fddaa17ba5fb36ce0c212a0eace11eb","sha512":"b0271679fff356edb4a0cdf0435de32bfedcdf0e6bce6b810cfe31aeb35bd9004884587c7230dc4c6f7415cd3734e77b829a4145f535e6e60a7ee3a2be7783e2","ssdeep":"","tlshash":"85c01284188e0e02c25a35a7a0355c36513d1152917de5652629a368957f209d35ee5f","size":188,"data":"","first_seen":"2025-06-30T12:46:17.17217Z","last_seen":"2026-06-08T21:15:03.048682Z","times_seen":1269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c6a6b3902c8e8970ff6a97ec96d79251","sha1":"4e93e02e5dcb3f55e80075e3850b8129dedac970","sha256":"af0aef6911bb609fbd698d02bedcf2c4fb0ffd5a0df64b149cfc3971a856d1b7","sha512":"3ee9eb7e3129889f2b780dfba0367d97031bbfd6892f982dabecde7fc84a8d4d2b0e1cfd592d09344a1b1589eed1dce70319186bdd07063c49d07847a7799575","ssdeep":"","tlshash":"5ec08c9088c20900c2073ec0d1364c3f232cae24c17d44672638e398847300ae18ccee","size":156,"data":"","first_seen":"2023-09-08T12:39:05Z","last_seen":"2026-06-08T23:28:12.515583Z","times_seen":2442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"8c5a0fc55e10274271183d2e9efaf79b","sha1":"52fd06aee9bdc5116ba0e17effafef7db9136c4c","sha256":"81a2cf47274921467c30e2a038ecdec6e07fcf21540548b6d50869933dddcd3e","sha512":"5dc73c381e48cdd8cf4ec6b32b36e4c0338ad673c545dccb6d62b671aa75c68b33b811fc7888d5e255ae391ff93f38ba0740ed480ebebf26ed230910a32bd224","ssdeep":"","tlshash":"b5c0c0e044c11700c34330c48074402ab3283379e0bc44f4663e57449833223f17dc0d","size":190,"data":"","first_seen":"2026-02-19T06:24:41.612339Z","last_seen":"2026-02-19T06:24:41.612339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"f855df476c543bd4fda53f425eff42ea","sha1":"c81455f42c74e843e83b0218725ead585db2e25f","sha256":"2c37ac2489f729fcdd186c3465781e2e840700b0d4e7b11614d0480dd6bf32ae","sha512":"485864ed59828921850dd0c64b3053f58428d677be3db6857a6f25b88e20b2227219026fe0d93e2dfca702d0407cf67444873420e5f119cb93cfd56b1eb9e970","ssdeep":"","tlshash":"f19004771104101455c044445457541c415174dcf450445c7d1340c75cf0c375101400","size":41,"data":"","first_seen":"2026-02-19T06:24:41.561537Z","last_seen":"2026-02-19T06:24:41.561537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"530d76fe8e687a6163defa4c70f86b8d","sha1":"ddf15885511b771d5206d16b82d56af0bbc8d502","sha256":"91717b2762b8c8b34290f846d1045c100045480faa4b88b9b5f512ecf4535cdf","sha512":"ad5d8d8b0244f491291c16d5fa47ff8f039c51e3e21cd978ddb4699b240ead6462b5fee9f11085c4749d8ab0efb1b2bb922d51b592f0cc63a03c52a4ea1668d6","ssdeep":"","tlshash":"c670002aa30000000080008220808000222802ce22e00088082000a282008082022030","size":20,"data":"","first_seen":"2023-05-25T23:06:34Z","last_seen":"2026-06-08T21:15:03.062564Z","times_seen":1469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"flagcdn.com/w40/cv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/cv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 175\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-af\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1894591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5L2d9qpsEBIje4QQUolPOm4VfRA0nLxBezeTK2QJSDIcxS2FFuOwYh%2BkrZXpTK6L9KDsGy4WINxsKZqpsdg3gPCWL2RWGlylhLR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c4a7e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 4-bit colormap, non-interlaced","md5":"79ba442b0e8f1cef01c36e55aa0ea896","sha1":"814cf88e9da3ebe9687cefc40e4b36ccf36c08fc","sha256":"f62a4f49eb4c34081d41d81b17164ad0cc83fc5c4cbd7c478078ffdc861fc827","sha512":"393c62496e09899f5fb0e50f7ba7345b0ff4fa45225b82af5bd5fec4171c4e51f0ffc74527df96b567ef1b807d4d62182cbcdbe21c4098dab4245b8f0a0d1c04","ssdeep":"","tlshash":"c2c080d1b345ed7c4a6e5337c12c040dd9115285105b6615272f4d5d1e6554954ac5cf","first_seen":"2025-07-04T08:06:49.927756Z","last_seen":"2026-05-31T11:19:26.352263Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/dz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/dz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 291\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-123\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2598088\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyv9fSVGlbN1Z0i3Fi5goEARAtKtp9JUVUzhrFnSYeppRfA%2BfayqrGGVYmTYRjq4iQw95sVLq5sMFuAH0aBwHZ%2FBA2vtCB4QsrIJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c7a8a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"85cc5e050b594dc3bec107e199565d61","sha1":"334930dbb4c7af90f008e4b82747b4c63d7493fc","sha256":"c4e1138e086bd5103e75a37588220a60d74ea1ca7bac3b425441b7575f9c3a59","sha512":"cff4fdfdbb849a90a5dac1f907ea1fa6c863402ecd2578c45919f30cd8a0b38a0ee531a2031e489647dbefceb44166f03674b4dee4c3bf433e12c56ccda2a020","ssdeep":"","tlshash":"d9d0ebb7b4a68c18bb0c0e3057cc0035c0fa33a040ddc8ab420b00202e1a3889a00a97","first_seen":"2025-07-04T08:06:49.98866Z","last_seen":"2026-05-31T11:19:26.422998Z","times_seen":28,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/st.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/st.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 209\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-d1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 858483\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cv57%2F%2FchcRH5pOlr4OfADQR%2BBBY2Fyhp5nfEm6x4xorsQg8V%2FAndYULAatiPX0Rg7YRlHX7fJ8qY1qyvK69prHmQd2s2Dqs1PGhx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0efb0e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"af14fc6995d96e8a89c962b3a6539ea3","sha1":"2c3b40e1a6c9af7b049843e11257aeb0239d26c6","sha256":"68920eab22482611c6b5befedc0ea82d47b2b4f36dacbb48405192c394f12725","sha512":"c7f1c640cd41a0c177035a1e21c5a3fd897fd084d9eef0c87019a17ed36bfbc123997e9448e15fe73738c5e8699ecfa471c05d44ae5a679f32b68edd449dc9a2","ssdeep":"","tlshash":"97d023c39f598c15825e07b58b81b65849554275860208434442c4305482f5f90dcfc1","first_seen":"2025-07-04T08:06:49.957231Z","last_seen":"2026-05-31T11:19:26.386336Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/xa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/xa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJ%2BkYsEF3UPYZVzjbGoUdN2gMFsZJAJYwfXpi0IiuN30fMyODuA1v7%2BvE9HiK1NASBfwRjDNTMXT83iQnbS4%2F%2BHNlNSObEX1UXOM\"}]}\r\ncf-ray: 9d03ae0fdb3c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-19T06:24:09.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.northwelltrust.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 11:00:19 GMT","end":"Fri, 08 May 2026 11:00:18 GMT"},"fingerprint":{"sha1":"BC:12:ED:CF:65:07:EE:AC:3D:BC:37:ED:C1:F7:DD:5F:06:48:6C:38","sha256":"B3:5A:87:72:23:E6:12:EA:FF:CD:2A:31:E4:F5:4C:BD:E6:7F:83:18:D2:35:40:64:FA:B3:F6:19:F5:CB:3F:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: northwelltrust.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlFHWDlWK3NBL29YQTdFa0t1V01ST2c9PSIsInZhbHVlIjoiU0NyblRNZUVYcmdaVzZzdVpvRHJ1OW14Nm5ydHRtOGorcnk2SEdEdjN4OVBidTZFK08ydStsQzJlMjdKaXgwM01lY1NlUi92ZHJNY0FCWms5RENIWExTTDJ5emwvMEMyd210S3U0ejEwNHlWVDFqcVBLTHBsNk1rZlg3RWFVeU0iLCJtYWMiOiIwNmE1YzZjM2Q3MGFhOGIzM2I4MWM2NzEzZGEyZDQxNDE0OWI2YTU3MTRkNWJiNmUyZTczZjMwNTdlMGFiNTA3IiwidGFnIjoiIn0%3D; expires=Wed, 13-May-2026 14:24:09 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nnorthwelltrust_session=eyJpdiI6Ijlya3l0Ty9jcUtxdVJYZmZBT0RiL0E9PSIsInZhbHVlIjoiN29GMHo3ellTaFRSSXBzcElrZ01IMkVIUWUwdjlqZmduY0FMOEc3K1VyS0lDdCtVYnNuaUZkTkJKMVZMQThGSk0wSDFXWFRBNVpJUTFwajhGS1JzRlg4ZXE1TzNraUdqRXpmQnBjMndMVzdKRnZTeW1ySVNxUFkvdlRGQ3A4QU8iLCJtYWMiOiI3NjMxZDQ3ZWM4NDA3M2FiMzU0NDkzOGE0ZDcxYjg3NTExMzQ1YWU2ZWIzZjIyYzBlMGZiMWVkMzAwNmE4MjIxIiwidGFnIjoiIn0%3D; expires=Wed, 13-May-2026 14:24:09 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 19 Feb 2026 06:24:09 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":117679,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (413), with CRLF, LF line terminators","md5":"059953229aa8f018b302631b264322a3","sha1":"e2e843ce219e3866cd94210f12eb771b845b4cbb","sha256":"8406485e503102dc242aafa116eb02a656a632a887991aaa92502d7681a10060","sha512":"ccd03f5e2ff31d6ab700eb12aafc1804795e7134f21b9016f51a8bba679a59251f8e6debf63f904664066ff0669ac138ae44dd1bcf41846f97cbe5266e8baa28","ssdeep":"1536:ykcwqNG9XYjsOz40jKNVHnhJ5Im/1E4AVUfxmAHJ:R/YFCfxmAp","tlshash":"e9b3b73d22d1112540e7c2b2e5a5af29ed6dcb4bdb17ed4bb29c82831fa7c058f53660","first_seen":"2026-02-19T06:24:41.17121Z","last_seen":"2026-02-19T06:24:41.17121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":118,"dns":76,"connect":19,"send":0,"wait":450,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-6d2a10.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-6d2a10.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27140\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a04-mXluGnhdRVmhYbS6OXfOqLSD/M8\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 4706\r\nx-served-by: cache-fra-eddf8230024-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27140, version 770.256","md5":"13521f5a2b3e46b05fda2160ed605726","sha1":"99796e1a785d4559a161b4ba3977cea8b483fccf","sha256":"ba8612612f7dbda223e6f36a1a04466cf4977a3a709bdba3d6238fcadbee508c","sha512":"24f605f9065dfef286677cabf92087c406bc56fc53662478e7304dab068e153635017fa88efe97e2218f09088e7dddea5b42ef6f6cf5e3eb00105df50f24fc88","ssdeep":"768:8iIkJET/AharmX4pi/7UO25kkgsSVJ2Fr2O:8ihET/AharA4pijUOhkgdyr2O","tlshash":"b5c2f18c16c4464df58b75fd6a4717c3e94da2938037b3a7a8412dc93d21c23a8ecd7a","first_seen":"2023-09-18T08:20:05Z","last_seen":"2026-06-08T21:15:03.041708Z","times_seen":1222,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/254794330faaa103d76a3a53dd72abeb963f1345.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.182.5.119","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/254794330faaa103d76a3a53dd72abeb963f1345.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nContent-Type: text/plain\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4a8-KAAcljdtA5Klige3IVcP1oSCri8\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1192,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4afb086aa92444ffd8053d32fe3cd2ab","sha1":"28001c96376d0392a58a07b721570fd68482ae2f","sha256":"14959041bfea7992b7b29a1197962d8b5c56a1fbbe4d91bfe9213004400ec42f","sha512":"8f9f5b138239f8be4c0a4cea337ab45d3d71d0c11881f11f3a7e9b9ccf6cda2272b5dafc7c480ff73905a86da7cf02b976874b51b81673bb3a82c3b1aed522d2","ssdeep":"","tlshash":"f021226d8a6822fe9245c2d6c504bf036ebddcb37100397de60d094d60eb2aa21364a7","first_seen":"2026-02-19T06:24:41.174723Z","last_seen":"2026-02-19T06:24:41.174723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":187,"dns":14,"connect":21,"send":0,"wait":27,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/cz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 269\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-10d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2428746\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nz3mYEtYrvzjA9%2FNM7LGNhqy5rxlHT8K6t89YMvPeiv9cWT9Pvl6kFcMzseseDhFVimwFKRWxwvKm%2FHE4vmnj2KYEoFuehtj8zSu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c5a8123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":269,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"896cccb33b897bce17c2f10fcae80191","sha1":"434bcbc51a10d332f593622c6efa0c9a5d6b2384","sha256":"a6a0fb9794ba47fbbbb967ad45d6a9468e1a0fa0ec5fd2d6e6e31f3e5322c7b1","sha512":"42c16b20a22c7ac681c83fe5fb31a9d4f802e889d516988408d9a43fe4aa357045e782fa6285ff197932a9dfe5fc9e628556a8ca2e0b8437af6275477caecd91","ssdeep":"","tlshash":"3cd02be67f2d0d2985b95333437688228f3cf240d26ad253a02988568491339d24c126","first_seen":"2025-06-27T03:22:22.736257Z","last_seen":"2026-06-03T16:44:25.916884Z","times_seen":95,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/er.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/er.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 316\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-13c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2341784\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G84clKFvkQ5QzBqZw81k3L4K0DP8HoAOQTVhhajpNSzmv9KorXrq6DsgjPYB8WC2z8IsfbU4q2r2ZIJdE03J3Ay4gWYht5d8M8pc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c9a8e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"3f23c7a1b196ad47ff87e9657f72b434","sha1":"486966e4ac519cd97f15b7d3332713858cb79132","sha256":"c879625075d3f6197a599df5785b48ddac55d9295f226cf72a784f89b782f990","sha512":"dea99ea84168808ea208d575ca3e302842749dfea24efe7093c4b835ea843b065bb1eb26794a19528ec12d61af14909b2a22d3071600cd551c70029d8d7fa3e6","ssdeep":"","tlshash":"abe07dd711915d6fd72b02a5031c9068a51c1f7196715e9f5707d2536d028155cd7387","first_seen":"2025-07-04T08:06:49.904172Z","last_seen":"2026-05-31T11:19:26.316994Z","times_seen":19,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 328a2bb6fa0144f5d85400b5b12df9bcac88a3e9\r\nx-77-nzt: EwwBuUwJGwH3IwAAAAwBuUwKEwH3GwAAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: fdb541235f43b3268dac966936bd9718\r\nx-77-cache: HIT\r\nx-77-age: 35\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e73fb26e61b7779ac37a909aa465da53","sha1":"f1aa800d8470d6f52b8f1a919951d96b8c2bac85","sha256":"99edc223afd1cef944e2059f41beadcacc433ce17f52855cdf7803d197268431","sha512":"0df22279f76ba298db9c864b8853738968705515f880586293dd22fd7b4caf87cab05e9aee3dd37c350a490ba4ba1f51011b28dbdf7afc065840020a3641a624","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/F:Al3GKYKZrJA2Yg48fXPdeD/F","tlshash":"c7e1b74f9a144eb987c6438276cfb84675bc807352509d3afd8cc8b842697cda3e3b94","first_seen":"2026-01-13T09:38:59.141589Z","last_seen":"2026-03-04T07:11:45.044045Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":48,"dns":21,"connect":8,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.179.182.13","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://northwelltrust.info\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jnLcbvkmTWME4o5/fBknwA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 19 Feb 2026 06:24:13 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 32voC9xCJZ+CUwldE80kMX8L32w=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":117,"connect":137,"send":0,"wait":23,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/am.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/am.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 114\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-72\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 833478\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5KpArLmSa8oSovj658Hk48CL3gqY3zjdF%2Be2OUzZxs4PuONoTArHXZTgRlTLcdPCRQ4fY%2BqhpTt%2BohWhtrpZK6dfx0q86mgjdnY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b3a3f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"de91f7e18abcbbec217c1b8a3e2cf97f","sha1":"0b334509812ec6050bfa79935796a74c009ce0b9","sha256":"7fbd636c47e19d0556de6b5e5424c083dd944e6f308ee39d0cfd1dd3e068824b","sha512":"c47a7d4361ff5750d03838c8d6848397c56e6e09f590fe69716604ecbac0b06908a3db113d998324f6998cb1518abb3c6ef0b35858d05571c28856424f0503f8","ssdeep":"","tlshash":"b8b092d3ab782c3ad60a22bac3655000d83a4358b616028a405dd92945aa55da2ad28a","first_seen":"2024-10-31T19:28:53.257199Z","last_seen":"2026-06-01T22:04:04.022577Z","times_seen":36,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 337\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-151\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlhkhujiFUNAXafiQ3rIIajBvX6TuFh%2F6ePY%2F1gT9B5dmonkhSR%2F2kqYaKRfELN%2F4aLtv%2BV1t%2Bk8PApUbRIYFPjQYd176PlrDIr%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bba5823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"df7704043c6331e69e859c650cae7c19","sha1":"e152860a0f963cab051186019b288af7f3e6fd73","sha256":"e81d32985ebecc8c8ce67fddec52fbe3a2c1c36895e0cabc5574f44709936d5b","sha512":"c02bf35cac922df6c73db4fdf97056406e95f9dc8425f4c70b5db2a2899e33752fe5e632593027d625741b3e76e56e741adbce6f56cab02c5e5f363154f7db55","ssdeep":"","tlshash":"b2e02d9eda7c6c24df0f208b82eb0d23fee08a2342870d6020025134286054b81cfdf2","first_seen":"2025-07-04T08:06:49.91484Z","last_seen":"2026-05-31T11:19:26.376282Z","times_seen":32,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 489\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1e9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1811163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2FfrXxENM30RA0XjzCym%2BfVchdCvykzHsKK14htDsby%2BVGGekSR2A5xjuyQlZ8tgkuDkC7yAJKTViDjPyydzQRlyQ1qxf8PK05sX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bea6a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"e271e65e22e0921a2159761b99d2035b","sha1":"afc2dc07c84cfcea3c5c7d2257df08c871277ffe","sha256":"d1526903dcfc6aaaa80105764cbe668b00a2bc379a072d5ed06beaa4f7c77a11","sha512":"31388eeff5c4a080eb0b9d6ce1ce2ca9ea3084de05d07905aa1a6a65c61d43972724e4da42e901a38bc1a7b864875fcfd5745ea40e53ed091f4dff4180c20450","ssdeep":"","tlshash":"80f0548b55826dc3d8b62627600ce5b3d3fd060f41a629552d68c4308cbc348c09f167","first_seen":"2025-06-23T14:06:52.375844Z","last_seen":"2026-05-31T11:19:26.453957Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 212\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-d4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2342800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rpAgzo4gx2OauVmzpbQS8usHey%2BLiwk87Ts26shAn7NeWLHbdk1qY%2FZ9K31qsnhSyi%2FZeo%2BMyj66fPQCSmWC0MrbZegd2uSBAoS3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0edb0c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"cdff1a748376529d2f46d5a7c35573c1","sha1":"5d08801e22eb7623751ed59914da2d80f54b8dff","sha256":"9424fe52bfc0ade3bf3ce8c01cf0d45df0b0a43e800adf74ebef48e144e1aebb","sha512":"5e53a29e2e9131ae7f087454ffc11940616a7421e15114a9f31c8a2cef1f6890b8e920f1f38dad94d8e527c2d771e979ce09f34a38f444a424af0c679ab6eeaf","ssdeep":"","tlshash":"b4d023d0b05d3cb1903802326f30a711cb310435d1404303b83c1803cdb4202704a295","first_seen":"2025-07-04T08:06:49.945031Z","last_seen":"2026-05-31T11:19:26.482008Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-AIm7gawg.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-AIm7gawg.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:13 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6994310c-451cd\"\r\nexpires: Wed, 17 Feb 2027 09:18:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJGwH3FHoCAAwBuUwKAQH3DAAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb541235a683c228dac966954ad0310\r\nx-77-cache: HIT\r\nx-77-age: 162324\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283085,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"58de573622a38f62db9d2a272e43fbcf","sha1":"49e950e0379784f144c07d6114384baff4b74e8a","sha256":"b42ec41323945db7018887a79887e94e5e324b56642a07aa33f19e0c486dde96","sha512":"d9482f7493b2ec8fe9ecf11b4c6888fe6ea1acf1508f86126744b931534ffa1d1bb089cdf8f6679bb4085bc920fddd7b0dd4c617574e1bfcc5e939eba47d9eb3","ssdeep":"6144:VRJU8SN+KtxKR/ZgQuTlBraPPMHPVsddG:VLU8SNjTlBraMvVg4","tlshash":"5e544ad47295b43443a700e5507f2006b33e5c29a809c068f6adddf67db9989a2b7fbc","first_seen":"2026-02-17T09:27:34.892087Z","last_seen":"2026-03-02T07:55:13.406489Z","times_seen":786,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1507003211169-0a1dd7228f2d?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1507003211169-0a1dd7228f2d?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 055ff5289ee2f32b8ac9d08c92c18e1f75608a8b\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 15 Feb 2026 00:15:21 GMT\r\nserver: imgix\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\nage: 367728\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230048-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 16037\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16037,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ae34be6fcac937d0fe459653de46238c","sha1":"42bb2526053dd8955f3bb7188bc55ddd63cec1b5","sha256":"b99d02fc4d922f79e0760e7f268504474ee0dea2553a32ffa8c97e835a22b9b7","sha512":"ff88f9cf064520f90d5e6cf0f9eb1e66c554f50e570a5a82e835ac894b177218d027b4f7d38066078ba41b0be717bbae3c6d5b24a238e223c70e733ce53da2df","ssdeep":"384:EYNg7/HMp8Rfvky1eDuSOOm1bjN7/WuAk7yNNztwL:EYy7I8RfXIDuSOhbjNiRsyNRtwL","tlshash":"8a72d0b9b992a292e81ac738d4e39615a0c24f201b6971687c340e2319de4e85f1edf9","first_seen":"2025-12-04T04:02:48.365699Z","last_seen":"2026-06-03T23:34:03.689291Z","times_seen":477,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27232\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a60-z1IVIrKbHuW+8NbsfeN6A7L4oi0\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 10082\r\nx-served-by: cache-fra-etou8220091-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27232,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27232, version 770.256","md5":"cbdff72e5d0487b36c7c47f09ea2ef28","sha1":"cf521522b29b1ee5bef0d6ec7de37a03b2f8a22d","sha256":"246c899ffd4360235af942b261e2671563f2f9ec6c2708a8fb56a5364245a57d","sha512":"3228e87115c554729550af7ed902bf759e5feb9d0cab8ec324aa426c02e3ee64c5c924bfc1f0d38dffa205ca4846afe39b2397022e606a1aeb307d8d868b5413","ssdeep":"768:0iO04O+mQEW5w4sEcglXT+wehNBtSdDwSEw:/OeiE4Xcg5+wONBBSh","tlshash":"12c2f164d3d1d8e3e3e94770956850d5002a1eff83faf126e54d09106a09ee77aaa192","first_seen":"2023-05-17T05:19:34Z","last_seen":"2026-06-08T21:15:03.037152Z","times_seen":1406,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/eu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/eu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 261\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:40:00 GMT\r\netag: \"68640150-105\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2sQQhx5bCKFFm4xHJGoPnVKL9vSFKvPSLxFCs4ZcC8Uc2T9X%2FnpQgtY765U1OsUBzuPwc2yy%2BKIVL0Ye1ijif1a3Uzzzicbh9rZ\"}]}\r\ncf-ray: 9d03ae094db6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"05eb9168ed0d480fc0a8792ef674aa84","sha1":"efcc817766ba7703e73782ec007b0ae09f33abaf","sha256":"02be670766fcedb52575690ca891bc48040c9f4000e73a2535daa2ca79e54011","sha512":"29de8c77b8725ada2f95ebd5fc1f781559c4a33594c1092bb5a4b54fae5e121f472730f43fe8525a348c048b59ffef829c4341f6bbb5bae14d773e198f6c95d4","ssdeep":"","tlshash":"91d02bd5d3111d95d6a04665a12d8705aa54133a85005b1f515b053458e3a08c0ec7ca","first_seen":"2025-11-05T18:48:20.393546Z","last_seen":"2026-06-08T09:54:51.777439Z","times_seen":25,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":24,"dns":2,"connect":1,"send":0,"wait":45,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/km.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/km.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 342\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-156\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2162323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbkAVIB5BkW9vfV9m0%2FtOR2Pkifla%2B%2BQuDSARzAG8UGUzNWcsFdJ3014TniZ3vPFYAORTkunHLTOSMgvHzBqsHFbxGa5t6uFhGon\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0daac423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"e8a286c894a0d306bfb6dee9fbb58deb","sha1":"8801a1745fef86952e8b048902a1d6f23a2cf586","sha256":"e9ec1b8f7d9f913b46b75b07abc20bd026913076d87fdd1ca8700ce74237ab5f","sha512":"ace4ad19f0bd043be023aa575c9337e9ca172426e6cb72cf9571efebe0e115986231af2f9fdd95ae47eafa8b6017a71c82e63c5279da85c0d3538de26c23bf85","ssdeep":"","tlshash":"36e028a7f5125e4dc0b731bb41034075d151c71b014f6e4ac02ac40305cd2314c4d747","first_seen":"2025-07-04T08:06:49.87818Z","last_seen":"2026-05-31T11:19:26.451531Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/kw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/kw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 197\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1896672\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pY5ErzgNjk%2BPCPCO7XehqfxwSqFnST5IWyYtQLvaywUI7RyZIadpNQeSz%2Fvul7CdxIVEAbYHUORjsjmYv31cMU92xGUjHa37Q2o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dbaca23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"2b270487d2ba9ed450148294a0d05205","sha1":"e855f3e43e5437497f3ca1061a2b3e1591b31d20","sha256":"bc238e2b13e5030d07933645f9aefd5fab9eb27b78daafba68e25ea3d112de2d","sha512":"a6e1782da9b01e54227eefb07bfcf96269f0cbfad2cf5c2182e4f00e87435ef0d685f6204ba59f10e8a0891442869726f85d65a8a5f2838248196d1a4c954ed0","ssdeep":"","tlshash":"cad022cb73001839f64d8abb0a34151c9e220978d30e804754a0a08e671048ab0d9787","first_seen":"2024-10-31T19:28:53.313177Z","last_seen":"2026-06-06T11:20:22.29015Z","times_seen":32,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 299\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-12b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2345242\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhSFkhE8d7tnjjoeLnZHk7KoM5lV2D3asj1Q9esSqUjIGN476GwViDNNZoSxeph9iIsFEhFqnST5dMyDPsxW02qb8PZqJ%2BfP3CDF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e9b0123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"78644a3b72b92683023efede968ac67f","sha1":"3e95b1859ef5426dbb8cb94895b4577c4f70de95","sha256":"dc44a48f46a1fa210d09bc2a88b66cd5ca225f2a5c4ea5651bad58ef15a073a8","sha512":"667939f53b2f8cf5ebe72f9a50c3893650324f6958cfebb92cf4f4aabb3660dbde713a2c9812e392249610ea4d70b6f0ede931a41725f953e358ec1321e7697e","ssdeep":"","tlshash":"bae07de61ad5080c49e20127402c1106c1660a4e56050739434a5f1726096a928fa7c3","first_seen":"2025-07-04T08:06:50.012289Z","last_seen":"2026-05-31T11:19:26.421678Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ws.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ws.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 164\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2239641\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uw%2Blxv8fkYnExB5Gvt5eYDc45ad31sqZs1CF3VFFtOO0Ra8ozZ6G2n32yU%2FzNShM%2FEAGdS3acJsbXGo3%2B569qjeYUyh0BxfdN5lY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0fcb3a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"1e032cbf1776849f20f3be6319ab1906","sha1":"eeafdb40160c896682e4d1f3e0864573bae30764","sha256":"abe05b0e0fbce7539a4564de00b3e24b34069d06eb14b52110f68fb352028744","sha512":"78338e770d8c30c1877ef528ef234b391971d4832d9763073ec6adce9c032f837f847c6b22fbfd78c179c99cba827a5bb41d0a34982e2a9564b2c8314b284bba","ssdeep":"","tlshash":"dcc08cc661937eba894c9b2f4899051bc852052916050b4b30ea933c6162c0fa0c9ac3","first_seen":"2025-07-04T08:06:49.956641Z","last_seen":"2026-05-31T11:19:26.334171Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/xd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/xd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hH%2BnEyfZ%2FOXgEJWc4AaPuHsja%2Fh013BZA4zh3xt41RgU80mVFMuTTa7KBVk%2F%2BhdVG%2F0nVovs3mwhnvYmGZeaNNvNmFjzcLjjV9Ws\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ffb4423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/br.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/br.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 452\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417097\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQkRQzLqa8jd3Ra2T%2Bj7z6oTJK%2FCuY%2BETbPGws29%2FFGiWDT754JXOeWmRZ%2Btt2cJe2I6H6bKDmSGmTBoZNd8lEC1a94Ep6CS8eOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bba5923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 28, 8-bit colormap, non-interlaced","md5":"baa16cc45e552750665dfbac3bce7e33","sha1":"7829320e91d88c1f4671cc43d171c23c5ec2f2e5","sha256":"12d4080ba2138d1a7b0cde97a52a0e5f26b314d48490cf6cebe24dde1227ab76","sha512":"1dec338211aa99c42e7bfdd12435015790fcbd9881cb337e2a6083bdd8982c9eec4a3fe083d8f12b3e072036447576c05c4a592b7a959f2a7c57d46499b44d7f","ssdeep":"","tlshash":"92f02393df05fda9c994d3556d49c955ff6579df03648b1fd02e2cda300245d0143190","first_seen":"2025-07-04T08:06:49.862808Z","last_seen":"2026-06-08T22:32:13.449597Z","times_seen":116,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/by.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/by.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 251\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-fb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1768416\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4Z6Cjo%2FmIIJREfm5%2BmpdoeIHQnWAbMAV00xdC1nPtkMDtDh6JfG6d7hdbfSR336c5Xsb2gsZHhh2tEcR8sOY%2BNpaEc1TgDS2RCZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bda6923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"5d86fa624fa212997d76e6aaf53400fb","sha1":"17a680426947d72040de1eec9dfeeeb307cc2271","sha256":"7044a48340fd942ebd462c5f5f27adefa6b443d2805201aa036939238dfdb8b3","sha512":"1c149d9dff4a85e43482c81dba485c1b659615247794fa8367235b3cea8c5b19f38ed8c3b5a997fe245b37ffa3012d740b462996dbe81a070828d95e898a893e","ssdeep":"","tlshash":"54d097fb23e86cec0972670b61702260ec722908627799c2075c80276c31506c3ca192","first_seen":"2024-10-31T19:28:53.28578Z","last_seen":"2026-05-31T11:19:26.339669Z","times_seen":25,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/cn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 221\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-dd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2428710\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k50AQtGvodmoBA12BKCe10f6Q5udP3TXEM3LZUNn%2F1OqfzgQkH%2FRu%2Fz6aihUR1CE1dUjCIgL9dOUEd2Zs9Ks1qOuWRICkIXVSYQu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c1a7123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"6d014db439c5a09b5cf0265976cbbc65","sha1":"54f66f021046f96ff8a23b4a4e1bd8067fe159af","sha256":"5963de4e9e57e0371ec9c66e5f138d82d317081cc63f980d92ab199bdbf6c3ed","sha512":"05c33dd08d44db7a56fffa7fe2afcfd812a8434a24c52247279056bc0c61abf75731005cd5c63cd7d50e28f9797bc56423063f6800a455d88b8b752edab8e30a","ssdeep":"","tlshash":"1ed023cb135d4ebedc815563c451d0cee474951c464100531e5548341891e4df35f75d","first_seen":"2025-07-04T08:06:49.928433Z","last_seen":"2026-06-08T22:32:13.42678Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/eg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/eg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 182\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2598725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8xQjejGP6Zv6haJbtBQw4%2BOuUHnYMrTHZzOmPO1jcivCLG%2B%2BZ8QNBoGOSsEsxiAOa4X%2BxE4djGcsePTGTHeYTsgLa5PmXg0AxON\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c8a8d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"b2144061e889b9e18507d2c614d2d466","sha1":"e1a6c0d18dc33441e3f882bdda4727dfdf64e9af","sha256":"f24e6d38ff8e18a0ff6952573978b77a45e709fb921dfacd031b22bec64efd96","sha512":"483543699e5413095fe0150168b2636088f8464106da73babb48592e59f00a4466a19970844d0744e6ef3cd7a255e22e84b358c7fdac0573159bc972980868da","ssdeep":"","tlshash":"a0c022cb52303cf4a32c023b890a609c983210a513012752c825418b16240abe1c0216","first_seen":"2025-07-04T08:06:49.901245Z","last_seen":"2026-06-06T11:20:22.284958Z","times_seen":44,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/lr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/lr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 222\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 833476\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1AKvDzE1%2BlF8P3Z3WMbNwmDMB3jc95l6fGzZ6scaIRJfkKVz9%2BwofV5xF8YTEBGZ%2FdMh3ykxUK999AsK3KXD1plA0DqEQs71YdA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ddad323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 21, 8-bit colormap, non-interlaced","md5":"bebd2e6c6048273fe13e6e27aee1539b","sha1":"7ff544f53f7eed90c8f7945b4ac313c6d6a0db17","sha256":"486663de5cc86532a8fd36cfe514b0066216138ca5208c9f80b370980416bc21","sha512":"e0526c830b1e9850b62c8211522f388b9801cefe77f1c5fa426c2efc733ee15e9a03c383325198886aad301b60112926b36d9da1421d13081b0c38bb70823a6b","ssdeep":"","tlshash":"78d0a7926f556d77c5d4225a19a9dc0e9808a1012453c2a9c0029db28425e8b8a1c1d4","first_seen":"2025-07-04T08:06:50.024303Z","last_seen":"2026-05-31T11:19:26.420344Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 119\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-77\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1897352\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msthhOFRGUN%2FrdeC2JL8VY%2FP16gqOc8L9kdp1C8UIuXPOsSDq1Kob3lPS7Ckl50kJ0gDqQGYYb5%2BTzUIbhiK2yP%2F27FZH3GpsaM2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dead923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"ef530fae2e90fac4eb58f0e91284a583","sha1":"62ba9c9dd734676c83cc596bcf1c2144a5c18246","sha256":"fc192493c99fc9f7430ef1b0f43722ab3ed32b0998f06b2866967a2a3b87c843","sha512":"fd94997a3180f03e7742c1c6865cf9656419eef558e000e6692e064d74e0a52e086c0315ecc9b6c17cdb85ec8e9811cd0a081b0516c96649a92191bb3ca3508a","ssdeep":"","tlshash":"69b09bd579143e31864001731514411a946515155232d15f148f853d171911f84c93d6","first_seen":"2025-04-29T12:25:52.278716Z","last_seen":"2026-05-31T11:19:26.491367Z","times_seen":22,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 293\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-125\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2511545\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxs9CTCKcz%2FXoap5cvvUPjUbFRknbMbf5sXW2Z%2Bk6L0tFo%2BSu7k9Dh3HAYvr20RrRZkH2wapzSiOOpk5t0K8%2B%2Bg5azq3%2B9bhPCB4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e8b0023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"bbb750d925fdfaecaa4ff771683921d0","sha1":"3818283be28c1dff2bbe1c913a00de5a149d26eb","sha256":"90a4c4d147a942f01d92ed26ffa829ace8a8257343a6d4adef979105e548f9c8","sha512":"c33a82dc6e22a8f07164ac5b49dc68f27afec7f3cb134064f23ae665b7fd6c5c66509e45616c0b99b95f1bce6d38b5c98e53377dc0d2c42cc358a93e91b8b980","ssdeep":"","tlshash":"ace0cd7d20865c35464411b3a71415566db2f7781249151228788836176112577e939f","first_seen":"2025-02-01T01:01:45.046249Z","last_seen":"2026-06-08T22:32:13.430479Z","times_seen":139,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 175\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-af\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVKC%2FSO8lMhW6%2BbNYE1A0x6zbvdowwhaWqrNkDk%2FmcsHRIrhZjInrkRoNdXG6%2BXgauLyOf1xQX27hUy2tfqq2CYo5t%2F%2FBkgepdzm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0cea9d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"f2c8e89f6c328ad6767fa894031a593f","sha1":"48498b3ca378147acadd31b2b6f451facfb3b883","sha256":"c2e1449a279c4e45af891cedb7869e6775620479e010cc9aa23bc22b5cc9553d","sha512":"0e103c77f985fd085166a23447a8883ec8f8ae61da3cab36a272efe08360c469beddfe3e198fd65c3cbdff1aaf72ea7d7c49414ff412d4d99d629dc23fda5134","ssdeep":"","tlshash":"95c080e2cb90ede44f5c5237f301677d9937454f31955619650e49765221114c1db3d1","first_seen":"2025-07-04T08:06:49.951187Z","last_seen":"2026-05-31T11:19:26.401116Z","times_seen":26,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/hn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/hn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 163\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2545396\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MgDZPq9TVJZFmMPvNIpwhBDIPSKoz5T1wlDW3BAAo8p2Qa8K9b6Cf8ELvMJpa%2FcAqUwaOnscaOhzUPAzFk4Y87%2Bfka3qFif2RFV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d3aa523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"f0260c0fe91b5f14fd0cfec805842d35","sha1":"ab3268b016da63d5a22d4419733ca62e83244d09","sha256":"56673acd3eb4faec5f794fca3c691e28faf1fbfd1319f57aa32d5f880f0d1656","sha512":"10c644cd302ed5af49441d10ff64fd01ce0f741de718f2e87b653848a55694ecb19296372c411132e5dd54abca26a5e772e46e10a222f373f74074fa47762465","ssdeep":"","tlshash":"36c080d5829d7cfd9794932901544559c550115d6121160f040ecc299d066ad94ed347","first_seen":"2024-10-31T19:28:53.246035Z","last_seen":"2026-05-31T11:19:26.351728Z","times_seen":26,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/la.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/la.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 195\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2506265\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hs6ZrjVWoUIXMQqzoGG8KcALE0iyVf%2BoGRABSzHF5S%2FcwjDc98ByKGq6exVpEvt94ekR3I%2BpTJ6zVrbNbWMbFfSWtq0YgQYWT9eu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dcacf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"4b11da0ae90b9cf8df8bd033d4a3dcbf","sha1":"7c107555328ed505048a38457e7624f361bfc1b2","sha256":"a446530d2901fd23c0e0c5ac29465a1260bd1810946be6d8b665bd99ad124daa","sha512":"8b7a4ffe1eca586045a7bf03a258a0a1727f0a090186c5115ececd5bd3c2c2b604e8990994a575ff3c33f1d0b6e96fdff6d299c8137912dd9e5767626ad9cf4e","ssdeep":"","tlshash":"05d022d221603d356ff881237ca8a02ccd97c96e09055905a989459829a627a338a302","first_seen":"2025-07-04T08:06:49.937034Z","last_seen":"2026-05-31T11:19:26.33022Z","times_seen":20,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/no.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/no.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 164\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2605589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9%2B9POzbFF3xtXmLdXoWUzCeOPtQmNf%2FupzmeuAozI0%2F%2FC0fOEc%2BoZ%2BOeYQ6iLlNLWEqeKltkDDnH4JQwn0VCv%2FIds3tLSodILrK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e4aed23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 4-bit colormap, non-interlaced","md5":"9d9545b9ce771270e7a1a09765cc48b3","sha1":"bdfa440b450c434248da8e98daf25faa49e0b32e","sha256":"2b03bf0a83b55ad0d9ebe2576dddc0d1eee11ee8cb6476363e2649ce9baaf003","sha512":"74224e9d0ec0d6e2efd01835480673ffec46660303e9b2886335c9262d4300f6ce7a868d321d66519fc71ce355584f8aa08550180a6e6dba458c3f9501c6e8bf","ssdeep":"","tlshash":"e5c080c17fd55cb5d5c7657a2421402158f9345877452d0144545a1158d711c71c918b","first_seen":"2025-02-12T08:32:15.780066Z","last_seen":"2026-06-08T09:54:51.72234Z","times_seen":162,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/om.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/om.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 203\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1726519\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v082OCTW1SOMsyPXB7bCh5PhvcMOSZxkorb7Lhq1qx5N9RK8Ge7GuRMXn0HjoujghaDXfrnlu%2F869U64vfCvyTQXj5CKqHqNLpjz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e5af023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 23, 8-bit colormap, non-interlaced","md5":"2efcd029253af3bcbfd9bba3d7343c90","sha1":"57f942dae5b0210fdc8efd4abd439d898abb57d9","sha256":"61084dba3bfd178e01d610a871e49fa557b770e4c56b9dda06f9a29ef55cea15","sha512":"07be52ae3a0b6191b1ec63273b544db91c2233c2944f2c364c1354b5630f97092c4ba8d64c37b56396c2687b0841e012cae8658db7ba7a1336b8910e6b51993b","ssdeep":"","tlshash":"32d0c0afc372be27d8ad17b3834909f45c56830b0f52041f0417b771283a0ca928027f","first_seen":"2025-07-04T08:06:50.035354Z","last_seen":"2026-06-06T11:20:22.254514Z","times_seen":28,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/pk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 310\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-136\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2503650\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrL6wx7F4Q62dDhHgC3CYo1DYE0gavb1%2BWA%2BH3447Vg%2BSBPGGdpHeEco9G07CaDw3LasczHsSizFAWQhI6NURVNzMjxXJDSnEJMm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e7af723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"072bed35528645dd338c60cb5b046b4a","sha1":"0ff10090775ad8ac71428f9f9b615df15c54e3db","sha256":"5a4a56aea914da4b5c0c39761743217424c45d26e2aed0bc39d6d72fc84e13af","sha512":"5ed6be0db42f73d1048efbc8aff0814dbdb6421871266579bbfad6bf0f6e602a04c4894281f7f9b4c7af8cbea17bf0333f188e5da6574e65c7395d806d6c3558","ssdeep":"","tlshash":"4be07dc505686c30d13a9d368a518c34d891bd359373c477880ea91d9452286554e6f1","first_seen":"2025-05-27T23:39:58.562697Z","last_seen":"2026-05-31T11:19:26.495549Z","times_seen":32,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ch.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ch.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 141\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-8d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2430003\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nh%2BQkfWqz%2FItlm3O3UG6FC%2BzRVy%2BarAimHTOyjbR3rvIJB8uEbjMLLzgJ5eCcX6QazpGx7LR25Q0j0OWdY3ZfpHjJZEZ%2FmU21O0R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c0a6f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 4-bit colormap, non-interlaced","md5":"81fb10da6ef49e89ea6d8ad5c4eb1c42","sha1":"f0fd2d5153b2c15ac3d71668922504fe46772d41","sha256":"2d807ed896b1aca7810cd8dc6968c6b5f23620da10ba0f0da40923dedb8aafb5","sha512":"a96be73fe7e8eb13e569a891fdf2ef03582e02da9b3e932a13cd04f027f779d00d1c0949d097a3ff82396d136c8f0ad3c2708225845e44d79d9fe8a998dedaa5","ssdeep":"","tlshash":"e1c02bc7b2d0ec63c4247023c0680958e867ce8d2400c10b41d38159e36085840af3c3","first_seen":"2025-04-25T03:41:10.089939Z","last_seen":"2026-06-03T21:27:55.381839Z","times_seen":109,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/cu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 272\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-110\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2338029\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BUGsZm9kadmo0infab3xwAaJSkabfx%2BznVW04%2B7z5URH2d%2FBGFXVs7UYM3u%2FmVoOdawkczYQDA7eILQgKtQLA2xtdyNK0LxpaCd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c4a7c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"e3e37292dcca8710296060ff19133d1e","sha1":"740a694ce575feebeb6523c2b1a663c8508b9d42","sha256":"a05fd4c3e91f43208c3422976acb63bba35cdae7e26adab772e35fb8641a1e77","sha512":"0107b011739301f6e493965d81ba8011cfb09618d8bf04b5d3503253a68f16bb159366a06070987a250775bf2d4d0f441c1f815f1d72318cfd08a06157922a99","ssdeep":"","tlshash":"20d02bf45be93c75907032f2911d403aecf1155a18a68c150561c4798521f9c0096376","first_seen":"2025-07-04T08:06:50.003724Z","last_seen":"2026-05-31T11:19:26.360052Z","times_seen":22,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/is.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/is.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 143\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-8f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 937121\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbEs8ff3ll9bnUbO1tuEB6XcasJdMdDoHlXijtqHhlVIQ%2BvggEuBNdQ6oxNbJPysN4bzwYyzn5fyGycoZ%2BJRta9VtQJWY0CYOyAb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d7ab523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 4-bit colormap, non-interlaced","md5":"092fb9aa7a548346697234f13a6c8800","sha1":"fdc10eb7c0fde5798dc41bae7f592944804aff32","sha256":"f7b5faba922a008bcc6d640cc38ba7629cd168ab0e155cda593a914900a59113","sha512":"26c74bb6ff4b4e9163c40c7ca19be5e2eeba4a6bc7539da187c6480a2072ebbe8baf6270afd11ef279931fda42d4f74cba1432846be90bcd74318241ca75f17f","ssdeep":"","tlshash":"a4c02bcad20f6cb9c90a4e3131103005ec37846d580214078189a921134a04a91c724b","first_seen":"2025-07-04T08:06:50.00083Z","last_seen":"2026-05-31T11:19:26.485513Z","times_seen":37,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ng.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ng.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2606916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fi79BaZmQBzMg%2Bo8GTHAbkZERVGYj4ogVlFWwygtfxa0no1AtO%2FNcBcmbFytsVMHagYeaNaKPnzV6BLbipeRW%2BRDIAo5eGnFL1Df\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e3aeb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 2-bit colormap, non-interlaced","md5":"ad6b7e1a7f92fefb97cbcb43f7ca9f91","sha1":"6796d637675ac9ba78dfbf435d11975936d092be","sha256":"3c7e39999083f6e9c603c46ac2e91159c82122dc1a798d37f030c7d226d22bc9","sha512":"217e1e0d3d16091c592daf0a6cee1cc5fab8de7dd717371915959f1b80155ca47da419cd048036014a6df04aaac8db65557e238a2d94b2441a991e957e441c0f","ssdeep":"","tlshash":"f5b012e337814c228959153731180004ac13e506032006cbbe24c92c0112308c0cca96","first_seen":"2024-08-20T04:45:36.150274Z","last_seen":"2026-05-31T11:19:26.412971Z","times_seen":64,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/pa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 247\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-f7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2162426\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mfaTXU%2FT%2BFdHemvgCS6PKbbxDgMak%2FXevyAb0mif88MUZGmz7zaqNsgkoiTQlLCiIhfCzEoEudUpYXlKQMS4I5%2FimICBt%2BUnUz7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e5af123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"622b9889e1d1195c098b6a080bd016d2","sha1":"4e8bbcc58b26b4bea570ef67fa42a442cf2d1388","sha256":"70f8bf77a636b72ee89b58c67b7f35c88b5165d6e78e407920587984cffcb2a6","sha512":"d917e636e25b9572e799d49d1e6320af66c0598d8687206091a2a546beac663c017e5c5068df4a7adc09efbb70e81c717190bf410e043434b57201b359303184","ssdeep":"","tlshash":"a0d097a853712c3c82800c3ba5a20b28e8e4a6f21583556ac013a83641cf04bc1c048b","first_seen":"2025-07-04T08:06:49.961899Z","last_seen":"2026-05-31T11:19:26.366194Z","times_seen":29,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 347\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-15b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2545374\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gCEsm2UzzoOeP501ec3bGwBQ9akw4d29lzgj98OEpWaRACU%2Fmu5nq9o65QPfunCYBRfo1Kez2YW8uZ%2B7vO%2BcH4YEqQQQVQiDWwC3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0eab0323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"03177021c60ea369ad1bba986c4e61e3","sha1":"8ff07a13b6eef0f8d27e608db92929d21c06a796","sha256":"e54685147eaba37d003ea612ed611825205c2ba7a15efc7aa57fb7c30a450596","sha512":"48ef10c8fd41ac452f012cb997b63655032c2ac1eef9bd5e41a3fcab113e2853da0f0092d062e94253cac15a262ae7ea1a1cbaed748a19778c20915a9fe0d122","ssdeep":"","tlshash":"65e0264c617e0d21d38256eaf87a9787fe5655e20a252606185b80150ca2c2e79e67e1","first_seen":"2025-07-04T08:06:49.975975Z","last_seen":"2026-05-31T11:19:26.463812Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 463\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1cf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2511678\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCst4NBKvEruN%2Fza31kmjniDZIK5EQPI2KK4ozicbPoaEAOo2k58J54fZg1lda94eYamML3HS1MtjnunamiYyonm8h3LXhL1Ak7l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f8b2623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"1724c5a1acd9e9425e500656f0d8a892","sha1":"178327f2a9cfb4f7830d48cd94415fdb2a75f1b0","sha256":"3f48481fb392642bab58e43890b2127b409499857c46a71a7429a1cd8c7db27d","sha512":"4b64603cd6f2b45e76bfdc18e34e79c007940ed4f28f60c133c6de7a36ce8eb675136ee847445098ddcc5c73ac89c3d964864416cb000d75a93a4b0ea444ba9e","ssdeep":"","tlshash":"d1f0dc9a150aed28d9d563d20a984848a823a2217f314629589af8248fa868380c7789","first_seen":"2025-07-04T08:06:49.875901Z","last_seen":"2026-05-31T11:19:26.472296Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/vu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/vu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 396\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-18c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1121397\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHPCzToQomWO9Dfdt6kgMR6PvvvWxtaxImVCaSj0nVVHkkQH%2BkPnLKl8hLIyWnjG5WSNR8H7nusiLoSBGaEfgpVdQhaodN0h%2FjJA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0fcb3923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"e773979bcc38acbf90a7fecf3d64c6f3","sha1":"10c6ee85eb57d6dc702ffb344ea98f26dca89b15","sha256":"09cd5cbffd7b3aec2d9abfb5156349e96f9bbbae218da8fa8939ee6d3f02f8a3","sha512":"d66f5285c31039e09beeecd823973b73e29f38d2b679bbb2df53023bd16e7efdcac1bf0b3db0f58dd9f2622e785d576cdf41cb3b339285a2fdc0e1649c598bd8","ssdeep":"","tlshash":"40e0f1db9490ed04c9b05c3401da4022856217a413159b6b4809f6c981f380a8999fe5","first_seen":"2025-07-04T08:06:50.013682Z","last_seen":"2026-05-31T11:19:26.44947Z","times_seen":8,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ar.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ar.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 214\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-d6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1122121\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDpkv4Ea269yroXdetus1UqCPEq0GxI04A6tbQn7hfTJXrJwPzNINSkR9fYsQRAcl8HDSzVNfKeyxNMbReO7TvpvV50q%2BDxRNzYL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b5a4523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 8-bit colormap, non-interlaced","md5":"38cc45f2c80a156040748c8027137f01","sha1":"20c4c95748fc8ea9d6a18e25afe8d9919ff51df8","sha256":"7772105f9a95697f0c26fdd03e9bb9719db4dd46aceb4cce5e2a81475c9a8c03","sha512":"5ae045a2299646215b325ac578f868b437a3ed0a3e87d3110956079ed18a714c6c9c14401880392a24be0617b45156e20d406228fce88f344f644ca02c5bb949","ssdeep":"","tlshash":"44d023f775d55c37d7c60b3ad2984501fc1546310006910ed03343275770cc700d09b6","first_seen":"2025-07-04T08:06:50.021859Z","last_seen":"2026-06-03T23:24:03.755225Z","times_seen":70,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ba.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ba.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 246\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-f6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1768416\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lA2E7iVgDd5EDF9b7YbX3mDEgKHf0hkdTsesmXz3VY7prIEuQ6esKmv2AaRi6fcby2OMegqYQy9yjc33h2xh4kP728RgB4YqCrJj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b7a4923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"d61768b9420d669ab24f887b613cc753","sha1":"e01557b6b81557a3b10944c3b2bf6fac8a48b49f","sha256":"cb9fcd81df5a303e2595f2b79981f93cfb90642b8cf6573f533bd7a38e5b9a9d","sha512":"caf208d9ce8efd5fde3fe8d9e21172fcf7d0aa6200a4d14eb98968f099f869b620672b5a28a279c7a3f724c70e4e671beeadddfbbe09d0814e6195011186eef0","ssdeep":"","tlshash":"48d0a7da25434d7fe1512a3f46e5a0a268b5503926e84e069512e8bf161125405a87aa","first_seen":"2025-07-04T08:06:49.877287Z","last_seen":"2026-05-31T11:19:26.396849Z","times_seen":29,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 198\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2512462\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1k8mWiSz1stuelh6MubTlk5V0%2BGYaW4HdW%2BS0fY%2FVEZWYz1aRy8ICnKy7odm%2FHAm4RgJtYoKbX%2Fk%2B1iwiJrYMbSfhvddQr%2BW4Upd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bba5a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"ed1473e1a0e17655a79432f092eecbdb","sha1":"8616b53c43a61c614035bb59ee065064e2740f43","sha256":"998a2e7bf9574e8d54a4c55808cc9b50dbbfe23b4be46cde0f4b9f8993a5326b","sha512":"c99139a4b666d9fa948848a0013ee073d49372de8bf29f8d89999cf704611cbb80ba066ea8e03d65cf45530e594dd6618d861baf46e5eb082217448b3248c847","ssdeep":"","tlshash":"f3d0229fa3576eaae5951a3a326a1403c93800388a2ac017de20d0456a186afa8843a2","first_seen":"2024-10-31T19:28:53.455816Z","last_seen":"2026-05-31T11:19:26.333107Z","times_seen":8,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/dj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/dj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 367\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-16f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2252544\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XB86Hcjmoxia9LSusEKbG1t9%2BZajcJGpFM0qsiMVShD%2B5TmWQsELgM6ujk%2BXrxyEL8RMNGs%2BPt8P4ERDV%2B35iGIUrUskZPAoInak\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c6a8423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"90297e7e8a39de586dcbcf407600de15","sha1":"3774221fe3c3d1d805e499910e7bdd1a4cbbb756","sha256":"ec7c1bf5c7075011cf619cc32f90d508f8389dc003512f03275d2282654d8d90","sha512":"a36f33b698d038cb1b1f6fe1701352f4720cea64cec400d20e5e482965e94093af6b9900ace714118882ac5901dbcb62b0834254abfab20a647bcff7b9ce6fd0","ssdeep":"","tlshash":"d0e0c0f2317e2f358be65063b21e861544f520045f54161481d39875254ef8cb1a55ba","first_seen":"2025-07-04T08:06:49.938251Z","last_seen":"2026-05-31T11:19:26.444615Z","times_seen":11,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 440\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2312092\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1v41qPfn3%2F6RQ8yeMSnl%2Bjj6lHEbsoE5YzTHmLS6beErk2%2BWbFVP1bI%2FV6T3Mdf%2BSMV4SQrFU9CR2TLJLsTLJv0P2E2d%2B2FpCaT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d1a9e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"18136ce64ef55db5e528665a83fa7e2c","sha1":"0ca89fea1cb18764e2a9327c1b4ba9968001473a","sha256":"e5477050b95dcc8c6629855f81174f89c834fc297c8bb616a84856f5ca08e5ed","sha512":"0ebbc90e8a1b7ea3459eb5a886a7fb13042a0b1f521215a1a02561dbfcb72bd5a4fe6890545d273c328d1f72f46281b144ff944dadb801c091fdfbc8d7869b73","ssdeep":"","tlshash":"b9f023cb2509de17c5120f3399fc53a6a1f92c619521c903165e0c643fb3b2940a17cb","first_seen":"2024-10-31T19:28:53.332623Z","last_seen":"2026-05-31T11:19:26.476589Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/xo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/xo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsCPCUdo8GdQBNbNlnpDaINV7gLbBUxuU6ghoyw0EH2rcBKLUDdaPIL6XIQEIR1fhf%2BnQsr6h5O6CgjIU3hMLz%2BHXowOUOAdL4MV\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae100b4523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/un.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/un.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 300\r\nlast-modified: Tue, 01 Jul 2025 15:40:00 GMT\r\netag: \"68640150-12c\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2447\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBzBUUFO%2F%2FmypJb%2F2Oaz9aeHMpfhFJwdde08bZb7gjFCvHilwHl7%2BOUSDJS%2BVdKvOw8W5h4ilqoJmnPfP4feQrAeobBVyNGGTtGs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae124b8323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"bca3e0ea48a06c34438ee86a3f96d35a","sha1":"841b676bf260acfae4261b20e5907f9b513f3842","sha256":"ece02d1078edd9b539860f91966acddfd3cd3582e02a376638dca2046ffbf9be","sha512":"0a6c8e09582e6e64f85258fef61239a1eb85d54dbc7d0b58242d47cc282a4d8a1415a70ab373425a488e46b1640f8aa23ee0f32fd3cbe269cce68eb6fbed3f65","ssdeep":"","tlshash":"40e07d917b23e910c27cc13bab452080a13282094a1b482b4565dd1b19bd511809a347","first_seen":"2026-02-19T06:24:41.243604Z","last_seen":"2026-06-02T15:44:20.918592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-9b80fe.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-9b80fe.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 45440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"b180-VBwCWQ+uT+/cntb7NKqszNjyR98\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 5024\r\nx-served-by: cache-fra-etou8220049-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45440, version 770.256","md5":"69c6d9224b743bd82635f1942fa49c13","sha1":"541c02590fae4fefdc9ed6fb34aaacccd8f247df","sha256":"8ffce383d7ddb41f6f1b477f56f64ac57a8a0ed1ef0d2aa468fcd8a25ac142b3","sha512":"76ad74b62d48dc680c0565e2d8f288801b3bd77208ec0fe4bfc3471d2569fe2835fda0c3e0bbdec0585db106f86d1f34a8a60b52b983264a68fd37684d432794","ssdeep":"768:Ff6iagEG95D+HnBXJe1a10E0qAPFnMNk1pqjnP8yD2BSLXKxf2dp9jhRvMUlboTQ:N1agEG9xq7e1EP3ITLanEBSpdpnRvMUP","tlshash":"951302475ec813daef1673bd78087748ece582b008be36b5762e6220207bf07dae5424","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-06-08T21:15:03.04588Z","times_seen":1264,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 447\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1bf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1465645\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCKYT7wzgDKK8JoZtGJc9m5EXpScMY162o%2B84EebqP04PRs8lQytww6%2Fzh%2BuT%2FTVPVPFi5sgZrQVHMaq5HRuEYPXFafGfy%2BDY3vk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b9a5523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"6271324e7b0b4c2ab845fd95481d3d4a","sha1":"436b324162a26a86ebd9dabbbacddc4020d9a3ed","sha256":"ca2179f78c632b3b2ca40bdd9539057cee330146807e0751c7c7ea81416ca6ec","sha512":"a3b74235bc78edfd664601fd78ff8938c9eb4f471176d7c4e4e17d17824ea8bfa3bc1142617a491918eb2e1a468927ea7dc40c2cffc6e8a4a8066a087a9f79bb","ssdeep":"","tlshash":"97f0239792856c75efa0c45d53dd825fca1e983b48150c122af8c80b535115c04c5f3c","first_seen":"2025-07-04T08:06:49.954206Z","last_seen":"2026-05-31T11:19:26.430647Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 119\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-77\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2511603\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fknfJllqtOJe31VEEEwG6xhD7SofdjxEOlr56YDkFBxfg2Nmd%2FSMd3mCoIrvgfbcHuVFqE1yxyU3j8p%2F33LBIooYHxoZXpi3AdnA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bca5f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"ab0efb566020beea4ee622a18f968ac4","sha1":"6808107280f52285a8b7467f9fe6fd29c389e5cb","sha256":"de22129844816123cce287fa14d7b0b57f889decafa53bf0ea5bd03964bf1b8c","sha512":"71b312d9be4cc4cbfe4d11fb7092ca3928491a31dd8316f7365c31827c8c482e7708fec573663b5b2653c972ff76f37397316e86bf028d59cc2d6c265212709d","ssdeep":"","tlshash":"9cb092d666a8be7bc7d20922e2666806a87e486a023097266c19c225f51940da288742","first_seen":"2025-07-04T08:06:49.948993Z","last_seen":"2026-05-31T11:19:26.428593Z","times_seen":12,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 285\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-11d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2342800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4xD5MOz0f%2FjpyrfREFC4fNxa99TBy45IbPlYtEpL1xBtXtUfY4LsvjEPPmSbU6T9GSx5f8wMMNmGYHUhe%2Fa8kIzUwuTkhpN8tNT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d2aa223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 8-bit colormap, non-interlaced","md5":"7b71fcf72d94de97378c3af3171fa833","sha1":"cff3942f69779dd213906a4a2ab7bed9e5d4733d","sha256":"eb42ee6042acf346a0bbeb467d988aec27f9718456977cd5f58ed7a51b1c34d6","sha512":"909f77d8aa44dd0ce239a276b9729674c6bf844abd9489cd5f5bd44f4d798e44759a0259850f13fcb68f0c07595c5ed42e28355ab0bac8a61a9f928930ff909c","ssdeep":"","tlshash":"9cd0ebf315c33c1c0cd18f3b6ba0d602cd2480e808088b0ba0b38db10e1030ec48db0c","first_seen":"2025-07-04T08:06:49.880815Z","last_seen":"2026-05-31T11:19:26.470776Z","times_seen":27,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/kh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/kh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 325\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-145\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2511289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6X5b6%2BMl2WW%2FE3u69lcze3gWGZSwTXn%2Fs3V1g8NcquuAs6xfHj7BHYXGrQ9vZK1AVLxAosSbmpkcVCGwlMqbrxpgeCrZoT5VSYu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0daac223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 26, 8-bit colormap, non-interlaced","md5":"704d49df79f697ec7ff5617110fa455e","sha1":"8c2de35b116fc1dfc54fbb90827b251670a345c3","sha256":"9dc623f80a7353eef8debd45b97ae49e6fc0d0989eb67836ddee050361613f8e","sha512":"46c74b85445b23d984dfe7b7557c4990f58bb1c030165993ead743bcaca1fca579f73171c2befdc241b0e362bcf19dbad668f0a1c155016aa84408006dd8fb59","ssdeep":"","tlshash":"7de02dc42196bfb5fac0a61badab06a0f232cc701032181b001b903f7733285c0c94ca","first_seen":"2025-07-04T08:06:50.048191Z","last_seen":"2026-05-31T11:19:26.356448Z","times_seen":25,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ls.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ls.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 218\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-da\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2544241\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNv51yG1CeDu3FcTMH6%2FAhr4KdDQOfK2jy%2B%2Fo2OnZt6aPq1caRSeROdhARHBoPUFMdBAXbuBhYFd5Kff78xlRyraBnLj%2F5B0ezZI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ddad423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"215a5ef3fce7a14f3ab9e53401ddb192","sha1":"b1bdace715dc5bc5b80a1da1a67a430fecda41c7","sha256":"590b1e871c75039b4aa0369faa82918700a97a4f311325c2cf34c24ce48cc373","sha512":"a62146718017473e3bcbd8b673f7258df8051301bae6f496e86d1fc527169bea861a303133707d2a931feb3f64d4445293d600b0b94a39644b02f5c7085bbe24","ssdeep":"","tlshash":"a7d023f9f6437c1cf1d701bb30421423d8712d1fda14811b1655545718e3785f0e52cd","first_seen":"2025-07-04T08:06:49.973942Z","last_seen":"2026-05-31T11:19:26.39239Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ni.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ni.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 179\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2545524\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A0pLWUZE8eCmKBuQh7ll9tfNkoMbXBOuOobFjRlQ4SksI%2FODaTS28RiRmAbJi0gOedH9JVomYSZC6tNTbCwV5UfNKTjgzkh0Aqul\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e3aec23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 4-bit colormap, non-interlaced","md5":"5d7a79f89a70f46eece775243e5fcda1","sha1":"8b0c7084e5dc87d9811cd5021112d6cc6d6ff533","sha256":"d91ea2ad935950538c8b71fc281341ce8bb8b6982937b02451dafcaabf7965cf","sha512":"51392ba8cfb555270128f05277e0fbaad2b68dde0b81c3c26459dffba4f8d3675d99a7ef93fdb6dc1c61b50ee9d909bc1af97d5c8b51461a2ba6714b6559d23f","ssdeep":"","tlshash":"3bc0c0b9640efd3dc095017f20109850c0100314e1710313406d1c39e34123d8260143","first_seen":"2025-07-04T08:06:49.938878Z","last_seen":"2026-05-31T11:19:26.478248Z","times_seen":25,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 843892\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OG7f2xL6GDDnPOIRsRBV7qVEZr1MCkZ0TBTgmXCdybOtwr8awHzBcXQAVa12vwGaxMNB%2FQ1V5ughjysw354oj9Wqvs0l5jiPf6VD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ecb0a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"ffb21557fb3f80044185a1cf83bd612e","sha1":"818a7151a6c855166c9fc7538017afe531ceb749","sha256":"d6e4ee4dbf696732860cfff572a89aca9bb3eb5ab6f3db4d20b055706b2fd690","sha512":"b64b4beef123bbd72286481c9c55e5efe05f6fe15c60c8676225e8579f3429d8343d27cd944c6c3c88e2c36e5624cfdc7d967683d052b3fa4abe3c9b2aeb408b","ssdeep":"","tlshash":"f9b012d7b28b3cbbcf30023f3a304cc4fc11516901198843800fc476260100ce0cc9d6","first_seen":"2025-07-04T08:06:49.874913Z","last_seen":"2026-05-31T11:19:26.47877Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1559526324-4b87b5e36e44?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1559526324-4b87b5e36e44?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 7ba98896c84be910fe993db2f2cde3522061f445\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 25 Jan 2026 03:09:34 GMT\r\nserver: imgix\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\nage: 2171675\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230073-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 17039\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17039,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c377bd8915e18889060940d0ba47f831","sha1":"f34996f4f2d45d1700c877bfd677cf0963bda4d9","sha256":"7c11e4ca0fe584e612753eb5e25fee659c09dce85bab2309158ae4d9996c92cb","sha512":"60658172da0f45e23cc5069e0c5a83e043ea11d8621154ae449b99e8f8f76e6041e49e4404e6fc3da01ae8a21903cc5a4f4c49d95b704383b7c0bc772daa0772","ssdeep":"384:LYNg7/dUirL0PhBFWFu3L3y/2ILLmzbjcP0tTxiuhIiO7wl+:LYyB30PPsF4L3y/gPcMtTxh1Owl+","tlshash":"9f72c0dabfbc8f6bea258ffc60a27e955381f27aca0030661426bc4958553c1078d05a","first_seen":"2025-12-30T04:14:08.174624Z","last_seen":"2026-05-25T08:02:43.453917Z","times_seen":376,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":73,"dns":24,"connect":21,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/do.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/do.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 264\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-108\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58jsIg5EM32qHiVuv19u0inh94ENGD5xUZ3CtZ6krZJhvuSSlznz4TQWgeo7C%2FxddutXLSq2jk9bnlHsV%2BdvgQ95fvFBgayHuuTE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c7a8923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"f5ecf841f5302c14351ebabeac75cc74","sha1":"1f352ae1a060cb3f4b8b07b31d4790ede9c97124","sha256":"731154eb7677c4a7e5965268af16d7684385340591fbf628b96f7d74e852943e","sha512":"7c400cb118aaf17aa99399f687910ba87b46e08c1e120647c74e1874ff8b2d4b94b529ad2058108aa5d4827c8ec221d54f5a8278a2961d67d6190b507bff230f","ssdeep":"","tlshash":"f3d095f296584d54f0c28b77cd151470b135a115061f53c5f44dc8121e71f5dd7d6d57","first_seen":"2025-07-04T08:06:49.916923Z","last_seen":"2026-05-31T11:19:26.480372Z","times_seen":23,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ph.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ph.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 358\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-166\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1982228\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uv6GckdbsWVJyY0gv34%2Bm9qkImud1DmPLnP%2FGHwtIKB7GdM4sUt57qYWyYonno0eX9YJPtnI4mtUi198ibku2IszuZTCRljPZXOm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e6af523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"d99d30f15160f7fa062a83257bb943f4","sha1":"7e477a7fccd6c8cc8852a1a906091dbe8b556a00","sha256":"fe9eb7f98f49ff4ef471832f59a586b62ddbee262bd3046a0dab5487a1daeda8","sha512":"03303d1486a0d0fad31a162eea5b9821e5ee1f19af6154a2b55313259b559149113758251027350f67f6e6b7c86b20339c6b3efdb19007a3b39f95b82f5ccab6","ssdeep":"","tlshash":"ede0c0c273ca5e310fd6c3e2ea1d303d4cda053e9a952d071725e131093e95d90b8782","first_seen":"2024-10-31T19:28:53.368615Z","last_seen":"2026-06-06T00:49:11.803673Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 175\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-af\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 702994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5EwFTEtM%2BddSYXtHUD%2BqM9AQMNMx37ydOSNdbHkVruSFUSqGhbJyYD%2Fhg2AMbPUXRuIkzAzc72EAoSVNXT6lJSFpH0FwoqgAzMbW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0efb0f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"e88ab3cca2b8b34a46ff786e5672e17e","sha1":"ffebc804c98ff2e8d7ba4ac105a87ace2ca8f0b9","sha256":"eb1a303be684cc19496a0aa7fe8596b35190a0bb5d5bf45d5b6f27efbb1323fb","sha512":"a3b154ef1a3a029b0ed9537871e64accd72d16011d03ee6f58e8bd238252319cf22ca94ba553bb8b28466863fab21e0bbbb4f406ebec1c946a71a1102571a22f","ssdeep":"","tlshash":"38c080e32438fc3367c752e35965dd24a83d12d445258645244fa62f1561705c556257","first_seen":"2025-07-04T08:06:50.031702Z","last_seen":"2026-05-31T11:19:26.38535Z","times_seen":13,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 417\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1a1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2250140\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FexRkqepgLKnANaXgyhBv9PIPFQtF9J6qVjMVgscEUJkVB74KvpRbhA2yz6j5RpmtBGqcQvOb8adw90XhrEc27npkhsHmarjUmSH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f1b1a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"053b8a335e6160fa92a704024c0bbab2","sha1":"490d1934b33924775f4a8e3345192e4376e4ed02","sha256":"29a6fb1b225a6773dd92e2a89b05f8742a6663c363386454845c982d8f93b50d","sha512":"651502aaa3920ebcdc582489b4d1053a51c960bf0a3169db0a702e82bc857222b1721e7ba6ce09c9a05ed0ea736315fbe199c3a9300cb6d35f0277ecae56ced7","ssdeep":"","tlshash":"3be0abc3d5857d37a9b9556788141660a8e286c806b9adb89c3cf291e5428a870ac3e7","first_seen":"2025-07-04T08:06:49.955524Z","last_seen":"2026-05-31T11:19:26.391388Z","times_seen":16,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/xp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/xp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBakci48dUwPCGWccOsrQPg%2FlpCNUc6RAHnIKv52GcbPhIVF0MPHdYd2%2BtpR%2FLm%2FKomLbve9uLQlpm%2BykZ56noRWBT32ZANI8gGM\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae100b4623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/zw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/zw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 352\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-160\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1503415\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mhKpUlc8RisdgcecYMPlSpL%2FNRcyRmC6uZ55ECOZUosDbFKSfYbZSPxkr2X4fp3HFKwG7NhEB%2F7Dlt2WeJs00Z3epbU2kDrT2C2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae101b4a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"134740cacd7961df3d2629c830b3da3e","sha1":"7dd3c267cc31b47558b5ddfbdbbe8c0f8ad99244","sha256":"533332a0dbbd24b2fa511922e4af7a71bd03038b31602cf4596e70e81204c5fc","sha512":"0c30885d71acf130c7b250177494ae3fe07350fba628ba8d7712aaf08ca293dbf7b1a9458a5ad956d16a74aa8f81efb846d3f4bf2ea3df38d93c203996d1630f","ssdeep":"","tlshash":"56e0c09026093f88d4834d738d37802dd81b55269750af47e74752e2214a89aa2c8143","first_seen":"2025-07-04T08:06:49.908654Z","last_seen":"2026-05-31T11:19:26.473134Z","times_seen":11,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 247\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-f7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 843892\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9l7HWRaGETCNFjDIQCC9mwrYwNjy3xYP4PmpUULH8iI5YhPGWcHftEIDRfpkoyb5l85puWFtqPgWHFPn6FCWN2kNK8w7B77eojw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b8a4a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"5c164829926dbf82e1ff0fc9d814b970","sha1":"0f705cc864adcf16134282a4f5b1da66c3d98e66","sha256":"8a622ff4e88df97bac6063b80d249a2f4e0abc9aab6746209a6e9d0157c08518","sha512":"13b3b6829df98062e93600cf936e45ba5b483e933cfdee6890b900173ce8ebd27cac2c861ca430588e6cbb8e281b18e4db383157e59bbeb94488325e443dfe72","ssdeep":"","tlshash":"2fd097fb22292d20e5e662aad2ae0005d84b01241b131e3000a26d287cc3219c6fe35f","first_seen":"2025-07-04T08:06:50.018399Z","last_seen":"2026-05-31T11:19:26.403546Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 627dd1fa79b58ed3a2bf6780b146ba15e0c939f4\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 26 Jan 2026 00:28:34 GMT\r\nserver: imgix\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\nage: 2094935\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220089-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13657\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13657,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c80931310a3ad2d6e477aa472c3e9c31","sha1":"fc704d741d63a35f7295c552b2ef37c5f99e04d7","sha256":"384cf75f8eb69c6b69cdc0f9064dd8e2bbec96f598a36aabff42b3df87220093","sha512":"df5ecc66d38fb4d0bc766d9a1f1f898cede9d44181713759926f61ae4b8feff14c830980264a707064ea645722567ee09be46dcf10cb65f403eb54623925f3b1","ssdeep":"384:xYNg7/KYVSVrn4qrtT/cc3Qxv8ipbwbsCboB:xYy2YVStnzzQlpKYCo","tlshash":"6652c07faf6a82bbd435d27008b12b42a2b3be7c67653b4a9654b72005401904e4fa6c","first_seen":"2025-11-21T03:58:55.140275Z","last_seen":"2026-04-28T02:15:15.227806Z","times_seen":462,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-e41116.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-e41116.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 20552\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"5048-/TFHwqxBJISxNgPDLgmZBe37oF0\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 18890\r\nx-served-by: cache-fra-eddf8230136-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20552, version 770.256","md5":"600091aa6fb1fbd488759d5f337b4a4f","sha1":"fd3147c2ac412484b13603c32e099905edfba05d","sha256":"be7b08b14811d0145cfe0252cee6a348230749f09460a922c9304d7c4e3dfa4d","sha512":"7f515f1a454a3cb0d88080b2cd5749c7b2a98be6f4d9811e9d4d051aafaceb718d1564f33443b6c844f7f238044889558da3566baa9cc9237e24768fe09e3c29","ssdeep":"384:A5ZaFi1L/219LZ5Nu+lOZZARZpQRGoM41P3Lw7+fmhp2J+E:A5p+1dZnuGY4QgFafM7+uLS","tlshash":"b092d08e395e0b11c814c3a7e511b979548b5b4b59a02a6d0cbed4efd87c1c39ae2683","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-06-08T21:15:03.045344Z","times_seen":1294,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-3523ab.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-3523ab.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26948\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6944-jz/5EME1ZTBALG5sMkF26WUGYyo\"\r\naccept-ranges: bytes\r\nage: 119\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nx-served-by: cache-fra-eddf8230031-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26948,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26948, version 770.256","md5":"62ae04e01f929844af244c14318f9245","sha1":"8f3ff910c1356530402c6e6c324176e96506632a","sha256":"99e1c2ffcd21cbef5c62ee7e5a88e86a23c95d6faa7cc9e3569b5dd2ed82bae5","sha512":"07496ec9a91deed32d0ae8f16dc13dea50f73164bbfb22d9b9e2aae56405908366d1f5ef5bfa27c5d0bac2b5d835e0e05c775c36181b36ba8b96defe9a48409a","ssdeep":"384:x7VW4MAQctcX1/ql2cMcnn9OAo9rnU0ANRqNkx0IF5PYstaMxwAndyLagsvl:x7VrML1Cl2c5nAAoUfRqo0CPMSFnYp4","tlshash":"b7c2f139f5a713209f8008a72278d34209d273cef41606e9e9fda9ef991e958c572c6c","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-06-08T21:15:03.025568Z","times_seen":1286,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-50c900.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-50c900.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1212\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"4bc-oXyspD/u4ucRbpXi5vvCYBLP4aw\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 28978\r\nx-served-by: cache-fra-eddf8230047-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 1212, version 770.256","md5":"2c400c85c6e3ff6efc6a00977e63525d","sha1":"a17caca43feee2e7116e95e2e6fbc26012cfe1ac","sha256":"973096ae0d008bcbdd0d0b13bfb8c52de8e1e343c1f5df0b98e84a374026f807","sha512":"26d1cce50b0947ada0732212f0a4e1330a8a3cba93042dde2e21e2690b77bcdb2a33ce059027b3c8dcc1ab77867b36aa3f48c44369206f3b80780ed8957cbf1e","ssdeep":"","tlshash":"0021aa2635f10042fb1752790fa97d72215c84313654ed4b9ec4dacd9e107424409265","first_seen":"2023-09-18T08:20:04Z","last_seen":"2026-06-08T21:15:03.034579Z","times_seen":1299,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/je.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/je.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 430\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1ae\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2312021\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0G43rTJJZBMy%2FXwP9ayiRo%2BhrnqEskoAFADNtzU3WsytfP3Kr2mjNtr7Xe8GscTZyl%2B4PMx0tUU88edJNc1X2sMCswxv7jTAJ2X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d8ab923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"97e9519af22be717300d15be9ceddde9","sha1":"6f00603ddffec4f985a4b1ab4646fceca0f1c3b7","sha256":"de6ba6eebbed2c3cf5751ac89045097441e3ae93ddbde763fec0e55aa2cb163c","sha512":"9d82d16cc08f7fc7b3dc235f8a1bf1c7e9b17c9d73824b201a3b04c8e3d856c2a369372a9172a53d6b7caae9a8518ed785c75cf6012a797e0085c7c590edc6db","ssdeep":"","tlshash":"19e0abe9de8d2dbb72da2417020e8422c91232a8c603aa861c630aad15b4e9dd1a7089","first_seen":"2025-11-04T09:03:44.181657Z","last_seen":"2026-05-31T11:19:26.412102Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 126\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-7e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2162667\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iC7pqaOBMEjkjBuSFjTyMVVUZVebqMwf4Wo%2BsiHYZ%2BMf8QEzHYN8qSsq1FGhdVI9P%2BhDQAwtTE%2BviNQLL2kHSgEDESKs9Dc7b8hN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e0ae123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"e7ca5d728c1f59ecd762e0dbbaa9d43b","sha1":"0dd9d74bcb3df0fd05267872abb81d2baa443b9e","sha256":"6095f4fc432be368f9ac993798fc3c2a872dbe1bb3aa2c16a6cd97544d254e65","sha512":"0f1a02d55cb3dd3ef6f49d640974abadb98a5d87c6d11c89b94abd3bedb9943dabe823b80276d9a7d2b4c94cd4198543113e8dc9323b48564f5513ed1f5ba754","ssdeep":"","tlshash":"30b09bd6615c7d358b5951211655d0529c76255f41118e0666295512373221ec5dcb43","first_seen":"2025-07-04T08:06:49.981385Z","last_seen":"2026-05-31T11:19:26.393337Z","times_seen":13,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ht.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ht.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 435\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1b3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1802655\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibjQwEW2sLG8tMPcuHYNITPF16k0iRV3fTdwLGQAXookK0DP2FAkRkbWomubeIKfXkv%2FwCzwoiJ7BaflO9ZruRfBNxHWhVY3b891\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d4aa723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"5e7564b522c80f98e0c7ea4671786582","sha1":"42169ac040e185bd51d755ff9aef0686573833f6","sha256":"944f8b6d715713d98f81601b75b244ae32255a0c9b1da9cfce7df834198187f4","sha512":"02899f37a1f7864e6e4f6eb581a6a67ca6fcf52bbf8027053024a90d049f3322e618c1acdb870c898c1a0630eb3647a5506c49d216175d9685b84d953193629a","ssdeep":"","tlshash":"c9e02baa0238b4ed848c2b3a8b0dea308516383ec236900d9449d608f8fb029f1ac156","first_seen":"2025-07-04T08:06:49.967581Z","last_seen":"2026-05-31T11:19:26.367698Z","times_seen":18,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/lk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/lk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 464\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1d0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2511545\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=224rp6Hi7uQKNnVexsOohy2O5ZcT8xswzxmcUdg9n9pEDwnkhZhVWrrjAgHNbEimTQNi5h5Og%2FksrSqiKbmE4ixzYHUw7q39a7jU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ddad123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"2f9a2ac3f394f3bc3923a15807e9d1e9","sha1":"5879595ce54cfa647dfc07a1ff4885cdf5c89c79","sha256":"d7af5328a6ca68a09b83f6ce458827bb7a1e6db66e7ee826411c4fae0c48742b","sha512":"fe1dbd31f72a8e9a15c9caf4f33c0f0f34196a46b3d7618c415c81e0ce5950d6d552b75e0f90d8dad9e88184c94e35ba715b089959a9abbbe1631f6cb529ccc3","ssdeep":"","tlshash":"6ef0d4c7b64428b9cc5e1ce15a764088d50770513207ac65588793650dac930845528b","first_seen":"2024-10-31T19:28:53.419566Z","last_seen":"2026-05-31T11:19:26.338613Z","times_seen":23,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/rs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/rs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 582\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-246\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2311639\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nF6KiSFIdogtyoL8DBXY9FM01y9CAWQx3zKY9BEP6LFX6oOcB2SfzbAOFn1pO%2FgZ6a4BLqOwjUOSUeQowCaWFTazi9hTDKl1cimX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e8afd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"9450a5a962da075af07c6e6cf3ee6a43","sha1":"df39034157c5bfba2b1258305705505e7a6db38b","sha256":"5c5bde9228cbac18dd82d71cb844f9cce701fa5e12cb66023bc2bd0d91b2d49e","sha512":"833dee43c9df721c637c82e0652d9cb1032d8c909922e9628d183d4d642186fa5b4b5647654cc7576c8f1c407fe8263c6289478abe612ae840e66a75bd395ac0","ssdeep":"","tlshash":"bef096af67645968eeda4a23872000f4fc2c9505f5873e799f9de13f0549388d17a544","first_seen":"2025-07-04T08:06:49.957854Z","last_seen":"2026-05-31T11:19:26.362395Z","times_seen":51,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/alpinejs@3.x.x/dist/cdn.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.15.8\r\nx-jsd-version-type: version\r\netag: W/\"b628-lXLICykYx5buo8FuupBe+DWutBs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\nage: 10209\r\nx-served-by: cache-fra-eddf8230160-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 17260\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46632,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41221)","md5":"7f53c06f93ae095221ff718c3a158a93","sha1":"9572c80b2918c796eea3c16eba905ef835aeb41b","sha256":"899842782a7fd16fcc2d7a7c877ff9ec159394044c87b158b2ef132786606932","sha512":"d9ac61274b8de67808c2bc86fbdfa5b45d9c9858285a5bbf6a1ad21db09d4159e66bfe2c2fa2a8759591c17b224667b559e82fc71e6343b2df8d26a0375abe9e","ssdeep":"768:gDWpHFKOT9onx0mD+zcyLAE+7jNb+mQmPl7cQqDTvmtfbYxeE3X5K:iWG1h+cMAE25+mQ+LqOf8p5K","tlshash":"dc23f8e97396b53283ef01b180bb460af33d2990550e5468f769d8da383948d41f3fba","first_seen":"2026-02-03T15:27:32.411372Z","last_seen":"2026-06-06T09:06:40.070484Z","times_seen":970,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":83,"dns":33,"connect":13,"send":0,"wait":21,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/storage/app/public/photos/HYIXrHRJfvWz2HCUxF8jIRxvmqMtdkmDWiewaN77.png","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.northwelltrust.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 11:00:19 GMT","end":"Fri, 08 May 2026 11:00:18 GMT"},"fingerprint":{"sha1":"BC:12:ED:CF:65:07:EE:AC:3D:BC:37:ED:C1:F7:DD:5F:06:48:6C:38","sha256":"B3:5A:87:72:23:E6:12:EA:FF:CD:2A:31:E4:F5:4C:BD:E6:7F:83:18:D2:35:40:64:FA:B3:F6:19:F5:CB:3F:57"}}},"request":{"raw":"GET /storage/app/public/photos/HYIXrHRJfvWz2HCUxF8jIRxvmqMtdkmDWiewaN77.png HTTP/1.1\r\nHost: northwelltrust.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlFHWDlWK3NBL29YQTdFa0t1V01ST2c9PSIsInZhbHVlIjoiU0NyblRNZUVYcmdaVzZzdVpvRHJ1OW14Nm5ydHRtOGorcnk2SEdEdjN4OVBidTZFK08ydStsQzJlMjdKaXgwM01lY1NlUi92ZHJNY0FCWms5RENIWExTTDJ5emwvMEMyd210S3U0ejEwNHlWVDFqcVBLTHBsNk1rZlg3RWFVeU0iLCJtYWMiOiIwNmE1YzZjM2Q3MGFhOGIzM2I4MWM2NzEzZGEyZDQxNDE0OWI2YTU3MTRkNWJiNmUyZTczZjMwNTdlMGFiNTA3IiwidGFnIjoiIn0%3D; northwelltrust_session=eyJpdiI6Ijlya3l0Ty9jcUtxdVJYZmZBT0RiL0E9PSIsInZhbHVlIjoiN29GMHo3ellTaFRSSXBzcElrZ01IMkVIUWUwdjlqZmduY0FMOEc3K1VyS0lDdCtVYnNuaUZkTkJKMVZMQThGSk0wSDFXWFRBNVpJUTFwajhGS1JzRlg4ZXE1TzNraUdqRXpmQnBjMndMVzdKRnZTeW1ySVNxUFkvdlRGQ3A4QU8iLCJtYWMiOiI3NjMxZDQ3ZWM4NDA3M2FiMzU0NDkzOGE0ZDcxYjg3NTExMzQ1YWU2ZWIzZjIyYzBlMGZiMWVkMzAwNmE4MjIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Feb 2026 06:24:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 07 Feb 2026 12:09:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 197115\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":197115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 447 x 452, 8-bit/color RGBA, non-interlaced","md5":"8b37770e26311f40c713b0926f608fb3","sha1":"c223e0e676ee113b3c31448828af97132e7db53f","sha256":"5fd0bb9c08f313e2df462d2969ffc7f2895e4f6a56e711fbe2fe3100490aed33","sha512":"8723334affa8c43493e4047f1ee69377447700f2a2d3a2dd0dccd7b2651c1cc2f1ba063fc68311947d2089f0d7da83801d0865fe3b5abbaea19e799f6777067e","ssdeep":"3072:SwRQHAIk50l+yDl7i+vi11DSP/OxKgC6yK0K2JZvGlecIg1Xl7yP3S94ZCTP9:SwR7ICJ+Q+6OcQy21AyfEL9","tlshash":"431412cba597f9dca026f3fdfb1b2f9f50927085609e24a26d510df062ec860f15436a","first_seen":"2026-02-19T06:24:41.32441Z","last_seen":"2026-02-19T06:24:41.32441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/nz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/nz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 367\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-16f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1199582\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UW8G%2FIEwrYo2hIsh54LRvKkXGbuAka0Rl7TgM0AAkEmgQUUKn9AI69A0GtCkzhOXpoxjEZ308JtQvRow8UD86plzi0kpqtk2DKED\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e5aef23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"e691dbc6ee3504dcd470b694fb0e5c15","sha1":"d5440851059638eec2509e89c9fe62b8122fe13d","sha256":"e6dcb54906c0cea5e1118ad3c615ddcdcb59948253a7dbe181ea730565c342ec","sha512":"76d6acc07b6e07ac1d51e27c86009a8b425a14efdfa27e2fa414ca10fd0015b933fa0f96e3d0f3f08c2ad746755d5cb79ba15c169334cf846aba36772ec802eb","ssdeep":"","tlshash":"10e068a5faea5c348a44b3a34609e2311c65820d1220aa82071c25631722c7de7a11d7","first_seen":"2024-10-31T19:28:53.33984Z","last_seen":"2026-05-31T11:19:26.447969Z","times_seen":41,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pe.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/pe.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 100\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-64\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1894591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwpJDLfbYO2vEJwmsZglqKF2OF5lf78qp%2BhdDgguH9QhQdBgs7UzlmODZFd1t5Ol%2F5Hky8X4pWVkwsXa77nBYC4uuyzwJXBlHsy0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e5af223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"b0ae8670c61f195fc446225305b32db9","sha1":"e8984500aed7552520030c5c66eea93790d8652b","sha256":"6626462b44a209a7d1760a7d1db6010edbc8ec15be0ab6dab3bfe385164438f7","sha512":"9725c64fdd4c36be1551ea0e2576b99ae17e7deb77acc90ffb18578fd4eefc0c5052b9e178a976420c4a2776c6590958c6bf913358a255af3bf7ad7a718aad68","ssdeep":"","tlshash":"65b012c3339b5ca0df880623611c0401dc22a2f2412c9403720984662a25604d098782","first_seen":"2025-07-04T08:06:49.919952Z","last_seen":"2026-06-03T06:10:40.735155Z","times_seen":41,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ae.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ae.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 123\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-7b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1980387\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0z25yBs3iYIUhYB%2BaHwCZhU5a1moUItq0Nxa%2Br6G%2B48Wg36e3jKorj9Oa3Wvc1OywFsbn%2F2KRclUwacz0wxzXfiYN8vU%2BD%2Bf2No\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b2a2e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"092a8acaa8b986ade4a7f740af78fb8e","sha1":"6e6ec62c465e45fc258d968417f9bd1152606c34","sha256":"77a9d61e1b4fd75884779089406ff11c9d1566c4b6fd575b370f4a207d153f67","sha512":"fd14159b346339d42fcb88378a508091bed9882d8fc2a7e94b2f32d337fe608ea2c2bda1ca57791beb9afd3b37ca7aec2fdaa595d5d646af091ba7589e48922a","ssdeep":"","tlshash":"7bb092d3f5ed9cb8d158027a432c0804da21192d9281060f26abfd196d8228ea0e83ab","first_seen":"2025-07-02T09:52:48.482533Z","last_seen":"2026-06-06T11:20:22.294435Z","times_seen":110,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 616\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-268\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2127394\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttEF1Ty8GTvhJnzdA0bp5KM7RDTRr%2F8wLbZ52eVm1CfZX8AFpFZxkOVKxCdxfyQJRG%2Fz6ye%2Fe0j6xZ3N2R4V5UcrhABne0e9LAT5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0baa5623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"ede1179f02e6800e87318e3620eb4e72","sha1":"8e65567492b3dd7ee0f01c68838dcb847563866d","sha256":"415a8442ddda374b2669699d8e2fe9b2e9f9f3fe6c020120d9d6c6dedf7f7ab4","sha512":"10a812b0d87e53490900cda337efe7b35bf73a0d63b04439519eb855fc7b88c3521b57b2801ed4d112b0b1f947e3f78c8976b1c04b3c6d692806c6b1b114a410","ssdeep":"","tlshash":"b5f002f9f30da879d2a446b1c02959338d2b6670b1900772879314b0340a67455276b3","first_seen":"2025-11-04T09:03:44.170226Z","last_seen":"2026-05-31T11:19:26.468976Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/im.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/im.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 327\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-147\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429142\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NF1d%2Fg3dlz0765bI6C%2Fu5DmN46y%2F8DoDYeicdyGfNTlMKQbTEvEyUTKYfLMpA0yjLPyBDDh8%2BE3Bt7kZK58BUUZ9NwSnvo4642nD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d6aac23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"a618a14382bea98ef7378d1678a2846c","sha1":"74c24c9b66b9579975ee9ad5575f4e44232cdd08","sha256":"c250150b566870e074ea6ea6a852e21e9a7d2bc146549809fa468c9c2c158124","sha512":"96d58d0a706f60e76df743a8c725b1f9f56ee7f152078a6c9f57a7b5c766f2d225df43884d8c9494d68588e04dda0df85601344f8e63360b3b082ee1575f7fea","ssdeep":"","tlshash":"2ae07de6951d2e5ae0a523bbe5190dc4e96a126e0782c9dfb0d340f12f0ac05e0903f6","first_seen":"2026-02-19T06:24:41.332522Z","last_seen":"2026-05-31T11:19:26.335712Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/in.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/in.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 193\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 794351\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDGw8d%2F%2BrDlhCv06J9zRa8eOz2iHAIWZQ8026OvE8ZWDuhDieELwGSmSsxacOZ67X8c2lkXkzSUY0MfjSqnByVgB81MumtdE5Hwl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d6aae23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"65e6a568f7ceb02fd4d54c24fbd75c95","sha1":"bcd84d4ca18b5f665f759377b82f7cd1da3bbb62","sha256":"7402a78868940a6f52ae0e9793667a42fcd71945df8d763aca0fc186d1ab1241","sha512":"12dce6567a20754d926361bb65f5bbdf29cd63f69ff0f5fd1764d7cb2d8c39aa5f450b9169d4ba5fa019e9bd826ee89d746a64db732d620bd3b5c2aa51a87f9a","ssdeep":"","tlshash":"2ac023d755947cb4c7cf54134274555475554264001541cb5d4b657401f0109e8d5042","first_seen":"2025-07-02T09:52:48.450113Z","last_seen":"2026-06-08T22:32:13.450537Z","times_seen":137,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/pg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 454\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1c6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2311644\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttNssGcXnWWgupRR2SGPmP61I%2BQeH2h9w%2BEBuHYLfOdQ0VqCtzdK4nUwwD2BgDh%2B%2F4PyPmW42%2BM5iYHvmMVshI84cMCCH6raMh8U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e6af323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit colormap, non-interlaced","md5":"0af37dd954d125eea21f937b2cc2d531","sha1":"b745597a53a756e54061abefdc8eaa83c9c1755e","sha256":"4049dcc89ba4a841275864761f2bb3e26edcf884de3de4926db8bd7199222b38","sha512":"e8be996c723b3cefca3b8d8290ef3f6be876328038de214533f784207d9e96bf363c9862d804505cebc5d216b1cd0de0fa43c590db87619377a197ba09fb7721","ssdeep":"","tlshash":"28f0dcebf4b51e77fa56117107618cbd89363363f4d6728a25a560612f1022b9d8a241","first_seen":"2025-07-04T08:06:49.998312Z","last_seen":"2026-05-31T11:19:26.475592Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/py.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/py.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 182\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2345188\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLsFsHUykjp0w4RWnCdf89OoNy4DRp%2FlQkVj2cnwJRb74I5z%2Fg%2BaloBtaou0V4D0em3ynuM1SR5uAYLmkVbc6rk%2BwWnf3AdwvhTc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e7af923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 22, 4-bit colormap, non-interlaced","md5":"90bf534784a9ebfb5b4ae3590efacc6a","sha1":"0c762195d920278cdaaab9e8ebe434a3c3ded777","sha256":"3a02b307563e4f492f4ac348da1609c46cc5aab21f699b4866cbbc0ae516a883","sha512":"d4002eac067794504960d54ffb0e3c54ca9dde167913265dbf4f5af0395a156e1f5bf8e2053de2a51598c1c032ecb5175b71b61e268ba87dd4df6da5817b120f","ssdeep":"","tlshash":"64c0c0f7cc743cb58074096b7220823048cc019c01d0554a400d5c01a58123ec402247","first_seen":"2025-07-04T08:06:49.912978Z","last_seen":"2026-05-31T11:19:26.342837Z","times_seen":28,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ro.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ro.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 108\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-6c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2504647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4GRsHM0TaRE1NXefKGNoqCif9XlzINA7c%2B5nd0HMaPqFeX8GAr2fs7gHyXeWgx%2BIiykSPi%2FslpBboGfMSJG%2BaEjyzbkpUKKddLsX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e8afc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"9ea153c38b2e8868b3827235ddfb3afb","sha1":"1e19aa4d008a81e32d702f14d7cc3e617ebc6beb","sha256":"9355b17bd96d7d1f2b47b49249c1d992025c56b6074fac63893c03ecb600de23","sha512":"6ae8362185dab2d6da86effe09bd2caf40313c90ed8d517404f0114599a9b9d7aac1003d0d210efc10ebf1c2436f63f9a62856f03b7b9ed64688fc48a5374c2a","ssdeep":"","tlshash":"c9b092c2a9187c24838a0166d23811d39c39253a122142a7988881582a1512dd888246","first_seen":"2025-02-12T08:32:15.783563Z","last_seen":"2026-06-03T16:44:25.945198Z","times_seen":94,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-d5bbe9.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-d5bbe9.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 24172\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"5e6c-IcQovbDCGxWdqqWv6de9WCcS4Ds\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 10081\r\nx-served-by: cache-fra-etou8220065-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24172,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24172, version 770.256","md5":"435a4fd590eb82d976b39224488e057a","sha1":"21c428bdb0c21b159daaa5afe9d7bd582712e03b","sha256":"8caf1dba6cbd53db7046e5560555f239e7bb255481e80f2f856d30d760f98dad","sha512":"7b826041fe2a088f8b42bf0483f5b6216296dafa10be7debb616904c9b1560fe1714c3343e40cf1a6dea508a3405d2d84e0c0326e2cb8138ea6bf82ffddcfe07","ssdeep":"384:ugYQ5tv1PGJcRfKeXVxqXZkszz85oTGXrwOUFjEUdC8/Q1g29m88CqDIrpr5cpyC:HYQ5V1OkieXVGZbzt6XMOUxEUQL5m8rY","tlshash":"b3b2e179d2c7b32688690160bd526412bad5b28f04850f5ed4786c93ffd63c2a3225ef","first_seen":"2023-05-17T05:19:34Z","last_seen":"2026-06-08T21:15:03.034042Z","times_seen":1347,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-03c840.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-03c840.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26340\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"66e4-UYvk5KSqM6LjhCtzQQkG90/QpGY\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 31644\r\nx-served-by: cache-fra-etou8220126-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26340,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26340, version 770.256","md5":"5a5602fe5bdfff54ce95f1681d935255","sha1":"518be4e4a4aa33a2e3842b73410906f74fd0a466","sha256":"e567f8a857cb3871c7f2a1c00ae73d85bedea2a79cdac80fba9562b88b0c577a","sha512":"ee79ca8cd5f8d2a0bc5cc7c20c1eba0023e2921c141017173c326648eb5948becdb99cdf2f8b18215a1f44048b4c51954088d6babfc10a66d9fb8757eb792ac9","ssdeep":"384:27e+fooKtSIQV8nJZ5ubh8Vw16Yczh7eVAC48mja75Vvc1e64/7iqkUzxpgxK:21XAWSnAS216YRVLNsatJc3mrVN","tlshash":"28c2f1c6b7c20e45454d479f73a8113efef9fd93a663538a880654c19a9ccaac712f0d","first_seen":"2023-07-23T08:27:43Z","last_seen":"2026-06-08T21:15:03.047684Z","times_seen":1275,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ge.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ge.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 281\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-119\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2598813\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tArRzr7Tt4a7W54pwzBGRWrIHCn2HjUUwWcDceXjKd2dy3ic8zX%2Fh7GhiuEPP5UbHCcj6eXlAo%2BAQBnB0wp%2FvVvJq42uAmlgRoir\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0cda9b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"5a122ae3b1ae6ec0ae8299a442243342","sha1":"c938fae1c13d4df8049796a21f2b0016f0605f8b","sha256":"d14f2b79175a996d4eb14ea81e7fd4ad03283defd5cce060a7940b8460c9c55b","sha512":"347743788326da636e85bbf3151ff26168125fe43b8af3613d64eaf7fbb71e27f83dc8a56650aba4279dd50927f224b89465c42e736502e8fa5a31a52814dde1","ssdeep":"","tlshash":"fad02ba762296d86f25d56a293c20104b451215406cc15031826ddbb65a920afe4e35b","first_seen":"2025-07-04T08:06:49.92904Z","last_seen":"2026-06-04T08:30:41.750426Z","times_seen":41,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ki.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ki.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 572\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-23c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1758427\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiKO4fCr7wL%2FHslTsiPAYzBShTR%2BbrDbt2Zu9IMoCoCKbqsSCQM02gJgh2lYW7X%2FQV76Flyw1hXVYFQ5aD68t5gpf4xMNRcmEGRS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0daac323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"d9cc4c540d7f6585821a26c1d38e6c2e","sha1":"e816e1748234eebdfb31448c0956b53c01687dd7","sha256":"341bcab512af56ebbe7460b5d62c1accc7c2f377dd913569b42fcb9f4fe2896f","sha512":"18a7e2ce8c7db0eefc19cfcd93b2e40c0d1be4ed2cf4394e647a72adda8b88274def5be6d471337097f8eddac46ccf487b95b8d053fb4bcf2e98144b2406d98a","ssdeep":"","tlshash":"fff0e1bb13719f3aba5c062454301a09921694a92181eda65249c8493752a1e85bc2be","first_seen":"2025-07-04T08:06:49.865672Z","last_seen":"2026-05-31T11:19:26.33911Z","times_seen":9,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/to.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/to.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 148\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2311890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fr26dXYiiykFOGdcKA0B8D%2F3IdNjvDOMtAtnjzansMvbmyQWZ7keBJIyu3L0SsaD9hgwr33R5bYwGnh4PI8L3y1ufd94E4KbQG63\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f0b1823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"270f5451e23dd0be1c42df6441385b11","sha1":"ddf1417adc48510b2b2e93e9c80c37479b43afff","sha256":"1412fe28f5863d4766cf677255dfca624cf8dfb58e886190a068289e86d85759","sha512":"86eb26d0d3d20b406e7e53b5f2ce9cefb30d736c60220e2817049bebaf6f6502ec9b6fb624d2aa2fc5528cf02ad41be36ddd160a728bb150a8b0304f5e38ff24","ssdeep":"","tlshash":"93c08cb266a50ca48a48033a93080180df015ada8908a217c085d4668a2029e849622a","first_seen":"2025-07-04T08:06:49.9909Z","last_seen":"2026-05-31T11:19:26.452694Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/an.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/an.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvOPq%2BpVaTDHYVfJfhGX%2FOzdBPEGkPJeKpoVSRGeQDUhmVwPwWasMpnqvzd%2FeYw8tw6BFYEn2WTBRi3nhQoUgml4qmRCLo%2Bf6dOR\"}]}\r\ncf-ray: 9d03ae0b4a4023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/dk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/dk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 126\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-7e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1768430\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYKeVMe4KJFxttwJ00WrdISdsbKiAZMWEZx5EbK%2FXfH2Rg%2Bkr%2BlNjarGNj0TVjy6uVJ8GWEQZ74rNWitVrQ1z%2Bgr5ty03tYiceXm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c6a8823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 4-bit colormap, non-interlaced","md5":"c09f1b8df021d56af996f5198c35b569","sha1":"0c7bbd3f3078539cf263badf0226df20bd06cee8","sha256":"ca559221f91cd71210fa5deaccf8af0e754d03b2e7cd13277f771ae11c402534","sha512":"b6de5068bf2198e28f864838403f7b137d436e46a180f3432fb24be0c695dff7e0334e88f21bc2ae568e04f640197a2e03feca93cbe9217dd788143973e3c036","ssdeep":"","tlshash":"0db02bd77260cc10d6464193818d0001ac40890c0062308b4209991cd44c091d04c047","first_seen":"2025-02-12T08:32:15.792337Z","last_seen":"2026-06-03T16:44:25.913584Z","times_seen":142,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/jp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/jp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 239\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2605725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02nBrcANt2OKTvCQ7OUIEAfw7XxRw2XS8TrFF3%2B4Rm7ya3V%2B8FZnCFQMz1N08JkQS5AR8svNVrcIzOJ7fyjLMsbRH%2FZl91O45%2BXE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d9abc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"83e65aec2cc399a5d434f2662bfa842e","sha1":"005c45af9a8ce06d3dfba29f2ae01d818cd25edb","sha256":"ec7131f162be04e0c5ef2680ef5bd4b433e482f20913bab1fe9ae9f748ec3693","sha512":"188e7fff29afed8562028cba7033d1d46c27629c452c528ad2f7fcc58f1ecc8a4118b8ef26e5fc7fbba2e891ab04f8eea0d026fc6b44b3557a154ee0facb6532","ssdeep":"","tlshash":"5ad097af61280830c9688272d039020ccef89023d3a60071056c83f218c230598cc9af","first_seen":"2025-02-12T08:32:15.782071Z","last_seen":"2026-06-08T22:32:13.448643Z","times_seen":139,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ke.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ke.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 357\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-165\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2598725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRIWiybbWQOdZQqgMxEkUBHEYTfy8wGTJ0optzWeIPVVYiqIEQwfCIFrC4uU%2BCWIxWACKoiPuLNZV2ZFh7mU7yXAfMsYmVequHH4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d9abe23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"fae52b66b489ec9f49ea48d3feb2e94d","sha1":"43f70c81fec87d66d7a54d68fe3542afbd06da24","sha256":"8c31e221b1862397b547b7d8738696f4579a35b2f246f595bc513b1695bc6304","sha512":"092fb50161685db6e733469012a81739b4e27c301357a247321899e36958e5079c38abffe488737fc2ec17ed8712eeeca9b9018442e77a4791032d2081ac2985","ssdeep":"","tlshash":"d5e0c08b36922db5f688007d230de2224099124c86716bb9491f1ab534b50dd8aed6e3","first_seen":"2025-07-04T08:06:50.045116Z","last_seen":"2026-06-02T05:38:09.376927Z","times_seen":55,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 234\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-ea\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2519743\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5p04PpJLbHcnvVG5abO3G5KHLR3WrQ77SiXgUFh%2BsiQPv2sr6jWPLl%2BnmbL4ilDXcv5bIiuGFF%2FApnlNq2YCeE4v5p4fgKXAUY5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f8b2723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"3437714821bd246bec6e6b7f7cc323f3","sha1":"e23ffe316252ee23f4580822f171bcb3459dae5f","sha256":"71c8c267a0c40f39d84de53b46c7f7c9a893a3f14beb2a5968d8f781e213b234","sha512":"d5ebdc5f39e9e5552fbf51d587d96c917fc06819e8588f040a80ad6c43131790a6f1c21111f6386a6c23d0e016d6b5346fd6b1a3070975931ffbe0749b0f7bf4","ssdeep":"","tlshash":"3bd0a7fd29185cb59aa51529b25203d0da3649a68241c92d558606661759108d568383","first_seen":"2025-08-17T01:17:19.046657Z","last_seen":"2026-06-06T04:40:57.988778Z","times_seen":47,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nContent-Type: text/plain\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:13 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6994310c-7b0\"\r\nexpires: Tue, 17 Feb 2026 09:23:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJGwH3DwAAAAwBuUwKCQH3AAAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb541235a683c228dac9669c0a82e0e\r\nx-77-cache: HIT\r\nx-77-age: 15\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c6e0b46fbd6392043ad39aa04995247","sha1":"fec208492d5002c717fff6a5c74c21473a28cd4b","sha256":"98342799bc6c190d85d496ae153b3a961680fd53de37062869eb29d7292957f9","sha512":"71a953f7ba65b87feaf12f56869228a96510f9428d04b9020af280771ee0d10953d3506082a1d6e379f0ce1c6b8d737a65309fdcee99c13afc65490e8feaa562","ssdeep":"","tlshash":"bf414993c0f80d531b9d612bb8948a014d54c3c7e89a3d0d366e8a7f6f0ceba10d276d","first_seen":"2026-02-17T09:27:34.925Z","last_seen":"2026-03-02T07:55:13.450948Z","times_seen":786,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":39,"dns":35,"connect":7,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/fj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/fj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 577\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-241\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1199578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8shoZOR%2BV%2FJKq%2FFHCSbVuvbnFoNRJsEcLEmTIznCWrN5cBL%2BdSSRCh4L1BEEhHMgeZutfL7VnnCTt38mz2DtW0PvZEVflJl7GbML\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0caa9323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"f24afe177bed2fa4b3d6d9afcb1a32f4","sha1":"da8742f3a1f2a90069ea3569b0a37bcb89d425e9","sha256":"54b227909afe8d7108ad83b9394d44f6a814ad4362e2d541555251d33a9a34d8","sha512":"0c9165b65ba528340ff59a31aab8b6b8730ebc32421f108bc874059859c464d6dbf7bbce5eb1bf3973acb1b4dfa6a51c92491bc46bb81e128fbed6d2a7ab40d6","ssdeep":"","tlshash":"faf04122c5e65c298c58c82f4a680601f837009498a7ad10a03fc80a5213b3a0cae3e7","first_seen":"2025-07-04T08:06:49.996905Z","last_seen":"2026-05-31T11:19:26.362982Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/storage/app/public/photos/tyH6apczwcgybAnXkbNSVoNvKoGK0ShhJA1q7dEO.png","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.northwelltrust.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 11:00:19 GMT","end":"Fri, 08 May 2026 11:00:18 GMT"},"fingerprint":{"sha1":"BC:12:ED:CF:65:07:EE:AC:3D:BC:37:ED:C1:F7:DD:5F:06:48:6C:38","sha256":"B3:5A:87:72:23:E6:12:EA:FF:CD:2A:31:E4:F5:4C:BD:E6:7F:83:18:D2:35:40:64:FA:B3:F6:19:F5:CB:3F:57"}}},"request":{"raw":"GET /storage/app/public/photos/tyH6apczwcgybAnXkbNSVoNvKoGK0ShhJA1q7dEO.png HTTP/1.1\r\nHost: northwelltrust.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlFHWDlWK3NBL29YQTdFa0t1V01ST2c9PSIsInZhbHVlIjoiU0NyblRNZUVYcmdaVzZzdVpvRHJ1OW14Nm5ydHRtOGorcnk2SEdEdjN4OVBidTZFK08ydStsQzJlMjdKaXgwM01lY1NlUi92ZHJNY0FCWms5RENIWExTTDJ5emwvMEMyd210S3U0ejEwNHlWVDFqcVBLTHBsNk1rZlg3RWFVeU0iLCJtYWMiOiIwNmE1YzZjM2Q3MGFhOGIzM2I4MWM2NzEzZGEyZDQxNDE0OWI2YTU3MTRkNWJiNmUyZTczZjMwNTdlMGFiNTA3IiwidGFnIjoiIn0%3D; northwelltrust_session=eyJpdiI6Ijlya3l0Ty9jcUtxdVJYZmZBT0RiL0E9PSIsInZhbHVlIjoiN29GMHo3ellTaFRSSXBzcElrZ01IMkVIUWUwdjlqZmduY0FMOEc3K1VyS0lDdCtVYnNuaUZkTkJKMVZMQThGSk0wSDFXWFRBNVpJUTFwajhGS1JzRlg4ZXE1TzNraUdqRXpmQnBjMndMVzdKRnZTeW1ySVNxUFkvdlRGQ3A4QU8iLCJtYWMiOiI3NjMxZDQ3ZWM4NDA3M2FiMzU0NDkzOGE0ZDcxYjg3NTExMzQ1YWU2ZWIzZjIyYzBlMGZiMWVkMzAwNmE4MjIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Feb 2026 06:24:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 07 Feb 2026 12:08:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 284955\r\ndate: Thu, 19 Feb 2026 06:24:09 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":284955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 644, 8-bit/color RGBA, non-interlaced","md5":"4a51ea942cb12e0175de42b720d5067a","sha1":"dc171c31b56ec64e4125f967f2436aa3ed6aebea","sha256":"00c900a4926c64db023d15d7cdd6159d9363fca1c1af1f5b9a71c8b63d1e741e","sha512":"fae73146c93e0910cee9c9e94a5ade5b92f4f80ca25edb10a20b2ae50ae223bab2e050cc39c006e48c0b2a58cdccc1529db63f0ee03cbec459fa6891fb8c902f","ssdeep":"6144:+6nBdC5rtWj1W6VfwKS903Sng/HYjln7PwYA2JgdDy3yn2E+FDUL0:+qBdQUaKSMSnJ57Pw/ggdDrN+iL0","tlshash":"745423fdb4f571c456ec87b91bb57af86b11e772c4b48d633484b91c3222e42a8ee201","first_seen":"2026-02-19T06:24:41.368948Z","last_seen":"2026-02-19T06:24:41.368948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"open.er-api.com/v6/latest/USD","fqdn":"open.er-api.com","domain":"er-api.com","tld":"com"},"ip":{"addr":"104.26.4.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"er-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 00:21:57 GMT","end":"Mon, 27 Apr 2026 01:21:36 GMT"},"fingerprint":{"sha1":"0F:2C:D1:9F:7D:61:CD:78:61:7B:9E:DB:60:82:2C:E1:3D:9C:41:4E","sha256":"7F:08:D3:7E:8F:01:C9:4C:6B:BA:9F:27:5B:EA:5A:A8:73:70:1B:A3:9C:59:C1:98:3B:4E:8D:36:D4:FB:64:AF"}}},"request":{"raw":"GET /v6/latest/USD HTTP/1.1\r\nHost: open.er-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nx-content-type-options: NOSNIFF\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Thu, 19 Feb 2026 06:10:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLBacwznBg6%2BH9Qd7kkwpMKydz%2FOIr8oc%2BYW9RuFS1HcX3t6efngUb5oxZn2LBEJtlNyi2izWUcUXDmdP%2BlN4%2FRiG7PaLpylJDDbmaku\"}]}\r\ncf-ray: 9d03ae096e34b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2966,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e2e84aeef21586c813043de3682f75d","sha1":"5bc5f841f647376cd7382d15df790a9c22a4a6b6","sha256":"2d71f4940cfc07a892d4e0fb1714509e24945ac1f72e382c52b9b9864e9333bc","sha512":"e702528790b8c787e77060ca42b511ca65d89e7107b9b9a819ecee180e9b4b433910dcdc805dcf92b876128fab8fa36994506cf5c81614bd76f5f8343ad965de","ssdeep":"","tlshash":"4551b580cb2211d813aae0996db15ee63e2a314aed83eed3f4085981f4548f3724b54d","first_seen":"2026-02-19T06:24:41.370583Z","last_seen":"2026-02-19T06:24:41.370583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":52,"dns":32,"connect":1,"send":0,"wait":189,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 228\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-e4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSUYFdNzDk%2Bn9ZyaV852slb6ct5%2Boe1lbHTX7eqEhfzpJo3Od%2BrLVyQzj0StsGmK4TtHeyBiYp1N2z9pPzOqFOzLLjjnTsDcT2Sq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b9a5423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"26f0b0cee31f9a1a48516e7d8f3f87d0","sha1":"39f286c01ea82463f8bda9df454e3df178c291dc","sha256":"362bee14842c48071be16be74dd996cbc7729105376787216bbb8993d2f56b5c","sha512":"cb8716d5a9d31e84f88dff48fc82a02fb826e1293defb454641d78c2eeb283ba51553ed89ac2c3a0190be7c5358602d2a275a68eceb4aac57201705d2a0946d0","ssdeep":"","tlshash":"c6d023ffe76c9c2dd6c60512c38f7813d47be65504264d4f48a54527568523985152c6","first_seen":"2023-10-26T15:09:52Z","last_seen":"2026-06-06T11:20:22.318246Z","times_seen":64,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/cr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 225\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-e1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2345142\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyrAZDSND32TG3lf0WPGPghaK0xWs%2BoPXaqkozlZ9iRNhcTNpPIXcFLFnWXiDPOEbc257kP35QQWMC0fZNeThQToOHBXdoSYP0Tg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c2a7923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"2ab8f60f4365ee5196ec504b1ca8bfa4","sha1":"818d9d6e87b9311e4234bef1fdb8ffe511b16a91","sha256":"8c8041b1b2f33701dffb3432109e6825651704db892ea8ec5aea8085458d39c3","sha512":"ec536f864b0fbc1ccdc08d152c7417d02566e7002330c39b648c77f553bf664740daa70600e0d2ca0e0bfad0ec0faf6dca29b807d01c28d755318891f1642d20","ssdeep":"","tlshash":"f2d0a7f3d819ad3dd6c7659712489216a032a05aa2518a0be418c56c4a24449956449e","first_seen":"2025-06-11T11:06:10.908047Z","last_seen":"2026-05-31T11:19:26.335214Z","times_seen":30,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 220\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-dc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2508089\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Vw6t4gDb6BqSIYWQadeWr8lMlsHo1v7LdcOW%2FUFNN2LZc9LkjQ0GCTZWDqYB4X7lFAt02ZB3L%2B6U%2FUp0alvDIxICrnY8UqQubDU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dfadd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"6a2dcefe75418f07501a5d532cbab6da","sha1":"d60698e167cb7a6260aa51087d950bb65e9cdbd6","sha256":"41a493021d298641d35fe75ce783e865b800a93231fbe91fdf2a95ec9664717e","sha512":"dc58012384b8afd0f468ab971877bc4c626b6b0a2f6ceed629ba2f4c59fd5ea44b70e830632973cf7a8313f2a352654172ec389a2d8f4224ca67422c288f0ae4","ssdeep":"","tlshash":"fcd023f376242c19ccc1c313c4314199e8210d0001a28102c03d4c73d0000bcc3cb2c7","first_seen":"2024-10-31T19:28:53.349394Z","last_seen":"2026-05-31T11:19:26.471457Z","times_seen":30,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 252\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1792249\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XknwyY%2BSiIVuJ5FzbyGhsmlIeTE39nm6xqSX6Gec445qUXYupbAsExNsYCqvQQhQthu86z5xU83kgk4XYrDe8W7hf5HB1gvgEV9X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ebb0623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"a100a8191342a8bc13d53a05a30eb62e","sha1":"c3e5feb9cf9f721c3444d786677d157f5e9dc421","sha256":"c7e9a2be7a778650f8c11e0335b4ec070a4b2aba048abb726b27e69ccfe8b0dd","sha512":"96a24f176101082f224303b342ed597e8d8e01a4de526a9504cd7f75d7016dc20264b8a79db5c5b30ff97740b922679d56ac1bb1d181747d76bdb9f4e4dfda0b","ssdeep":"","tlshash":"f0d095c5bf1a9c6446da69337bd27820e7036145462300105160115d2511707c1c6fd1","first_seen":"2025-06-25T05:07:42.826281Z","last_seen":"2026-06-01T02:23:28.124674Z","times_seen":58,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 177\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1760429\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpLcbjxbk6rUTHjz4NCHzopKLaS15MQxt7VS4LUE%2FysedqWNjL6slnpZOXxwPsnOV7qJK39ktXfXH2xuUVNloYsKCzeHmwEZ0ymv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0efb1323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"df9e468c21386fc6a5bf37977a127236","sha1":"47690a566d914d83fb57f431f0be1433cc725df3","sha256":"4408b97a1de4efeb9b53e007809d7afba3c497756aea2889f6c65159bb3a2e96","sha512":"f3d7a0e0d4fd2c100e8ec8a8139886d1c3f98c3ff87da301f4eabb7422285e92bd3fa1244887e9c4e38ad4f12f1fa2a65f07e7c59a9ca5ff56aa3b53e9b496ef","ssdeep":"","tlshash":"60c012d951258c79b39966b7a9141a506424312b9225241b18419d548f9d0179998b47","first_seen":"2025-07-04T08:06:50.032375Z","last_seen":"2026-05-31T11:19:26.419556Z","times_seen":22,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 197\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2431999\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lO4jvVV0Op0J1ljZOoF095sLMyg36K%2F2uKkjpw1xIBoQkyCZHU03FAR6S9hgZUz4Xv3ThhFb%2F74h07w15nVIwlataQduktjYjwMP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b9a5123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 4-bit colormap, non-interlaced","md5":"a143508f36f43e822037b05b3ea5a495","sha1":"4695f1754e9be2d4d36a460a239af621153d464f","sha256":"65fd08bf720bf00e7de074c6b8c6f1517eccd3480adaf58b27e142f1a3624fa9","sha512":"ccf0221ec74969d4e4b283392d9ed6e0cd3be346ec97f81e498031225e10ec9b45f89bc968adeefc0429d469f4741c119998e8a46e8570cb9dbbd7060e9839d3","ssdeep":"","tlshash":"6fd022d1c802abb8c28d1178921880b0a572c0b0260758164b8c89352a29c10809c80b","first_seen":"2025-07-04T08:06:49.884833Z","last_seen":"2026-06-03T16:44:25.931048Z","times_seen":52,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429396\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfpvQ%2BS7pHKmToSZjsPFBSTNJhZZ42mSVtC4Mn%2FCKwPWbP9be5ymSn0nG2F0lw81S%2F%2BwE6Mhbl4wm7xr1GvtEb9jGYXFO7uu8rIN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b9a5323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 2-bit colormap, non-interlaced","md5":"4595dea969cc57753b0b24fccea2728a","sha1":"584613eb46b80617753879e45d0c2ca43b21d5cc","sha256":"e7f6afef8cd01e931b99d971b195c3c1b699c0fbe5f37361531dc0a6e2505d89","sha512":"cdc704ea3e734b68c2696cbe17cae0c21bba3beb5873cc0af8c1670a1784660d4ce7880f3503da5444b65e156a78e1a5b12ac9b24ae70870c627d3d0b2077b38","ssdeep":"","tlshash":"dcb012f272603c70d64e837785831129e6514532111507570098c42e350940c928c5db","first_seen":"2025-05-18T02:23:51.227296Z","last_seen":"2026-05-31T11:19:26.340649Z","times_seen":58,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ma.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ma.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 173\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-ad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 850304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svAg%2B5O1gTawcpNCWLFnheAaOf8UpHGwiQWulRi1BbM65eana%2F2A7AmbB%2BGyapZD1NT21XuqjaWl%2BMY8JRnZbrVslBvRsMUAeB4h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dead623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"1759008ad7c7e6622b3768ff60738b04","sha1":"69d5edfbed52d59e25ecfca12d8f49a47fe4ede9","sha256":"83e14b853d66e5daf3855a2623568d75ad4704d62747987d65db35cc6d3103ad","sha512":"c8e9e7e5ba90bf18a8408df67dd390173af885611fc6261b602a0942e683a0fc11c987e7d6741c042238474406436f64431eda18f8192892b174881069875c9e","ssdeep":"","tlshash":"e5c080db69506c3f9346512331045127ce22165c30557307571c493a259071fd7853d3","first_seen":"2025-07-04T08:06:49.970227Z","last_seen":"2026-06-03T06:10:40.706425Z","times_seen":35,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 200\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1897352\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPUhgcRXTVYqSKU1XqrR2U63iosjHTnKw3AwHIpOMbIJ7rrop8wUW5HPHVmh63q4g%2FbsLYk2Ge6xbNEniHspdpVRM27VuOZ2Clkb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e1ae323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"04f5a808fa4a34321907fd2532b04cf6","sha1":"f56d5e1aa5e3606b779765210d79c9915360293f","sha256":"7ed7158bfa65fd133577af8adc0017eb9f1b8a59965b62da595d11e91f252ceb","sha512":"c59328f5983afd1d8d8217481e12fa0987a258fbb7cf7b4b76b27a3bdf56290ed0625a0189d119d2626cf51b0bec6c4bc4db0da66cc205a080fec129dafdaf35","ssdeep":"","tlshash":"3bd023d091849fffc74a247340785045a9332425551a6009556d74a6124411ff8c6b83","first_seen":"2025-07-04T08:06:49.952681Z","last_seen":"2026-05-31T11:19:26.37325Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/qa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/qa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 175\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-af\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1758427\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZztmPXvz6Lfv0c0tu%2B7jiK2uHbmccaESzCSET026JXTdb1TjmoEwsXUHYekB2azcWLGpYVfXAbetTzL8vLvQILdf4pf3Rsijj%2F5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e7afb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 16, 4-bit colormap, non-interlaced","md5":"62edad5618e644b655d0078f13be4226","sha1":"4613488c8c518919dde88c925a5ab6efec404e9a","sha256":"d635e178dcd64f045d55257a97b162aebea59d7d180529dca8f05e659c93c7e4","sha512":"0b4a0a547eb0d2ad698a86fb28bafa7584d1907734d590f89b03d98aedd548ff3e80f6b7cfd2643d34674572884f17f56b3da2ebd9feac693a4b2584305b814f","ssdeep":"","tlshash":"bdc0c0c1361cfce4840bc13314e50621c8a501002817e0032b67f43b9801d07607c3e1","first_seen":"2025-07-04T08:06:50.04596Z","last_seen":"2026-06-06T11:20:22.261486Z","times_seen":33,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/se.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/se.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 104\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-68\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2413466\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gnKZozbW8VOLehynhVRJ5seyQBMiGXZOpqlzhmFoCdzyfHyLb%2FN11t0%2BlYkuoyzoX%2FgzAHcx3VPA%2Fkk%2FpLqioVyTk6xPy7ZlimI0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ebb0523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"0e977a4b2bb7d710ef6678345cc615d2","sha1":"d6a098d3b7e09f80e2604a466909237360ce29c2","sha256":"8ca56d0b54b7370d3c0cc2c631e24a0d1a0aca4e3f858dd2de64f175bb6fa70c","sha512":"05276196cb581c8ff99d2cc983251b8330f66b6832886bc1fc406e5093c727c9f41dbaecf85a5e7c14b170b97873495e1d9bf7d179dac46925226f680c0ff50e","ssdeep":"","tlshash":"68b012d3a6146c70c27a0773b10a1801dd193f181596164b7a1ac716630100dc0dcacf","first_seen":"2025-07-04T08:06:49.992173Z","last_seen":"2026-06-03T16:44:25.908547Z","times_seen":109,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 549\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-225\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1727387\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnuRGC0lnioQZdWxRmdLgUyCY0qkt%2B7cIQK6GsHAKwh1b1%2BpOBwXanSM0oNmvNIakUZ4TQ6GretsjRqG35R9bCQwKMzHl1v5hMyv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0efb1023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"f4e22acf4639df9bf73b303d39b4b3fe","sha1":"98f66a3ef4c8e4c5cab7ff4027228ead49bc74e2","sha256":"1d23bdf139d198a4cef4be06495177c32032745d795a35e9df627c8167203dc9","sha512":"a16d654e8ab8b4ea97c2441f65a30539885d3352f98349bf0aee28a5be44a9957cec8fab69033f13cd09825480b3ac2d66be4b532146d3a4ce219b47af719452","ssdeep":"","tlshash":"dff026d2db024b1cc84ad51f259b06acdc2e026b9359c451d4cdc80f534e56941d81d3","first_seen":"2025-07-04T08:06:50.018945Z","last_seen":"2026-05-31T11:19:26.397312Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=forms@0.5.10,typography@0.5.16,aspect-ratio@0.4.2,line-clamp@0.4.4","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:10.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17?plugins=forms@0.5.10,typography@0.5.16,aspect-ratio@0.4.2,line-clamp@0.4.4 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::8mhcs-1769234664385-210862633b2a\r\nlast-modified: Sat, 24 Jan 2026 06:04:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2247584\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnTW8dUhIpb0IB2E1YhGJ3xau%2BxrC9ccfQmQ0b6l3IK4H%2BqKprzt8O3CHcxq8O1NWeIkJNLxTi9QrsY%2BZFD0bTmBgwATR3h60%2BuEjo4OnDD6xw%3D%3D\"}]}\r\ncf-ray: 9d03adfece89a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"4de4fccd6de75317f836126409cc6af0","sha1":"20b532e33df9657ff5ae882eed2eb5d6b1f1ce9b","sha256":"48a9868d3bdaf51e2498d7eaba08339e239b740606d5566fd366610170a55647","sha512":"0c8c9187458a0ce04d06947a417f26434d6fa2b9478f60649d7add5509dbc5534a85fdf874382d0092214fb3c1edf779b8ac67a81f8c0a88e92229657798b20b","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbgkgaFO0s:kg5CjcfkN/YVy61LLCe83nnEeFO0s","tlshash":"94b42ba97356b13647aba1e850af1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","first_seen":"2025-08-04T04:38:41.903663Z","last_seen":"2026-06-08T21:15:03.032784Z","times_seen":1355,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/jm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/jm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 212\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-d4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1896584\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUWa00JFXOW3HlpTFK4peH2H5lA1anOMZg8TypnYzyadzzBBCMG6otXYJkHTVDGscn9%2BqQByaMPx85%2B7PlNf9S9LCy3jLBLiyoc9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d8aba23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"375fba96c6afba484d5485089ae7a1a9","sha1":"83744b4b74ddec1e9173f9ee122dd042efaabcda","sha256":"f5fa9301b5bbbc7da3046ee1fa0a64e32630a5c44d7c2a0c085abe02a90a7b38","sha512":"53bad9bbb73f6a5a83bae2770ec9b21b130b016840349c427351552cb554eddb4cbd967fd39ce3225e145a8eda46cd2c304fbf5c77be0faaf85c2d1a81586715","ssdeep":"","tlshash":"30d023d3fa709f35b96e073383151d05c5d1b927954030071149d5546d1605c7055edf","first_seen":"2024-10-31T19:28:53.315304Z","last_seen":"2026-05-31T11:19:26.323809Z","times_seen":13,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/jo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/jo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 228\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-e4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417048\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXnbDWMkOkL8wkdBHfeg18VhvuT1q6FiAfXnJce6jP8yi9IV6b26yFvwMdlce8Bd9nCrz9M1y5H5jZFxKdyL1HujcbJLfVkyCJHh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d9abb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"5bb6e81a1538991aad97ad530371ad80","sha1":"339ebe03e609d0a610395c70c0315156726a384d","sha256":"bd04d5c9f6583191f9b2213f7b7c66e707d19f01811cfd5439e290afe7413f23","sha512":"99b0ad9aa31b79b634c2cd817d9145b2d5ad98146e6027b84c90ee1bf5249856a222e485ae538acdf363b68e94a74d5dfcc1e39608bb2fbb798e8e6a0738e8e3","ssdeep":"","tlshash":"89d097ca8683ce30e3f486330048489957176008cc068426a305063d920305831842e3","first_seen":"2024-10-31T19:28:53.292898Z","last_seen":"2026-06-02T15:44:20.969245Z","times_seen":29,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 328\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-148\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2342800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Us0nW%2Buiwx83C8umsNLJfHRVCaepa2lOe41u63n4rkR7akPMUVzpxe%2FMF4s7HD90B7KLWVB0AEuBcPBbdA9Bz4mwcNZdAhCxyblU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e1ae423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 23, 8-bit colormap, non-interlaced","md5":"f040b8e7f801f64ebdea9fe8ca112eb4","sha1":"e1a7f69bafb5773ee1b24c32fe0b1519e1720cca","sha256":"323c56a91a0e8db1fdb52bbace8b2088805259c9f3500e869df2d311d53d2c45","sha512":"f468530312b90df6817ecbc64d1e90a45f6f8b524f9cae72682bbc4b2a5f08ffd1aaab5c361b05e14d66ff2fcad14a10ab35042d43526b947b421d189238903b","ssdeep":"","tlshash":"9ae0c6c90aa1af2ab0db5aab402c3201e600b7ab8030ec05928791224a19017c1c33ae","first_seen":"2025-07-04T08:06:50.001391Z","last_seen":"2026-06-03T21:27:55.409593Z","times_seen":74,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/images/home/feature.jpg","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.northwelltrust.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 11:00:19 GMT","end":"Fri, 08 May 2026 11:00:18 GMT"},"fingerprint":{"sha1":"BC:12:ED:CF:65:07:EE:AC:3D:BC:37:ED:C1:F7:DD:5F:06:48:6C:38","sha256":"B3:5A:87:72:23:E6:12:EA:FF:CD:2A:31:E4:F5:4C:BD:E6:7F:83:18:D2:35:40:64:FA:B3:F6:19:F5:CB:3F:57"}}},"request":{"raw":"GET /images/home/feature.jpg HTTP/1.1\r\nHost: northwelltrust.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlFHWDlWK3NBL29YQTdFa0t1V01ST2c9PSIsInZhbHVlIjoiU0NyblRNZUVYcmdaVzZzdVpvRHJ1OW14Nm5ydHRtOGorcnk2SEdEdjN4OVBidTZFK08ydStsQzJlMjdKaXgwM01lY1NlUi92ZHJNY0FCWms5RENIWExTTDJ5emwvMEMyd210S3U0ejEwNHlWVDFqcVBLTHBsNk1rZlg3RWFVeU0iLCJtYWMiOiIwNmE1YzZjM2Q3MGFhOGIzM2I4MWM2NzEzZGEyZDQxNDE0OWI2YTU3MTRkNWJiNmUyZTczZjMwNTdlMGFiNTA3IiwidGFnIjoiIn0%3D; northwelltrust_session=eyJpdiI6Ijlya3l0Ty9jcUtxdVJYZmZBT0RiL0E9PSIsInZhbHVlIjoiN29GMHo3ellTaFRSSXBzcElrZ01IMkVIUWUwdjlqZmduY0FMOEc3K1VyS0lDdCtVYnNuaUZkTkJKMVZMQThGSk0wSDFXWFRBNVpJUTFwajhGS1JzRlg4ZXE1TzNraUdqRXpmQnBjMndMVzdKRnZTeW1ySVNxUFkvdlRGQ3A4QU8iLCJtYWMiOiI3NjMxZDQ3ZWM4NDA3M2FiMzU0NDkzOGE0ZDcxYjg3NTExMzQ1YWU2ZWIzZjIyYzBlMGZiMWVkMzAwNmE4MjIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Feb 2026 06:24:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 20 Jun 2025 16:12:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 166256\r\ndate: Thu, 19 Feb 2026 06:24:09 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":166256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1000x600, components 3","md5":"d8baf10f6a1bdc5762eedc1ed28fc73d","sha1":"6f9b262e75fad4076db0cdd9da6b7bd65c241bed","sha256":"dbede3778e4219f02405cfdc2159e993728a59d543424f29347b67ae2b070f7c","sha512":"88189fddb53ef68d2f1fdd56e4927990679c431f381ae8a045c837441ab5a81e2199e95ffb9a90e94f34a80440ab9d80ac2a94c2c38a570072ed3c5ee2787521","ssdeep":"3072:4HVGwsN1ZN/pJ+EF0VY2wpyq9MkmzlzmuPtBaWwwI2SBwrzck:47IZN/n+twpXm19YVq6wrzv","tlshash":"2df31395a19120c7fd8e293ab0eacf37ed064822de495b918109edd715c0fe3396a47e","first_seen":"2023-11-12T03:48:53Z","last_seen":"2026-06-08T20:59:29.491516Z","times_seen":2343,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1551836022-deb4988cc6c0?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1551836022-deb4988cc6c0?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 1848d32d9691fa75a1b0abe00795bf826ec12a14\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 13 Feb 2026 23:10:28 GMT\r\nserver: imgix\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\nage: 458022\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230111-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 34217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34217,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"dc2d3bbd748131b938c092f7046184f5","sha1":"fbea77c5cf884d57b3bfd3f62a31028cb5af51f3","sha256":"0f6cd8d401c7bf31b527240991a6acdfa58912bda4e1a482f56c88190412d56b","sha512":"fc1ca6a01821174aebc64695b87af09e539db193f4e2a88f45fb45628d1613fa07da38128ab85d8b93359a83f91caf1f165f33aabc2b735bfad3989314f2bd65","ssdeep":"768:lYy5OgBP6gAVLb0A5bnQKRmADLmqbNlM5mBDQ5K9xX4qO6Y:ldOgtBXAdRBDgK9xm6Y","tlshash":"c7e2e17fcba79423e22647bc5e2473987be9f13c737e62110895742a08875d1abc811e","first_seen":"2025-12-13T17:16:55.38352Z","last_seen":"2026-05-31T05:56:00.461306Z","times_seen":559,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":25,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/fo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/fo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 167\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1816411\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bbm6ZycKybjfzOspM6RD3RNn69mwQh8qX1iQki1aRADWLcQDsQGrLtADevXpeCIXF2peinuwLxsc%2FZqeCCS3NnplplRQlrolbMnt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0cca9823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 4-bit colormap, non-interlaced","md5":"f68e2dced76d22d08ec8ee519d78e76c","sha1":"1345168bec9ce14867832cf2f28fcfac7a3f2cd8","sha256":"e6a89f6e019f555baa23cd3ac856458059dccbc82fb7919f01f0cd9322017992","sha512":"a2be98964b853f88adc07836e6bc6eae913fdd45f6c01268a710ab0f3c66a23037609e42467450904b3c03fc80236df8f0791acd4c64857bcf40950d80943d3f","ssdeep":"","tlshash":"aec080a761665e3587481527541d1517f835417d6269682741c55d252c94107824a747","first_seen":"2025-11-04T09:03:44.108055Z","last_seen":"2026-05-31T11:19:26.429392Z","times_seen":6,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 338\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-152\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2086890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STY7rA5%2FoZHOUxc9YUwbxf01qk0Dw1l1l7uzp0JiRONwktwyMk7QeWtHEdEQN6qHLPjBsi6onOvSn3oJ7O2jtp3GnfYrN2DjRcPv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d3aa323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"53061c0fff8ab9d4579a2d644e69def6","sha1":"70b087f3056cd2e65f897ffdcf10307dfd4ca1b0","sha256":"a20552861eadc3283a5dd6e4e97c4e3efe38d2e0666682f059ba24a1524b8320","sha512":"6b3c9af882bbfa4dbce7a569e99e57ed12132125f7ee09c372c0a1a173e9178d831c23892df803ddce6b9cbb6ce109c13df702b98008148f89a893681d5cf9e5","ssdeep":"","tlshash":"81e0c6e2e2123e208a12e33fa132daf0ea4602e1283e6e110a264e31390225ca602242","first_seen":"2025-06-23T14:06:52.220377Z","last_seen":"2026-05-31T11:19:26.466298Z","times_seen":12,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/lb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/lb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 261\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-105\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429603\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYqfmMFj3jJiRxtpchGe%2B5cnQOcEMLmrwv5w7anmtYcbQFqD4pI3JzxHwJluqjl95XklZUyEqBGlTMKtKMaQn5CNmdzSoF%2FoxqUI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ddad023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"d19169b0294a414f3f11a62b989df1a4","sha1":"031ef86ce2549429343297c5f407c18bb19453e1","sha256":"a90702fa2ae06f6483796866c79ddffdf257fa5a6b122f7df7e5d273abc70759","sha512":"f29c3f6124e7f9d22fc389d1f17e9294831f520b574c31495fa71831236dd364f4e03536933fb7df36ba9d6c3b37e2ab864bb4528917866071fa933aaf6f0c69","ssdeep":"","tlshash":"15d095fd4bef0c368a569d91715513515d27a54640e0c011c52f48ba1a4d11cc4c4e4b","first_seen":"2025-07-04T08:06:49.992903Z","last_seen":"2026-05-31T11:19:26.34964Z","times_seen":36,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 338\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-152\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1232292\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmxdRFavljV0Wy3m%2F%2B4jCqRHC8s1oD2QiohU6rXO08rH3H9fCOCplBtKJ9lyK92ij8Bct2fGZeukUi5jM2eeUbk0XXYJSWOD%2FeLt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dfade23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"11439a4ea9a556f32261176e275ebb67","sha1":"3dc1c6d271cbeec755d1a3615d0f2e8c16267463","sha256":"804127b351d825f8c4d1b22eef12db6b4fab4c89ee4590d85375daed39e08a9e","sha512":"b07dd06a049f17499c3de5496913ccfffed4e066251618297ac5bfb20e6241255f24341a0a7a3f0cd28524e002c5e40d7f5c4c0a2f2d10371602c5e59d98e6e9","ssdeep":"","tlshash":"51e028e122308fcec14e9131f4b51881d13147561551539b14c0c51035d553cf0cfc62","first_seen":"2025-08-17T01:17:19.045511Z","last_seen":"2026-05-31T11:19:26.452062Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ua.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ua.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2511545\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDL%2B0JYLzQVLD25pLCaN1pDPEoRHbkL%2FBujhTVdjrqJAMJm2d5h6ufZUpd2jGETJzYKyVHNA0vFDfoEET2Y0EydiKCoaABqqc%2Ffp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f9b2d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"e632e8899c850a26b37bec9e83008504","sha1":"3f6c0ad64a22be068d7609249bfe2ca182c8f293","sha256":"9a0cc0648b86afadf0c671b5844c77234d4c07a86091ffd62a1c62ca027b0afd","sha512":"be7c28edeaa8d3c8bb535190e168ab2607f41a734b7d291873bbcd1fb318b38d4f6378804ce3be646d712e74352f677a531a79d9abc34f75156194f5aabb8edc","ssdeep":"","tlshash":"6eb012c233001c76c7504723b5c4801aed31819901678407950dca13114140cc08edc2","first_seen":"2024-11-02T00:37:36.981388Z","last_seen":"2026-06-04T09:15:55.621939Z","times_seen":80,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/vn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/vn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 216\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-d8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1982076\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mBH7f1u8A0OZbWiazTNjusQdTuDIePb3etqQ6LNWZ2PoWqTVF6tsvRkPTxdxKdRvjhOxsjurzj8blmZYFQWC2phIEY%2FayuhCF71\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0fcb3823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"9b292ea2b16c872ce5b25c9915836d02","sha1":"ab2f792228d4052a600400ab9f4142b3fe7fdf93","sha256":"9349fe9d726e98d34e6ee0496c1f5fe12e910df528ebaab9c9bbe24a2fe2bc64","sha512":"a2909c1d61d20e084b4b558378a12396a1873bc15cd116473c69e5c90da34a888c77f514b4872c71a7860117472bda74892c948e4b42028d924cd80f453fb6bb","ssdeep":"","tlshash":"a0d02299e3752f2053c22a71aa783715aa381029bb18836ba00e46bda05055acb44382","first_seen":"2025-07-04T08:06:49.895597Z","last_seen":"2026-06-08T22:32:13.436388Z","times_seen":55,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/aw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/aw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 164\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1905357\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSKSHdlAFK1k%2FCz4PBwtklaV3B%2FQpuIj3VnowFoLvEMyzyqepQUcOKOHE7Au9VKnuYmlYOWwYFGY0EBDs4P7m98W0ZsthwlmHuFn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b6a4723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"f5e3b0b40324558079aa9a10b8fb3225","sha1":"d691398c6c6ccf3b573891daac1c4ea6eca23f0e","sha256":"24ccf982bcf79d8c57d7053879dff979454745307c0b926bbfb87efbe84024e2","sha512":"df2faa53b05ea86cf25761ce5864d425080cc9c1b2c9b12a5e03185c9439db85017e57581b91414730e7f06e70c9de4f4a3d48e978c3dac11e0e9881fe300e3c","ssdeep":"","tlshash":"68c08c822e60fd7ac3a9083334eca01184a5062ea31b2a911124522ba47249ae2cd789","first_seen":"2025-11-04T09:03:44.099144Z","last_seen":"2026-05-31T11:19:26.402659Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 704\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-2c0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMJISnwQRpqTdjXAkTFkxcVxDYxp24E3O91P7kz2yZzYSZ%2FkB81ISUEq89kKnzq0sVPH7%2FmmHT%2FdwKmYA%2Fwd4CaxNPeOlKpcP%2B3u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0baa5723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"490e32c127ab5c89a8facd1903fe381a","sha1":"bc264826154625c85dfbec26a0092c6bf47329ae","sha256":"4892df9b2713acb835fc39f23d939af5fd65ff39484b5bd220e7934399b9fa16","sha512":"3b55fb3c7e221dd0110893cf37c9d51ae34d1bda0758ec74407da86b7a01ea81f095617e53b7869367cfb9c7154863e4060cd181d4541f54a6d22acf36577658","ssdeep":"","tlshash":"c50144f75321de23b7884511c76a550cbe6bd31547aa4b4dc164c138612651ec6ecb85","first_seen":"2024-10-31T19:28:53.244097Z","last_seen":"2026-05-31T11:19:26.336693Z","times_seen":13,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/th.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/th.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 113\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-71\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417271\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FJ2g4Jx8pU4z4faxXv7gSeYxVI03doCHgS%2Bhuz1CUOvfivC1t%2B%2Fam5kTuP0VFXKvH41jlFMTlYpuH0pcxDC%2F5ysW63ESa0txwmP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0efb1123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"f9113c0106218dc93e93e91c0f68102c","sha1":"638344119bceff106d1daded0746582060bc3665","sha256":"f91dfd0057a2e7a4df04aaaffe89763f17687b70500682d1603ccc44934bcec4","sha512":"c3f0ee3d6179ebde35e8033ce811b36f500e4b5ddf43ecf1c746d2de21d7673c1bba9deb5e9807e7729cdbdd322b809558faa1a33228429818e2e9f8fd147f61","ssdeep":"","tlshash":"34b012d1a68d4c7cff3581337e14001bfca13aa50276416f610da4b5673d13ad0457c6","first_seen":"2025-07-04T08:06:49.945687Z","last_seen":"2026-06-08T22:32:13.446781Z","times_seen":68,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CNhvSpp0.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-CNhvSpp0.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:13 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6994310c-919a\"\r\nexpires: Wed, 17 Feb 2027 09:18:37 GMT\r\nlast-modified: Tue, 17 Feb 2026 09:12:44 GMT\r\nx-77-nzt: EwwBuUwJGwH3FHoCAAwBuUwKEwH3DAAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: fdb541235a683c228dac96698a4b1910\r\nx-77-cache: HIT\r\nx-77-age: 162324\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37273)","md5":"0bf3fa4ae16e33ecf6bae9c7a91c24ef","sha1":"d4c8266daeb1f4b825d4db90f13765f82224b9bd","sha256":"05085b4c6bb66159589e884f0cfe7dc68c3e5953fd10d34941036a47809faeb0","sha512":"9b3769c86553af1f03838f99420120ae72f4284719508d29e96a425f968a885f8fc17f322861e575d209b55245481ad74b230576d7746d1f8ba3a3b950000c5c","ssdeep":"768:E8Ch4TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E804TcCWYtdXjuPF4t2Z","tlshash":"d7f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-02-17T09:27:34.886834Z","last_seen":"2026-03-10T05:00:21.922479Z","times_seen":1217,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"ebdaa-akUPtOjTQTVSG99UYNyYhnPTbJg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 13893\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\nx-served-by: cache-fra-eddf8230161-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 134410\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":966058,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text","md5":"679c0d8a348cf1196cf35f65fe6aab63","sha1":"6a450fb4e8d34135521bdf5460dc988673d36c98","sha256":"3fe32b4cb0ccfb0e628c814a0729b0d0c122b14feec9cf6e392b85c742e540c2","sha512":"55ba1287440c35312f65ad90a3c2c65314502f94b8393582bc5d9edc57ea8f19bfb6c9dc82f79da9269ec7034f6ac10773743c96bdd0260ec7a66ec72a28cbf7","ssdeep":"3072:FsDfbhWqlpP4lltw1p41SLrnnCmIhUf4uCb9VW01Gopp2NXCudEoX8eXLID7FeF5:ODpszLbqX0DZeFI80nya1VFtih","tlshash":"7b25aba850be3898c35ab1ae1147f610fb3d736e5e4a0d0d91d1edcd69f2e048186bde","first_seen":"2024-08-19T15:58:47.224599Z","last_seen":"2026-06-08T21:15:03.044815Z","times_seen":1269,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":110,"dns":32,"connect":29,"send":0,"wait":14,"receive":31,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-51b08f.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-51b08f.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27240\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a68-e3jnsqJTDs6C2dA2xdg33/psne0\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 7641\r\nx-served-by: cache-fra-eddf8230097-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27240, version 770.256","md5":"e641bc7cfe65d491a2ea4c7a38a5de99","sha1":"7b78e7b2a2530ece82d9d036c5d837dffa6c9ded","sha256":"88dad7c5c5ee15455411bcd71ff71777b58ff77e46f9a54bf9d16df72b4a4780","sha512":"d6748f108064daf19ff8a5b3473a33240a163886eedd56addcf59754edf19de4c9588316f41350b3e3a5ce09a16749bbc3fc327d3bb648bdbd647b39c2389efe","ssdeep":"768:3AwV597BI2U3DSCxZhzZ8b2MizT5iRm0C4xmDjJ:3AwVhI2020ZhDvURm0uD9","tlshash":"a9c2e1194518d5336beffd9126f5b40a254a90a21095fdc2b0a075e219cfdfc7c4b72c","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-06-08T21:15:03.037716Z","times_seen":1259,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-1e5361.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-1e5361.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26072\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"65d8-bNnYACO8MD6tZe6nOJGBDdQnQpY\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 4411\r\nx-served-by: cache-fra-eddf8230129-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26072,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26072, version 770.256","md5":"de1fb9513aedcbb6321e4f148bb6b1c5","sha1":"6cd9d80023bc303ead65eea73891810dd4274296","sha256":"b1e0586a5e9a737b2a97b328305d1a8c0e5f4d1b37f88fd6fe2daf8bb530ef29","sha512":"c5d68fc0707815f98b06d4bda823b13ac7bf6ccc0922187cb7d737090112f8bfa2a471b1fea0cf6ece611a2993febc0df1e60e581105816d6da2d5cee0489ebc","ssdeep":"384:UtMu5PfVAE6D4jm60miR+KunuzKvKkdku7nF6zgJwUhuPvn02d0by23va1Iq9:tuZ0mpngyku7noMJwUhun02Sby2/I9","tlshash":"0ac2e0e51e51259beafe118b236045c16f66305ba32c4fdaf8cce51bfd125d4808bd87","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-06-08T21:15:03.038288Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-292b12.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-292b12.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27012\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6984-noFCP+a2+PAIj9LpBWmp8ClBXek\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 4411\r\nx-served-by: cache-fra-eddf8230130-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27012,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27012, version 770.256","md5":"a0a448499e4f778eac4eaf824ea8e316","sha1":"9e81423fe6b6f8f0088fd2e90569a9f029415de9","sha256":"1c354369e2dbd57644b4af2b9d038bf7fdfc6fff28de882f18482dd4763772f4","sha512":"1191ef7e4246c6d3f8d72f58040f8c515d68876afeca2bbb7c0e02cb342cace24e439baf6d9c0f927e33ee57ac7e8b8b77e059a9124b701c302967c0873aba2c","ssdeep":"768:M4uVQjt+PPb+6/SkAoVhoflWYB15rV8tkL:fuVQ2PskA2OlzprG0","tlshash":"79c2e0f0f8b5bbef40363e3543b7a3e4839583c2877051184199994864523ff9ea1b67","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-06-08T21:15:03.042448Z","times_seen":1271,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-f6b769.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-f6b769.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 18440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"4808-UUmkbwEg6vmftEP3J3tN6RQEdl4\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 5024\r\nx-served-by: cache-fra-eddf8230039-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18440, version 770.256","md5":"66983ee6e13d0f4ee9de3df33c6e7c0c","sha1":"5149a46f0120eaf99fb443f7277b4de91404765e","sha256":"8ad3dbb62196226b6214d8843acda08008cf431585dbfad30908e96dc05f47d1","sha512":"4d10a641b66b4b89b204c296c67037d10f3baaf3e057d8d48717f0b4a1371a294d38d2577c5033b7c03e1d93052654cf98bd2341cc1d396d08111f87ef05b7d4","ssdeep":"384:Qi2nfjh3iDKMxBxJAj49xV50nGLztcQ+MwGJwckamebkr9TCALs:Qis0KMjxKsTLztOMbJwH8byTjA","tlshash":"4782d0ef6f03b461cea0b5bc41443bec4f222a80db59bbb458cdd851579a405a32e903","first_seen":"2023-09-18T08:20:04Z","last_seen":"2026-06-08T21:15:03.031103Z","times_seen":1291,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ir.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ir.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 297\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-129\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1758476\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZxhwKyc%2FDRpO5t%2FtLmRlNLqoIKo4oUvhFOXO1IVeE6pRpANW53Z5Zev5hEsPbY1aXhCZJ9SW5g56u1ZBuu0AxTpgbe7Cj6dZEP0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d7ab223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 23, 8-bit colormap, non-interlaced","md5":"0bc995155df3e9c0114dc9bb3da57e3e","sha1":"26109698cb4a6985e72f80f04a26add3f4b1d52b","sha256":"1c5bdaab711743e27b01dda800454913ad61f439d18ee25b978ade381c4ce3fb","sha512":"52db4851bb6bcc0a357e62656305ea88a9455b936c3ff8b2eaca805c5beaa3dca1c5a7e2ab474a1b92979a38e21e2f80866a807aac2971afc63d07f41c0b9334","ssdeep":"","tlshash":"b1e0e7c692f12ea4f15240914d041402d2353146d3910207e915ec7e3536098ecef15e","first_seen":"2025-07-04T08:06:49.911755Z","last_seen":"2026-06-03T16:44:25.914401Z","times_seen":37,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 367\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-16f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1644384\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dGdpzwkML9QFdWGK8At8Vtd2XiswCBq8J5kXLZcwRik1vQIlYlQcwT3MhgSSrMNE%2Fx96VnGnJOK%2BIqLDKT1jqxeCJ6Wo6iRop8w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dfada23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"d628f7b8b7361d4fb439d715f140b945","sha1":"18819f62da46522d0e21599537c21a512e614882","sha256":"e7582c6fd9aa42b5bc288eecea3aa74d0b5075199805971771748b4d1ad54db6","sha512":"724c7c2afc8026b8cee73b79a80da3bdb27bdb2c1b756de8c706ee3b406cb6f015a3d7dc977459cb08f64b9901628b97928b65b2a3884d1613a83792c5becd10","ssdeep":"","tlshash":"a0e0f1c697430c27cc511023233201bb692cf86e4e2e068c442d0c5a3b4413842e42e3","first_seen":"2025-07-04T08:06:49.892293Z","last_seen":"2026-05-31T11:19:26.318684Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 183\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2171826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eD3%2FWvj778eV%2B3%2FsdXGV3cJo649sAOzWiLfMsGwrukN9TipAUJ%2FOTJvq%2FB%2FyEmaDS%2Fkx50v4Ph9yoMOf4L5damlct7tgTHStXkAT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e1ae223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"db08693b2a4d02f8e6f0033a94338b02","sha1":"7f608c0fefb4cf7ac96e68e3a08f269c387619e0","sha256":"691aaefd25ad952ca01231819f59cb465c3583aefb88d66b9ce112004a598818","sha512":"0615225d11285ea840d4746eb5d2eb322db68ec0405fbcd892a3a6de177ff07bd2b6e0d193038a6666b0dccea0ce2798d39be1d8b6126659e9835ed811cbc65c","ssdeep":"","tlshash":"adc022dcb328fce7cb8d68f7220c840aea36562a59021082090e4440192380150c5002","first_seen":"2025-07-04T08:06:49.897398Z","last_seen":"2026-05-31T11:19:26.358399Z","times_seen":12,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/us.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/us.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 252\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2605629\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pzZTSW8aCkulhoYPjA62r81EZXCRHjGn88WluKZHLT2Bel4Hxq0qpzM0q69oUH1qVdGzJN8roxWGJygS6uu6FYEj%2FEa38t3xdCA\"}]}\r\ncf-ray: 9d03ae094d88b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 21, 4-bit colormap, non-interlaced","md5":"893a96612ae6640a35ecb21eb66c59da","sha1":"31837ce8ddd2a679753c22bddb78a60dd3bafb4c","sha256":"09dd59a3417221f62c23c3abb37e9b598357502643a0ea9ad6561a50b2dcc1dc","sha512":"e5a34cc77562d700b57f3d86ddc1a89170c5f7a03d6dd0f03a3c89861ca87f91d2dd7a95211f8ebad1177ce942860d76e33b657d53f20f34d34d5beb69fe9652","ssdeep":"","tlshash":"ebd02be5f155bd210b4186121b4c59965c229579a292005e6071aa6d620d11af6f0583","first_seen":"2025-07-04T08:06:49.924394Z","last_seen":"2026-06-08T09:54:51.796523Z","times_seen":559,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":23,"dns":0,"connect":1,"send":0,"wait":5,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/al.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/al.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 312\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-138\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2605152\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iEeEXGkHIW3qhkrMlbSBW3v8jfOMtsWm9gOCiQe41h8Wli8SpT7FLs03erLBsmB7kiwDbDcbFAsWjjWIRN855Xq4tlydsO1Sh3wy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b3a3c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 8-bit colormap, non-interlaced","md5":"ce1dbab7d81f61803042a5bd6c814e31","sha1":"7f3ae7953ef1e9f622ed95cea7824565bccb66e1","sha256":"eb1abace71ac54d56e4823e6df9dddbde2dae1ae083087935e9ef95a5bf39afe","sha512":"04e979b258f51a38821a5c22c9804db7f2ebf792d8ba228bb5e55135fcbb20349b4271998474be193dbf82bed1f29f449778eb04df384410b6c4b65211e6f356","ssdeep":"","tlshash":"31e0722973b52e69cc20003be209260efc3b62109d5eb982b0cdcd2edb228808641a80","first_seen":"2025-07-04T08:06:50.015912Z","last_seen":"2026-05-31T11:19:26.4155Z","times_seen":36,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/kz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/kz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 282\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-11a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2162779\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wO3taMShDRV89IBi9NCqPLpm%2FqFhuGE6F1fdGTmnnOhgv2yHzJeZyvAMttFHIxZlOvdOFb8MLhzqNr6bP0jCNqPkdKscgwRUZGR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dbace23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"b86816c7fcdcc8c162dddb5dab08e963","sha1":"728a3cef33fefe6c81fd9ea19458fc817972f12d","sha256":"5ff277e1ac8d6174aeae322dbafdb5d81a685e179007a9f96a416419b94f17b7","sha512":"09e2bae9c5049ecdf58262356ae39dc191e6500a967864a400df3234e86e5490e34ccf689dc9b5d487241eea842d3cee08bb1fd7759835d6e669e15320118f06","ssdeep":"","tlshash":"2ed02bfb549bcefbda89655f0a3027208cc11844b76692db072cd0731e026db01c53d1","first_seen":"2025-06-05T17:12:41.181908Z","last_seen":"2026-06-01T22:04:04.086162Z","times_seen":46,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 291\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-123\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1811164\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otrKbUkrWGsz2kpsW%2BajBLnUFQWtjt9oMvIsn0y5venfwtPauBsEpyG%2BVI8SIBA1VkslBDqOaDwkQ2ZwFqerjRRKThCoNPhZawwf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f0b1723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"6e17cf631e087c7b90f0e11eb1c7a661","sha1":"efb4b326ab362e5df72da5a270301438123e4154","sha256":"608a57542524f68d178b3cd0d603a05cdca17d5946c66d1b1a8362ff95580e9f","sha512":"0290cd008759323ccac5b765cc56a095e48d6d79171e2f1812bf1e191e9141166e16852bd56b993210933f6427d7819b76b468c8b28defb8eafc40b4e5f82bef","ssdeep":"","tlshash":"46d027d9d14c7cb9d4cd02d3d55d05d044ffb1d1056615bd501560d61d7b35451cc24f","first_seen":"2025-07-04T08:06:50.040492Z","last_seen":"2026-05-31T11:19:26.459152Z","times_seen":29,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 377\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-179\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 858729\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wX8wEDCkEFBWTGxpLClrSudOlxW3Qj%2B7aCSiUQOTJfIz%2BpHX7uQRYWPowPDK8YPOPZNTWBkdfJ6AC0%2FcmqsItcxjNVQ4UXC7fkum\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f9b2a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"47046243afe0baaa7bc137d7977fc4f1","sha1":"b1d4f0ba6800baa6e51df058b5f5cf21d02dfa05","sha256":"6179a5e84d450713d054431ff583d027f88ddf3362d48caf03e22fddd0383a12","sha512":"a5040013ecc421782495ce7fb4253dec54c5595373fa636e52b178fd1760ab8e2e60127dcf037386fa76bb674e3edb006fca1b01ecbc746f27af87724c1f51f9","ssdeep":"","tlshash":"3ae0f8c32e2c0c2efb940062089fc818c9a2428ec899b3960025a069338b00061a30ef","first_seen":"2025-07-04T08:06:49.868693Z","last_seen":"2026-05-31T11:19:26.46706Z","times_seen":28,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/cd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 337\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-151\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2553779\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5jNagnirTtIa%2FDZuDCis81WT14fTitkYLzbzIhHXQpBkmVZDxr1uKUzaQhvDOMQl5%2BDLUc%2B%2Bk6XddIkdJ%2BzZStBcmdn3kZEWF6j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bfa6d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit colormap, non-interlaced","md5":"938d6f5aaac6eeb5d9998561a416507d","sha1":"cb8ff501aeb692af2ae29dd20e17fbd5f905b6d4","sha256":"24b505417b0c0a7e49726e87ffbedba2239290caf78814997e30e733fd1bc66a","sha512":"2dd0fd8bf366d1b7bd9a5d3c2ccdd3a8cd8d32d83812a5e3c73b2e82e9fef1fc963f6cdce64a162f69883baf6b0d6b61619f8160eea9bed2cf4b0953e97d3927","ssdeep":"","tlshash":"7ce0c0e5f5491d8c04c153ba42783a4c603ac05227829377627658b82096504c0ba06c","first_seen":"2025-07-04T08:06:49.989363Z","last_seen":"2026-05-31T11:19:26.435431Z","times_seen":32,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/et.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/et.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 340\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-154\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 957084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iqHoX4g4uqtJd9yXIfEx8H%2BF3GdDMT%2BuxU5TP%2FZCw6tsTeqCgowSbG9jAT5JC11ALNvcsqT2l6IEy1FV3BlqioqGSZjuunu%2Bn5OA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c9a8f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"0444018babd0c22c85086bce7681ddce","sha1":"dcdc75d99a0349b806d08e8bc160107028f95750","sha256":"00644cd69b1afff9d741a8dc1510b8219636103658c820c3f08f86b36d967ac4","sha512":"41d66809ec6c6b371c68afb0b3f8cce7c774cf8c79490a822353673ab50a722df9e521857cb163e9e1201406ae45af7055f32d273d54b23a1f85aa3418312e22","ssdeep":"","tlshash":"cbe0c6bf14220d35a2c208b0a2220082b078230d2a8269e8038c09eab6324b2318cfcb","first_seen":"2025-07-04T08:06:49.963774Z","last_seen":"2026-05-31T11:19:26.447371Z","times_seen":20,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/hk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/hk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 306\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-132\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2503658\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9BrcvolozDF2rN8pUWWs0qfZZhUC7fkg2iBPw2qeZaUICHn1EyG4mvpvyI7XRJS71wwLwGqmTLCSYHzn72Eha448M9%2BHHPDah0X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d3aa423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"01cd6d2836a5df62e52025982027119b","sha1":"441cc951d70a59071abcdab89f877c4a065dbc5a","sha256":"1d144d25e1862fc6ef5f69b428fa58c99c69bce509a91640ab073030b2f4e773","sha512":"3ec6621e93ee16cdead626eb28d8860c6058a9237ac63e71727dc0b9a1c264437b2f7ec8f9eab42d788a88e69ff61a55b84868f898ead0c7b2573a10b544483f","ssdeep":"","tlshash":"c5e07deabef08e348c990a278c8058f044b415455131b21681b444450ef1ee5c68ca8f","first_seen":"2025-06-25T05:07:42.822068Z","last_seen":"2026-06-07T07:19:34.525978Z","times_seen":54,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/il.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/il.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 224\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-e0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbJdDfNNdb0zhg0h1WvsGCPxv2kcc7A6IL6D4Ht8zH30uOq0NIHLQYfHsGp7UJUYjvacL2MhHRaXQ30wJEShqEHSbZF0Rv9JN3MJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d5aab23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 8-bit colormap, non-interlaced","md5":"5d512973ff69028d3b495597fbafbc12","sha1":"d63aae18cb40fafa850d94c2b188ba627ec3e927","sha256":"9e00c28aeb5964dad4e9df28ef7ee72094ff88aeb5b4a021c591e5df13f1ad43","sha512":"87db5efd90613d86bacb05aebf85a677149e1c8578c8964259e8f7fb1efb6360ad1f2f9b294fa88bfc1404bc59d960e74bed2d947d8e6907dfa9dc6662feb3c1","ssdeep":"","tlshash":"a4d0a7f3a2126c7e9a5a46bb8369116dac61136a4866280c4107d9240b10715c086672","first_seen":"2025-02-12T08:32:15.800301Z","last_seen":"2026-06-03T16:44:25.905316Z","times_seen":64,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ky.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ky.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 602\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-25a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2298786\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcJEEo6m5x4K9cgwSeQ5wiJCs%2FnN%2BY7ZiCFCjdT5yP6W7sLPXsGyUlSzEuMZbwTK4TYxthKQJBuJTdcmZhKjMvSXLcE9txuMGwmG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dbacd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"06e1ac58b71af8a76983f3de69a08e20","sha1":"1027ecc135f1825ff4d24ea117c3ba8115f9bcf9","sha256":"27e86bda3e2a6ce8045d7a28f053f9a28365ac41c9d1b77a13cb048f5d24eb6c","sha512":"b96e4e0baca4f37ddfddffd6870ba982cfb45ddb75cf885c908e0d6307493f80d2028dad6574763760aa18b1761834a1fdc6ad4900f5e39b1b52395389af0423","ssdeep":"","tlshash":"32f047dd52674dfc051f22b113551392401e4356c431e31947165c11976232750de39e","first_seen":"2025-11-04T09:03:44.226574Z","last_seen":"2026-05-31T11:19:26.379483Z","times_seen":8,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ru.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ru.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429396\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4Q8qRmSx0V3Wy16cHDuuF7jWo9pdqj%2FOqVEAwsPQcuiLscrIRlnG6tCllHWxH8tsdwBnhtWnVj7rUI4gFlWwbs103jKlnIKzF6I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e8afe23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"01da7b27e00103c41198efd6ab11d424","sha1":"702442b705ade0fdca3e5efd3c5c8a977100764c","sha256":"f413e75f4d6bb1aee23f2d035c3584ce7b899679010ab31a55d4870e9ebe006a","sha512":"49c8fd2801660c84102f83e8bc33e996e044407bb4b8ee1f8d67d60d8e3516a3f1effc38bdcb7e6f64fc5049c21523578612520d79f8acbc232d899b844fbdde","ssdeep":"","tlshash":"c3b012eb33999da7c754012353144600ac20015901159a0b206dc355120440ce4c99e2","first_seen":"2024-08-29T18:10:42.241013Z","last_seen":"2026-06-08T22:32:13.437537Z","times_seen":148,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ss.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ss.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 307\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-133\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2428710\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAs5oJGUhhvcjdHB0JftxErXaJIhutKmGip0F0ZYFp%2FYUMiBF5XqMsB%2BpLPLveoDgBxyKkhbNjuYxeaVbqmAJzAcQk1EWkMAjzTQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0edb0d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"0fd53b64984ed6504e533742e9724353","sha1":"39aa30c1924175f03291c0f05d39765817d7bb61","sha256":"308a44a728b2b6b3bad78d18fc6fb2448bac9e4a6cdc701dba2446e812083659","sha512":"1a0c48ac220d043fefa601099ab0d11f6ea4b80a98cef9044eeb16dfad78809e67275056b8284aba1ac66054c3cf6267e455cdd8f60739151507db360a0596a1","ssdeep":"","tlshash":"98e07ded57a53fa0ec571b300106fd9b3023e2a64263cf197ac45136855b2c9cac6440","first_seen":"2025-07-04T08:06:50.010021Z","last_seen":"2026-05-31T11:19:26.370484Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27232\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a60-z1IVIrKbHuW+8NbsfeN6A7L4oi0\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 10082\r\nx-served-by: cache-fra-etou8220091-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27232,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27232, version 770.256","md5":"cbdff72e5d0487b36c7c47f09ea2ef28","sha1":"cf521522b29b1ee5bef0d6ec7de37a03b2f8a22d","sha256":"246c899ffd4360235af942b261e2671563f2f9ec6c2708a8fb56a5364245a57d","sha512":"3228e87115c554729550af7ed902bf759e5feb9d0cab8ec324aa426c02e3ee64c5c924bfc1f0d38dffa205ca4846afe39b2397022e606a1aeb307d8d868b5413","ssdeep":"768:0iO04O+mQEW5w4sEcglXT+wehNBtSdDwSEw:/OeiE4Xcg5+wONBBSh","tlshash":"12c2f164d3d1d8e3e3e94770956850d5002a1eff83faf126e54d09106a09ee77aaa192","first_seen":"2023-05-17T05:19:34Z","last_seen":"2026-06-08T21:15:03.037152Z","times_seen":1406,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":26,"dns":1,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ao.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ao.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 331\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-14b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1637963\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6aJ%2BXCyrVb0A9%2FCJArJIlvj%2FwdmJPnIlYNYnnsZ2rUENMQiJdyQbgS3wEF6bvwBSI9Cv7ukkGCTmVolCpU3yY6yyAOSw4ZiQGxJh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b5a4223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"a3e3a6021cd637254cc7766921e9eae1","sha1":"5b3d2026ee020d70f2b036c8e22fc8656665c8d1","sha256":"dfce00fa0a8e85c2627a9f21949ef76179024c8cfcf708da3b2e18acd31f6be7","sha512":"b2f8407244ca5a0d7b8523d8de04f5a79b767dee97f1bd0703e13825d7c4cf1a545be1a940f313407db9ec6cb78f8f968a993c70e11ff0f4b92b067a7714e3ee","ssdeep":"","tlshash":"a2e07d83e7726a08d39131367b93101a599bc03dd4f41507a54be1e1ee4404e89ebb53","first_seen":"2025-07-04T08:06:50.034046Z","last_seen":"2026-05-31T11:19:26.438412Z","times_seen":25,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 288\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-120\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2329398\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7L%2BpZ589h6WikYQkxNReXX4xt7lNGOwWJAdDFKn5Eakoyg38Kqm4k0svCUW7uHMW5FRdAdggUrWSPB73T%2F78U3gJQPeQ%2Bjg71pN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0cca9923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"5f94d206a4956ec58c461b2520f12887","sha1":"b8c3380dd5a5243098bbc6c99b309f549f6e99e4","sha256":"e2e39a14b87527ab4893d3f17510fcf2d12c6078f15289a2289a6b96da0d7098","sha512":"ea3a151f671611f444a92d28f4a75336871e051db9650a5796d10fd6953afd4d909ed0a72019c593c4ab349a37e1fa645b9034ebe2c8e51789c13bc924425b50","ssdeep":"","tlshash":"c2d027f57b7e2c28f9c5772b09114076d51a519d1b174716374cb4711f414d76495343","first_seen":"2023-12-03T06:20:21Z","last_seen":"2026-06-08T22:32:13.421615Z","times_seen":625,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 471\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1d7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2598725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OeXk8IKQhDIBZcy4YIhu26EnltoheKmVxspFOi9ZpTJEckfJac98ES4M2670dI%2FzMY6wfpMMPXA69GcH8xxP4jjeH5J8p1ZrqaCi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e2ae923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"a374da469b0092766df04e82df7395b0","sha1":"eb45c2343fe5d393fd00514fbdb97a99040cd0cc","sha256":"31b449e4ce6251985239f75992bc00b6b7d177bb15d9bf9079c2343c67d608e8","sha512":"6f974224effaf109f7222b01a000b044c59368d0f8355581f2f66a93a08df69ee796f541b7a98bc9ecd9e45be0a5662f210b8e476492b38e9307df131a960a0a","ssdeep":"","tlshash":"4cf054623a694d3beb7a61b2e062c752923188127a22d03500648034a87248184c421a","first_seen":"2025-07-04T08:06:49.890651Z","last_seen":"2026-05-31T11:19:26.383904Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/na.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/na.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 595\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-253\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kneO%2B4Q9SSBJ%2BTxiTJLdQQSC1TdT95aYxGw37lCQudTKoG0erEipRClzuGbelAW3t5IsIXDkOJdob4HREeP%2FvijsaPkH8b%2F1s4NG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e3aea23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"47a3ce7bf0b8c13d649ff5b837361d94","sha1":"2c3d51e73d6cfd52b7a9003c4f0117dc34e7e4ed","sha256":"34b19a62a10e62c3b55f767bec04298d5ef0d3d7153c143c16c60625851b93d9","sha512":"a146d5390bcdde04b1f265fdafe339b19d725ae5afe0045925714a6cc583baa7cff5083ffcb920e372f188caba05197288e11a8d0d8ea807a4222cd30c9cde65","ssdeep":"","tlshash":"55f0478378d88d3a7e06dd30875d3d53770001cc81444483154e22b6915a49e4dd84b6","first_seen":"2025-07-04T08:06:49.971821Z","last_seen":"2026-05-31T11:19:26.406732Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/pl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 98\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-62\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1815785\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZ8yEzTYr1s9GgaOjBv7eCiJBoWD9KvK7omUgvc03le2gwIrymD%2BfGUJDVnyUJKzslD0AJIdYxwto6n5CYV3I%2B9GhGnF8jSuSHIO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e7af823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"ff792ee41b2c7ca1a07e3ed13e4a81a7","sha1":"a1b754f6d272423a13752616576db8015b35a21c","sha256":"7cf97156d1bf9045a798c475f59dcb75d541e7b8c6673ac8388507a9c5d548a8","sha512":"a5011e53b0c0e84edbe7b3cd64c336f3d716929547cd94c9025072f003609f047e1d545113172b96323fc6a9990da69abb4d5c14c86a9b7dbc5ad7cbb7c09cd1","ssdeep":"","tlshash":"41b012e55614adf0da641d3763184404ac211d610790044b1c15c835b022015d0e8746","first_seen":"2023-12-19T05:02:32Z","last_seen":"2026-06-03T16:44:25.921441Z","times_seen":163,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ve.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ve.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 198\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2546977\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDxrqWIipGRiG1c9%2B0BTB71LEKnFekweSuhoa734NqJL%2FBd8OYUXU%2FkzY8KyPUIIROjpj5JWxb3D0l90yGdDq85gK9Wi2nplgyq6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0fbb3623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"de493561ca8e83c7f48de37bbc7e9322","sha1":"45bd5af5e1bebb3f1032a74dbddc51f24a06cfae","sha256":"351489ace51665ce005e2756a1d406ba0b2fd045b21643f1a2ad809ae170f95d","sha512":"1d648beb1708b2b87225fd68dde1498defef5b17f87a67ec4ff677996f1d85de2d21cc08f8457bd9e9489fdd1192f0e9e0744f72b5f1c350649687edff34ec1a","ssdeep":"","tlshash":"27d022e2f1943d2c5e021223261564208eba42603c101ca2796acf8608682afd482382","first_seen":"2025-07-04T08:06:49.882794Z","last_seen":"2026-05-31T11:19:26.350499Z","times_seen":29,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/au.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/au.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 393\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-189\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2329378\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHGdL2mjwInG2CcM8p1EGT0OcusQheatg3L0kVFq18inUHR9CPIDRRnaj4ALVoBxWqpHmyrwT3OXGf6SAlQA5Bp1Ne8W9jp2y%2Bhx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b6a4623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"789d91cedd2ed1c71e0ea0f3d06ffd2f","sha1":"dbd987e7a37c86c71ebe850ba8ea96c15466e1d2","sha256":"027d7336f87964df31cec7c8c3aa1260104c8c9e68f0be532f7245eb7a4d74c3","sha512":"1261e25d0a9a74318307a5c8457b1a537fdbfc2330c480868a5b7f66fb45121aa4713b3e5ba71369e5edd5a198ec4e90d89fb030b16a812c41c19b7d3766f421","ssdeep":"","tlshash":"83e0f1c66d7a2cbce5407823056c50e365b7191d2ba281021dccc51310a205e89f9397","first_seen":"2023-12-21T03:08:36Z","last_seen":"2026-06-08T09:54:51.705018Z","times_seen":86,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /?plugins=forms,typography,aspect-ratio,line-clamp HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=forms@0.5.10,typography@0.5.16,aspect-ratio@0.4.2,line-clamp@0.4.4\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kzkcm-1771482148369-49487aa3294a\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pbb1LtGewchWLWvscXgi4BxR7HEMGiivesiwuJGO962gQhwtEgJz9QqkeChNmXGJKLYE1lLF909yyLdPHIWCCgnsOTxtqq7FgSHUcZGAJNlRWA%3D%3D\"}]}\r\ncf-ray: 9d03adfe9db9a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511274,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":51,"dns":34,"connect":1,"send":0,"wait":17,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Feb 2026 06:24:10 GMT\r\ndate: Thu, 19 Feb 2026 06:24:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b8d3b4b9d4ee8cae44e2afcef48e7a93","sha1":"ea3c361f22fa31fb8612dd2ca30f1ac7ba03f75b","sha256":"7c966efd5a04f87920e8cef5c332c73b0d529b21c46fa312ff0020047d882c35","sha512":"7418cc24da4237fed57bbd3e92618985c30c29ab320908f146d0fe954c6a49e179007537480bfc7f2bf76e76a47da055c6cb6fb2744991e0c3a471c88fc06f08","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHYNCbOO3L+:vXuM0p2+g7GQK","tlshash":"c2628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T12:17:30.699497Z","last_seen":"2026-06-08T21:15:03.028801Z","times_seen":2411,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":314,"dns":1,"connect":18,"send":0,"wait":61,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Thu, 19 Feb 2026 06:27:29 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJCgH3JAAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f7542061bcc69c8bac96692de7d62a\r\nx-77-cache: HIT\r\nx-77-age: 36\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":35,"dns":20,"connect":7,"send":0,"wait":8,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 723\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-2d3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1825422\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2ksml41H6pdw5m%2FwCruDDhW0p7pf0kmdjG5MrouIWaWFZKZrFgpuuYd5WGCiGpaXW9opXJgO2%2Frd9sxtNKFa7icSHw1WATRMsRk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f0b1623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"3272f889a46267e29797af6775fc82b1","sha1":"8ebe191f3ac73835c75194950f82c14fd712af07","sha256":"fadf8000d2bb6ff805c8cc03e5dd5dce8e53334664f7dfbb0f81a76096f0b7f5","sha512":"ceff214f9513ca16c64b5ad57ae819b84ba025337e4286e332c9d41166d1a895e85680730d0835f673ec6a30a3e946d070890a5b515a9631667c61eff4797d62","ssdeep":"","tlshash":"2a0199d2745c7d7042e677acefb15af3413556381e684c5653e2c3eb5eb310202c4352","first_seen":"2025-07-04T08:06:50.036118Z","last_seen":"2026-05-31T11:19:26.387175Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/tr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 279\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-117\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGRP0UL6NfpLzz%2B%2FXnm2G7tsRcoAku05ngExVsjefgfMYSzqjhit%2FB%2FgwbMVwp%2FB9RQlzyert%2BmwoiVX3kOlxWMTEzoRWutNqUue\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f1b1923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"ed12db7842a77c4c5dbea10cb5ac3cb0","sha1":"9cfc356eb8019af8e91ba524197e4f783ce5c3bb","sha256":"ff9f42a374f310e7f778eac16582344a816e84ea466925c196c6659ed3d603ff","sha512":"f9dbed76f6877a3739465ac67e7432f9b0b787b3de8cc2c5a238b77cc0e63db924fd029700569db80d52530a66845f8c9ce3c0096045abcece39ce6e4611296b","ssdeep":"","tlshash":"c3d0ebeb480e98679724a363000a08809e6393a2c073c8504880e8073a12163c241cba","first_seen":"2025-02-12T08:32:15.789352Z","last_seen":"2026-06-04T12:01:41.908535Z","times_seen":159,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/za.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/za.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 401\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-191\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1120946\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u06bMH7C5gTed5e5NpXcvO1Rimj%2BluALr%2BZZXFpm9piHZyz0NlP1OGVwXCzPLglIk94r%2FYAtvgQs9%2Fg9vNauXj3c3bFlEheMuH%2FI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae100b4823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"5ebb7b9fece7efdaa81cf27fc934efc3","sha1":"ae4af28823bc5bcdda25c8ed1376c8aad60c2679","sha256":"8b4bf6a93680f7156356f109f664a7bd0e2df48e83bfc449f0d945378b06e9f0","sha512":"9af9b03b46804cc4c6744ab19a45dbf3380ed2b590697bb3f8a94dbffc78e8f8616010c4a0eaf02267da2ad6d185582c12952fed96ce3fe0b63184a3f35f309e","ssdeep":"","tlshash":"e9e0f1a358400d1a8d4010566d4640ccf16d53c22452f473d6ae8c7d1657908e0dfac7","first_seen":"2025-07-04T08:06:49.944426Z","last_seen":"2026-06-02T05:38:09.553735Z","times_seen":52,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 293\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-125\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1805819\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FQiyBm%2FGWiPYQXHwSnzb%2FrKFMPW7AG3Xw9c3VSum8e51ud3azWKofsgEhq46v7f3qijFKu4UWk8v4OuGZ77KdEMTH2UrvrnKS53\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dfadc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"6847b7b87e57174309d17b2076fa3ea9","sha1":"5ce90b9c8409071c6c0a650c505d9f47c5a39a82","sha256":"08abff58abf4da5ed0311b4e8884bca551289ac650439cbe0e5119e2231c719a","sha512":"6832e4a1fa9c7d1e37051a69968df7aa10f83485ce3aa1b223bfd7712c7f9bcbce5b1c25708c414afb5019420eb5a276bdda02cc0d2b9d497ffedfa8f6e5a146","ssdeep":"","tlshash":"5be0ebfb230a0c3e8181c032c2ae30848c3118028a07cc9dc048c135db470416bcbe1f","first_seen":"2025-07-04T08:06:49.993434Z","last_seen":"2026-05-31T11:19:26.378654Z","times_seen":21,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/mr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 237\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1636318\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBAU4CTr6eXwOeCQVLlCbC2%2Fh6hNJ5BtdD354oWIKo6U%2BOUKl7kaKAF%2FykZWQePFLc7WL1o8dfbMR49jtsjaR%2BA7X1Wwr64nJ7zA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dfadf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"f5d3e8e98891d5d7ea0184cb958c186c","sha1":"f4ec674280ebaa6c43308f3ddd83826ecace115e","sha256":"9700dee679589b544ed41dd3d2e2d03794fe6d0ae91be1b4051c9c291b4296b9","sha512":"4674a7c3daf36d17cc8c13bd4e5cc0863c37cf9e25973a64f4cc65cde5cf853971c7c097b877015ec192b638f39c81eeaff8352c36ce095c92c888b62750fa54","ssdeep":"","tlshash":"a3d097c273812cf9872060319a7f8824847300f12443c0802d4ec11194296280289b43","first_seen":"2025-07-04T08:06:50.039571Z","last_seen":"2026-05-31T11:19:26.409951Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/uy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/uy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 304\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-130\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 808764\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ch6%2FP5raZTilJrEZMe1rNr6JXnY9gXaFsKL5%2FK0Xnw%2F%2F02bzH%2FzugPVK7EBju2g8BD4PZ3ZjDevUAiZPp5U09UiWgPcekMfEBjTc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0fab3123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"99f87d793578553e1675c35cfe9847fb","sha1":"5383686de61a1e906f431474115a063d245c7be2","sha256":"8fb1094bdfa019ef8feb321c489a3f3032a6ff18f92d4c1024b968201dd21777","sha512":"736a12af1a7786ca7a2ef1ce45a8465c59fe49a07e1c11a4d80dd190ebd71f3a2159c93b643df44cfca74289cc0cf7f0eba2531a58f3242b339607f0469fca8a","ssdeep":"","tlshash":"a4e07dd7a7926c90c16c03239f06a1055e420950413a658407024c395e61541cdc8bd2","first_seen":"2025-07-04T08:06:49.934725Z","last_seen":"2026-05-31T11:19:26.421234Z","times_seen":30,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ec38a0.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ec38a0.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 27932\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6d1c-NwTo5bWi9RY9OQ9mFxZBWa1S6mQ\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 28957\r\nx-served-by: cache-fra-eddf8230125-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27932, version 770.256","md5":"7daa7b5691db2523c5103fc5eb793811","sha1":"3704e8e5b5a2f5163d390f6617164159ad52ea64","sha256":"ddcba12747e062e2f09ee1d0172eb0ba75145d0b9688e5a7033798f56b7e299c","sha512":"af6979e0fbfbd32867dd91b852732531945b18db60b99f5784dbfdd8b8d42b79031b66d511842821d2a7f89ebcf05ef02be5801a988206467812f15034b3d645","ssdeep":"768:Dl8U4uqa8B5xynz0bqA2epM/wLnFte1qOlqwErHh93ahkm7PX:DqU4bPxynz0bqA64zF8O9CLX","tlshash":"55c2e17f503a9ea182bf9134bbe1f3ef87688c782f36d9d978d5c82451011053d98c56","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-06-08T21:15:03.029948Z","times_seen":1215,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/af.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/af.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 655\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-28f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1122112\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cbFjA3UmaWlgU%2BHm5wKebPdLhlLzCBZfeLtg%2F2zfWvx7aWj2iEKpOMu%2FVeQt9bu4XHoB1ifmBQf2V%2BoNbji29yeIqxozjrdiexN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b3a3923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"cc87302deb32e2a6f3244fde58417b10","sha1":"30b4eb000d69e3d1a71856ea217093e8921e1e0f","sha256":"a2446e97066549f2901eabc81fdcb33e058647e0f0dd471ddaa85f50c5e18a27","sha512":"dc25c9c8592b6e6f08b59c516ab4e533b1c192cabce61aa047422b6feb13a54cca09a59df2db61c396f5f5a843540b38ba7266e7b244bd5fcacaeb1e2a26268c","ssdeep":"","tlshash":"d8f023cf1a591b649265c5d5aa067a3df93244901250b692925c10b069abd4ceb8c129","first_seen":"2025-07-04T08:06:49.893587Z","last_seen":"2026-05-31T11:19:26.326817Z","times_seen":25,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/cl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 180\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2512381\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MYwtjpXbIa62wJYoXQA2M6Om%2BDuhIF21MqDrp7swag8V1UHPDxgNLjZ2JPxY3VqnLSNxqPsTkYl%2F1od2kOCUHKIlR%2B%2B4rSNEWu0s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c0a7023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"7f0c5ee2415d9cc5d19bc5800bb34c9d","sha1":"8c916c1a3596251ae32d0414945c27c9b677544c","sha256":"9337f13abffd762d08cbe877fb71ba9b1dfb03401583e9c67310c598192a236c","sha512":"2bc3473c3b4d1c4a90e0e2a71e0b384f49b9324cffe5b9eccaa9157304757b57a5c34a7c4f88e00d2e328f9a374a1022509d097f3f0fac10029615b58f81fffc","ssdeep":"","tlshash":"7ac080d7a1f0bc33a35e251331a074158d36d04ca1d146906878863e371846657f87d3","first_seen":"2025-07-04T08:06:49.975304Z","last_seen":"2026-06-03T21:27:55.377185Z","times_seen":53,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/hu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/hu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 114\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-72\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 937136\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AW1DGGS7lkdnRSGuPUKEtJJVlBcTPu2vzNOsmPYiI9Owe%2BEnWMfT9Y0PsSMgqHGG%2F9oOkKM8wPGjumxNvlj0i795emj%2BZ6QdE9IU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d4aa823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"dc14b69c6933e8f2beb73eea8c8d3f83","sha1":"8568c37d9731419fba95c23f9bb0385134378671","sha256":"6868cbc41a35d95893901775790658b7560195bc6f01bc029df3d63a3ef773e5","sha512":"20381049fd0025b5eae8b126f03d5acb8204d34eed3a56f8501b6f049cd08c3e4b023c8758caa5dde0a046e10ee4f929652cbd45800c4482043b38091ded0cef","ssdeep":"","tlshash":"a3b012dbebad7d35c6ab17b602180800c5352a365a37200e04cfe8d78850b4ea04c283","first_seen":"2024-10-31T19:28:53.270075Z","last_seen":"2026-06-03T16:44:25.950162Z","times_seen":80,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 487\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1e7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1981998\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nC7xv3cbTc4B%2BI3tb1ma%2B6v6BXGZ2fjaLhiObKu9rXdL536ulEMqVt%2BpPolCdIj0SLi8GLorHxznZR%2BhSzJUx1lJoMaxxeVrIbFP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0ebb0723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"166cc06b7b096f5bc25e002e557bff07","sha1":"64263857615bc23215f4eea5f51ee221fc620d9d","sha256":"31580a6853e283e2394e4b7846194ea4c2677777bd0ed01fd9ecd771dc8b979a","sha512":"8f3d7de80358f67765e0aa1209459071824f2f21abf942e894e0cdd663f231993d35df98ce011893c56a8932d3f11ef3db02ede76b992e0ed823975f03f00081","ssdeep":"","tlshash":"f9f0547c42d40874f1089905040c2922fe42d589ac164e7901d2c03c8393a3612a628f","first_seen":"2025-11-04T09:03:44.048707Z","last_seen":"2026-05-31T11:19:26.463012Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/uz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/uz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 179\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2311689\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2Bzd5v%2F3F5n7MHEp6BAcWuugoFXbdlp5ZkiAwkCEWR0RffCfHHmpyg6CFRgtGkwps97mdHloWYtxNkpIQ5Dx9%2F%2BntqvcF%2FRbPrNC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0fbb3523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"51ac31811d9d530c6007c0bc4f30d74c","sha1":"ee7f9430ef6a3e4bb3b5bcfbb3c5f3f5ac6bf93d","sha256":"6081fb47a37dc99a2568e5237fdd5a8a3536ec28ef195bb8b712282f81075ead","sha512":"463e297a9783996654268d67e7c2a04f02b13b39478ac04caa2efb0bb5922cd88252d9204e75b0ad7ee5b5b41a5ac8c9a420b937ba1d4a9d18f79bafb12a2912","ssdeep":"","tlshash":"91c080d2ad5cdd5fcdd5123b47441d41dc423d3553311d170249b434759427a60cc597","first_seen":"2025-07-04T08:06:49.988017Z","last_seen":"2026-05-31T11:19:26.375234Z","times_seen":33,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-bc0b04.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-bc0b04.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26656\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6820-SMFvkM58uR2+ABgGO0a80wOsEHA\"\r\naccept-ranges: bytes\r\nage: 636\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nx-served-by: cache-fra-etou8220141-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26656,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26656, version 770.256","md5":"bddd68550c2403bf538971f8d2e790d2","sha1":"48c16f90ce7cb91dbe0018063b46bcd303ac1070","sha256":"7b28a4ebab92341a419dc2c940cbb6b95201f16b1d003b105609c5fae2aa3d5d","sha512":"e767fc34f01ef88b700960c4b1e61854bba8dfeb7bd97ace276d482b8defbbd2ea688a90eb269902903774d76434f36bedf396055357f0f36f01b0d69948c8f2","ssdeep":"384:AkE8BKRW4y++gMXqD+DCqeKxJ/Bift98A1HXq7JLPJwNgDOb5/8Q6/wfOnS:1E8QAqD+DCqeKc83DPDg5/8Q6YWS","tlshash":"08c2e221a8353b2b05f7a10a6b535b1af4c6cd3c658e56f141e90b544bbc31b2f2bb86","first_seen":"2025-03-27T02:53:39.606681Z","last_seen":"2026-06-08T21:15:03.038863Z","times_seen":1233,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-90d968.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-90d968.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 43440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"a9b0-n1CRkhNyXmK78iuFVzStLVUB2kU\"\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nage: 4611\r\nx-served-by: cache-fra-eddf8230034-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43440, version 770.256","md5":"f768f9521e641100dbb7400b46d4aa8c","sha1":"9f50919213725e62bbf22b855734ad2d5501da45","sha256":"d4929f4afa91d468ab332ef629d7d5027495755ab17b415168f233cd203fe01b","sha512":"51a6c9d2a84fe5194ee7642ed97fefc7aeb0bdd055cba73f241e7eb2c3c4488f0afd28fba09885a5ee280a9773a743f0bc1e72310897554329da30c9b5bb5ef0","ssdeep":"768:9YpFF8WEE3j9oIra5zYfCdz/gdGSN9ybkjJCywqUfcP6ahXIfuDF9D2npsjkIKt5:+FIE1raaqdzkGYYqgcyahXUsjhcWuKIP","tlshash":"a013e1315f848a74567b5a22334653e8973e602712c8f2289ec3aef54780cf86d7e687","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-06-08T21:15:03.030531Z","times_seen":1241,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/bt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 609\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-261\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2241714\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOd0L5h%2BFHzY9qZEQLwsxXLDVSK5VzJ3GkQIDZAqu9YTskvgEpYKbQFPhpTSDJzG4L1wGn8pDhFhat99RQqMvoVCCxWMuAC97U8u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bca5d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"51c578f8685d73bd039f48681d19bdea","sha1":"1b104ef08610f4cc3b798e3b5bb7454cd652ac76","sha256":"2698bcaa5c6ceb6b4481068046476aea05cc0308b853ab21bf59b3d8ff69cb63","sha512":"4f7d3947c069675aa5ddd0bcd955f9afd6edeb5728a16c93db851a70c87e3b1fd8c646f64327cc3d9d5f59fa94cdb84cf2d10d728eac133b239fca79bfa14dd2","ssdeep":"","tlshash":"93f0689611c7ac9cdac488205257044bd40f050444a443160c950ea6046de7930ef2ba","first_seen":"2025-07-04T08:06:49.963186Z","last_seen":"2026-05-31T11:19:26.464586Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 119\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-77\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1896585\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flGyVDHhqS60X1hh6kFhHVCvl0ozCbh%2FhHbVHWt%2F5XZUAMHGnxx4CFYTV%2Fh1bFjr%2BcqhW88XHtf9dEzQ%2FRvvbtN5hGuEKUk%2FkDop\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d2a9f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"9547be4922f3531ee8134308cdd99ca5","sha1":"37b1efa995490376c0783a94283d679f86cfbe83","sha256":"281225cd0fe560a8767f75a04f6837b7b4d74afe3a08981adc16126d092c68ac","sha512":"713f706a819aaa3a88c5449d80ea0b48fb0b1cdf70a7300bca9e71ed37791547e0214aa7fa760a37e35e3535c553bfe4adc9f456f9bd11ae7968fe39fb55cbbf","ssdeep":"","tlshash":"02b02be516403c2547421431216c74b15491432501000642383ecd156110005c4d8243","first_seen":"2025-07-04T08:06:49.91917Z","last_seen":"2026-05-31T11:19:26.323343Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/hr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/hr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 336\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-150\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2429215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkpLvclVAZv0GGmYLEG6Hb9a7VLjh7nWea7YVJz2IlGX6VCzMnNMHuKRzGbzfdNuTSdhzkdCuUbLpasVCEAAKpBrkzFMJTVXPeRp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d4aa623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"20f4ee2a7889932d77e5b6e0e2aadc42","sha1":"8aa95129ea13c2b775794fea0a57ce92306274d3","sha256":"5cd7795f670dc14e83b97cc49403b011f5aa91bae36247be1f1aa0cbf2597fe9","sha512":"f04cd90bfd87f27afcd58c14ab789511d1645e01c794507af8438f54ea9e261c33476a36af42cba065bd86d50133a0fc93c101ec248a12185e46e4635b31b714","ssdeep":"","tlshash":"0de0c0f77ed2cc75f8e40342ca6b05e02d11ca181934a1422700a006f250205218d2b1","first_seen":"2024-10-31T19:28:53.345658Z","last_seen":"2026-05-31T11:19:26.371352Z","times_seen":65,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/iq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/iq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 194\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1531638\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wdhwFUkzHuFNzrybrvzVXvgyY8hs9vnlW%2BvygWTt0IZVtWXPNhXB4eQZDVIuKFdadtIk9t%2FHhFYUIlhDxTTUSXBhx5mLRQ%2F6qa5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d6ab123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"74c4af0703928651a4e9315e1b9c2845","sha1":"067b894223be32988609c3043438b22307c5d094","sha256":"cf2096fc59758a1ce95e3127ce92170c4a5597239235e2c40cfa7a6510a5405f","sha512":"2d126d7bde977f0477235ccf044cea7d1efb17bbf9af29d7ac2ff0dd04b00e412ea6b212452976baf7adb7f373a9319a2b1e9257056861692f174dbf3e37e9ed","ssdeep":"","tlshash":"48c022c33125ec28ab8c0131006cc04e0f1f043b18434d09da8cc92e2a0020ac4c8bc3","first_seen":"2025-07-04T08:06:50.006754Z","last_seen":"2026-05-31T11:19:26.499182Z","times_seen":67,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/md.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/md.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 299\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-12b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2042327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npbu2g03tlbvLk2KTC%2FLW8Dmlce4KRKsajVuoy4EFlZDlTZ3GdmN3HB%2Bt%2FepX7u0fu%2FN8AxnnUcBsfvUd2gKpFb1glGgdmK22TxX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dead723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"80d85acfa6a5663aa076012f7a207249","sha1":"71592def8dc60ec96723116d998e7144cff40df5","sha256":"a78639f5a474381090c0684b1bb21524fb9f590fd9be1ab50bb04685ff7cb199","sha512":"f4036c6e3f8232fbd0d4a98d3be4736f8d1208a0538be8a16f19361b675ec20cccee7f25614a55f83f89b52e117be9f0cecd63f9cb1a6015393551e63e29a3cc","ssdeep":"","tlshash":"58e0ebfb130c2ca3c20a21bb81a3123bde91408a12a235078adda2560e824e6f4ccc77","first_seen":"2025-10-15T14:33:46.209085Z","last_seen":"2026-06-06T01:32:58.548306Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/rw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/rw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 178\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 818768\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJAVzecsL7Lh6x%2F16xY4JdjyITHzzSnlfiaeIRdP73R6Q3mUdL8W5HUmghsYzjqGzS3DiYu0WDIe%2F0q4IIYZfQa9CiR9nIY4h7kR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e8aff23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"c540b174e946f94bccf65e138a3e449a","sha1":"a6eab5ec2583e9c6a4f24be931a85f15a10a8d5a","sha256":"1687269932adf91e21b7084543da936341b7a097b5be8ca6913cdfec93913c21","sha512":"8e646302e4560d82087028d46ed1869d632e0eeff94b61c3c0c64dfe1510224ad9cf634b867bc5c18e0e9e41b5b77864ff347dd6e62b2ee4743db14e6897ed29","ssdeep":"","tlshash":"9ec0c0dfa1143c2f5e80132743609014f0300cc4200072c08e00823d1630019f0cd283","first_seen":"2025-07-04T08:06:49.977904Z","last_seen":"2026-05-31T11:19:26.404061Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ca12ba.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:11.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ca12ba.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28692\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"7014-w+zU/QyRKfuJKxX55Qw5Y5rT45g\"\r\naccept-ranges: bytes\r\nage: 989\r\ndate: Thu, 19 Feb 2026 06:24:11 GMT\r\nx-served-by: cache-fra-etou8220164-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28692, version 770.256","md5":"f26a2ee466e8dc9a7648edff4f806a80","sha1":"c3ecd4fd0c9129fb892b15f9e50c39639ad3e398","sha256":"609ddde20d5061b1d72e72b510a96fddae68a66f7310fc8dde8538068252bee1","sha512":"04701e0aadc299aa3f1a2cf7f98142df0382724d4e40304552c4664652d8f5582778532fb859deafc0f077dcc52c8fd26be1d9c388a95141ad9f178f59bed0d7","ssdeep":"768:HcMQAT61dcVgHpboFLHiJjAbLS+q6zpE8klG:8MyAVGpC8cU6WFG","tlshash":"acd2e1a8f9901331ff9615b0fdcb8069cac71cb57d7685f842fa6ece49c1a2c6da4106","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-06-08T21:15:03.043Z","times_seen":1236,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"open.er-api.com/v6/latest/USD","fqdn":"open.er-api.com","domain":"er-api.com","tld":"com"},"ip":{"addr":"104.26.4.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"er-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 00:21:57 GMT","end":"Mon, 27 Apr 2026 01:21:36 GMT"},"fingerprint":{"sha1":"0F:2C:D1:9F:7D:61:CD:78:61:7B:9E:DB:60:82:2C:E1:3D:9C:41:4E","sha256":"7F:08:D3:7E:8F:01:C9:4C:6B:BA:9F:27:5B:EA:5A:A8:73:70:1B:A3:9C:59:C1:98:3B:4E:8D:36:D4:FB:64:AF"}}},"request":{"raw":"GET /v6/latest/USD HTTP/1.1\r\nHost: open.er-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nOrigin: https://northwelltrust.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nx-content-type-options: NOSNIFF\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Thu, 19 Feb 2026 06:10:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeqAS%2BcdANWaReon227iJY2yZ0%2FkyXGHTnGsgGfXRaTBvJIGYWURYFVg%2FUT9%2FdfOmw4Am5t2P6hm3QXc8%2FyIpa5zW7MJu9umPRyGT3eQ\"}]}\r\ncf-ray: 9d03ae0b1d58b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2966,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e2e84aeef21586c813043de3682f75d","sha1":"5bc5f841f647376cd7382d15df790a9c22a4a6b6","sha256":"2d71f4940cfc07a892d4e0fb1714509e24945ac1f72e382c52b9b9864e9333bc","sha512":"e702528790b8c787e77060ca42b511ca65d89e7107b9b9a819ecee180e9b4b433910dcdc805dcf92b876128fab8fa36994506cf5c81614bd76f5f8343ad965de","ssdeep":"","tlshash":"4551b580cb2211d813aae0996db15ee63e2a314aed83eed3f4085981f4548f3724b54d","first_seen":"2026-02-19T06:24:41.370583Z","last_seen":"2026-02-19T06:24:41.370583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/fk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/fk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 637\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-27d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2464286\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIl%2F9GoN%2FmMHzgmC5r1ToXazYKi3P7h8VzqK82yE46%2F5QwtWe%2BWhJn4BfiaRWF9RIWXPFwhNcVgr%2FZgXZn0z9i6ct62bi3jPTqyT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0caa9423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"94bb03bb69ca504be53a917de6b325d9","sha1":"7ad7b5badc2b177486a99b1a2184508b91173076","sha256":"4b6d1aa595583c55c860fab299eb9c1cab6617b42d67732de84123d2eefeabc4","sha512":"0e961570dda2ecf4a5e67edb882638bf40ef890a1013530ea8058e05167b90e2283726905f837fffdb5914379a7360b5b506328945be7550512cffcc80e3f102","ssdeep":"","tlshash":"5df023c44375afb002e2547c82471e5b4f29253a5790cb86e44ab017866218cb575bcd","first_seen":"2025-11-04T09:03:44.094118Z","last_seen":"2026-05-31T11:19:26.5059Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/id.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/id.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2605739\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2o7jp8zEhjTtVZb7V%2Fb4cGIh75HaD%2BhJkFL8FFHhvUBzeb0%2B%2FksI2mUal4PH2CDEcxZmfsNZEUxKYHHfLwaDOInvP8aO0W8i8kI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d5aaa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"2f63675132fcc40546658e589d7155cb","sha1":"6736b5323b829622b1f8edddc4133e199b0f3cc7","sha256":"b2cbe304f50cdb9dd976b9221512116318b608c2bd6dd44ab67b66f739e86064","sha512":"5ca5c8f8653cb858018a977751b090d72c9456c09c96dbeb2c89b30fc31eb83211f529833ce3c8fee1127b45230998b66447576157c8cd3eacd56e1928f70263","ssdeep":"","tlshash":"f0b012c633000c76c7504733f504c11dee35015505268007554cc62f6190409c08a9c2","first_seen":"2025-02-12T08:32:15.807327Z","last_seen":"2026-06-08T22:32:13.424536Z","times_seen":90,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/kr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/kr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 556\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-22c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2412960\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAm03Us8MoAw3UlvMBPvtzhz8HBGqbk6sS0b6HCyt3Jbw9qcnczXzQELG%2FYoMTkubnmMZ6BT%2FWGUiKvOG0rlH6yKhTe2S8Mrh%2Bbd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0daac523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"2cc630642583d04a3600c322a657cc95","sha1":"b3bd5036243125c7eb05624202bfb544b2fd84c6","sha256":"e4da4c40c5f0a6e69c2dfa07918d487fabcb9a2aa64165af04f8385afba79872","sha512":"0935359ebe2c76d6ae3f57f16f5aee3bf613ec291218cfb7f47b60148e2003bb3049130d3f6ffe67d2d4315f274db4915c18ddb61c063479d78b73c32d0c586f","ssdeep":"","tlshash":"42f026501394fdc6c1415637f1385957c476bedb517bc02e5b024b31185228d248c3da","first_seen":"2025-07-04T08:06:50.041268Z","last_seen":"2026-06-08T22:32:13.416099Z","times_seen":96,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/np.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/np.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 706\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-2c2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2041888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AT6GpQ7EuC4UiBHYaAD56Kl%2BCXcECjPbussm%2BLX1zBuIlqr2SiNpCq%2Bxr3UYDKplzAJVgEmO4fBTpKSlPwx%2Fvq09mqphNepQo5Ct\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e4aee23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 49, 8-bit colormap, non-interlaced","md5":"bf7cc5fff27af5b2f0555a39c515baaf","sha1":"8182a261c19bf17a719c63631e1dcda92ca7e763","sha256":"e1372c3936660f2243913c002f6f02ae391670430b3f2b0001895f689e24f104","sha512":"7a613457fbc3e1b5325516f4c006030ab2700274dc158af73e452683eede16324e54bf39faee82b451fbd6046d7e955bb5f380cb2eeedc5712124c743d77ae88","ssdeep":"","tlshash":"540144d3d174ed352319b57aab678104c4b33b22574662f280112c5ffae511341b0787","first_seen":"2025-05-27T23:39:58.556196Z","last_seen":"2026-05-31T11:19:26.442199Z","times_seen":24,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ug.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ug.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 270\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-10e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2512920\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZH6F8JvrH7CMl48YkO%2BtXW5QjhfSS3K7KVLAu2bk8WNdy9Uxts18zZIb%2B831nFyEDceqKdG2cVgzFAQ%2BvCcle4Ddr5g71TMrD2e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0f9b3023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"78be4ae1d58437c2c23598c4b2eaff1e","sha1":"1c1dbaaabfd640f9f259fa4701928ae04011f18c","sha256":"2c642bca02821e28882fb27ccc248fca76057c53a40f65d505b7b07a4d8e6333","sha512":"3e09630839d34bc293d10febf7686cdf8d225350574ccbedf8338174f19674b61935de9be1a2d76cfe0815b420a8402ff8ed2fddfd48eac429e6466dfea5bc2d","ssdeep":"","tlshash":"1cd095e67eac4f3dd7c106b3977565d488f2624e434b820d1505dd564581004c5cddbf","first_seen":"2025-07-04T08:06:49.978581Z","last_seen":"2026-05-31T11:19:26.494971Z","times_seen":18,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/xc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/xc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kO%2BBw6bBr5xfaXkScUM87ogH4Sb0tKuySGy9Ggrc3%2FHzernqbQ4pjfSycWnG8Gk8Act6NeV67Ra1jbAe%2FOLC6U%2Fj34FUzUd9q%2BWt\"}]}\r\ncf-ray: 9d03ae0feb3f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/kg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/kg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 306\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-132\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2417048\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MgJiA6BkVohguT7Xk5NH7wNgF6qzQYoXD4latlmQ62A5Pa26fJ2bZhyjdWN15JGeqXXwIUEH7eF983evkb%2BxQpnkglVRf8i4g93\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0daabf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 8-bit colormap, non-interlaced","md5":"050cfc37740c78692bdac4b24792b085","sha1":"eefc1fdfad7c0d4fa71791eee60692e144f2d762","sha256":"cba98daa46d1ddc10e9d64f1d989fc293ea926c6da68d9b086edd97378fa4ee9","sha512":"e4312f5b14d2b47cf9e405ceb00a542859a5a0a5289103c3b0a28380251e32f417d1c2a8e4d44d864e03a1c7ef2e7bb3910d6ba7274874b29589a7e3a1389ff4","ssdeep":"","tlshash":"49e02bfbc3a02a3f93f955e2aac85504d82785dadfe659239865b831cb7455ecf80220","first_seen":"2025-07-04T08:06:49.997598Z","last_seen":"2026-05-31T11:19:26.493091Z","times_seen":20,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/sd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 231\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-e7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2596026\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0LvkWZDFjDfiiTzeWptWkLyP%2Bgmi3VKzWXHkRLTKVz6WKIAbVWWXcwngdEZyMIJyf%2BsyUnddaZAvLcJz68VTxG35%2Fp48IBnMyTt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0eab0423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"bfc636cae70757f878d0c7cae90beb23","sha1":"e200d28d4fd272df0603d3cbb9ee8426931ff79a","sha256":"841613891b75eeadaccde5a89855d7147015394a692c90a081d746f6c88f900f","sha512":"0d05cf002a6d7c3fca452875e4e40b38435b3ffde3aa4f761e654c45828c6d7d79d0602c5263c085a1cc230bc0daf6083593cddc260b3a7990ec95ae7fcda7f5","ssdeep":"","tlshash":"90d0a7ab2399dc15874c962615b46d07f47a45345603dd944255e1162612aa88ccbe07","first_seen":"2025-07-04T08:06:50.023582Z","last_seen":"2026-05-31T11:19:26.336201Z","times_seen":30,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ca.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ca.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 286\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-11e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2162282\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57ZcTLpppFOHw8X52zZPEvKqhQKjmfNa1TF2UJLnMFuSHj2GsZlUAFwpPFW0bKcLRaufU49wwWf5lkaU89tdSh0Z41fwYblfFsNO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0bfa6c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"0a867d3850f151347bdcf48c254d30a5","sha1":"95ecd1576f3b7d83a078adb9dfa83695251ebff9","sha256":"c239959c36c5316ff09b76cdb342732ee7ff12a5036ae602a1f82fcdc6a2da0b","sha512":"99ecd4d33f281cc9462b0820b77777a5851a6942d87fa4604a0e5a4ce02e1c66fa9d2d35cc909eb82d0575dd28dc2fa25f0e560f17db74081c4635d93c40c8bd","ssdeep":"","tlshash":"cad0ebeb03942824e50dcbb6e688440fe83b710a0f298d000f47083b043918691cc30a","first_seen":"2023-12-21T03:08:36Z","last_seen":"2026-06-08T09:54:51.712573Z","times_seen":154,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/co.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/co.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 114\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-72\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1760431\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2k8h7%2FRlkSWcNQQ%2FZ%2BOceYwMcZ67Gy%2Fi2xspbSzPH15Ojn%2BeSkB9JRdnOmEN3IKiHyLZDqSCMrzhfzvRQuz4DQSLMr4Ub5DPTqz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0c1a7523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"0dd0a948bcfd860d1652494b0a043f83","sha1":"7ad884398f2aa5755163d9839218ce6d180ed920","sha256":"d519b8c76e72a7cc5d6bca16f24bf4b4cbffb1b1e31e138712264c9eefd9de7d","sha512":"425c6f95657edee61d3e62e8dc9b8acfa3b9ac120cfc9bbb38c211809d34a4b4ddbe0634036eddf66945edcec3998fe6023ce355e7787aec368c46b0bf9f6d88","ssdeep":"","tlshash":"6bb09bd666153c3947554019ad28c20294a61c6d5119155f29194955355141555c5346","first_seen":"2025-07-04T08:06:50.027977Z","last_seen":"2026-05-31T11:19:26.349132Z","times_seen":57,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ly.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ly.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 157\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-9d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1810129\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwMYnvizV2wIyxHLn%2BYL%2Fv9gFbvdILXYCl8kU%2FAO38%2BnNeDEPbwqm0Aii0Rqu1%2BxnZWGQgmdTD2kSYvgSEc%2Ba%2BRZMmo4RoD5EpQW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0dead523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"8c690f412b6338e5d2685c9d0731cd61","sha1":"5e69d0c2e561fbf3694a4760caf0111f74464e59","sha256":"3b9802244b6836cb39707222cc3c5c30e9a7c5ae66cf07a319fe01729fe5afb2","sha512":"03d9f83a9d4bda1661d0fbe3837096864caf21e3e127f51b8345da4d40975265b34e2c3f5c87da54223b8bf63e8a1a67f06d2be02cedc1a1bf575cdcbdaed6ce","ssdeep":"","tlshash":"f3c08c8735b1ad2ceb5626371508191aaa21d0665b24411a1088e04a2a459eb80a47ab","first_seen":"2024-10-31T19:28:53.330612Z","last_seen":"2026-05-31T11:19:26.361256Z","times_seen":25,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/my.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/my.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 268\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-10c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2425538\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xln1xbibszm9XIEl0kpRRFqPpI2%2FCLC6W9sJG0M2nhjTLO3B0X%2FRCdmn5pQ6DC%2Bc%2B6ePmqGZhDOVPNpSHnIDgONxHhqpp44u%2BUqr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0e1ae523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"e788bc83af68c6bf5dd46061accbf66d","sha1":"fd114c05ef4b098336fbb94dbf32bd54ce25eda4","sha256":"a475af354399c26ac818dd263a32ec366bc7f26d940ee7d034b072471dc30cad","sha512":"c64781d790ac8e1fcc76c178b902b7c8adddc1ee34eff0cdd932b0cb7c57d3322771a1b3366d358d2cee44f9f5e6274fd09a379faa1d8d9c5ab6c0f4bdcf268b","ssdeep":"","tlshash":"dbd02bda36d3be65a13153e2c9b4654791200265172a6ad04125b53291025a580c92c3","first_seen":"2024-10-31T19:28:53.263862Z","last_seen":"2026-06-03T16:44:25.904456Z","times_seen":62,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/so.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/so.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 184\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2598813\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMQ5CkX15ftmQAdUj4l%2BXisNn8ktrHnXzkBb7Pn8U0HvViqf96qRRoI3XawMIO1qbZr7iiMswp27DMxxle5bcEZz4wdAoujSqX9x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0edb0b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"51b33c96dca5f20e2c41278b52adea55","sha1":"7c5f7fec688a9df0682d8dea089cb57978b88822","sha256":"2e95bf8f21c3ef2c3fa15e3d5f38b65a61cf281836703b080a6071fedca6edd0","sha512":"dc8b40806992d882b5511b21c7aaaf8a8a70b69261728721e1745592b25db5fcb4428fc53936c1e32fff53c10918a377f1adc7a4bfbb6f2ca9e4fef1ec38e335","ssdeep":"","tlshash":"67c022c2a240bd3bcac122368080c0b6ec59601802a286092207849c146190390482d3","first_seen":"2025-07-04T08:06:50.008062Z","last_seen":"2026-06-04T15:05:59.61586Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ye.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/ye.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1020297\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNsoi%2B2yXqYArVARg2j83StLzMgn9qPGE8cuIWMAb1pwakkLqC1mwW5nBeiTwlLrSzBDtZmDhxpDD7gGC%2FBPYENOC9dLxl1Ot1oK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae100b4723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"44cbe61e176f9e7237f90407d3943abb","sha1":"e1715e93961b9b35be06663bc0b6bc981f84e299","sha256":"097d2e28c1bd4f53148ad675d5511ecb7379ece7bdf4aa67e30a30488f4b59ce","sha512":"2aaf4ac1d408368953f8fd6a1985091e51b890e9a69ad6882ccc07b92e6e956f2b1b1069fda68939dc624595f27e772432eb500fbcdc0bc395ed1bb51eb13236","ssdeep":"","tlshash":"acb092c762887c7aef2002273b204849ac11416503119143804a9a61160400ad088a82","first_seen":"2025-07-04T08:06:50.020168Z","last_seen":"2026-05-31T11:19:26.492223Z","times_seen":18,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/zm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:13.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/zm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 235\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-eb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1386586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Df02LSRkc9mDJChqIQlGzc%2Fn44DbPwoof97vbQhBswxcMT9neVTZelA7U5iYCaQXa5H8aFBc2u2zoGSlE8DrBRzFFwm%2FR9X1Tsou\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae101b4923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"9d9d2a3dade09cd246a9dc38d75f9f99","sha1":"8ef07367ff265d256153a3a5c76b1e991a6cc015","sha256":"665071c79e476f4f0266ce026c9b3d3b93d3e8961161d1dd449b93108afa32d9","sha512":"41a3603792d7bfc0eb93b42eb896345eac153ba4e8a2b0fa5ad6ca687ec33442d52cadd4c5f449aeb637c03613ceb13f383e96de0962d389e7263309c2b61c0c","ssdeep":"","tlshash":"d3d023cd549b1cb5c983213335594268e651187f156146d7e92881ef3d5d2b4c09dc7b","first_seen":"2025-07-04T08:06:49.987485Z","last_seen":"2026-05-31T11:19:26.351251Z","times_seen":15,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 188\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-bc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2241234\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qw2dIcC6IlIx4PmdG8vFv0z%2BaHZCepCxiF6ND%2Foj47Y53BTx6ueboXxkfb%2BT%2BVOHMJLVsAb1nr46WO9mSlbkXFb2bX%2FjYVsIjycz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0cda9c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"50d332b898b150c4c4e7409f80a46023","sha1":"57397b83cdd6abb4cc1788d1aed887feed512258","sha256":"a27b2da1026e3876decad1040981d2b96b6a38371392d233c9f1880313cf5876","sha512":"50fbac72c955e8b33237e8cb7daaed1383096150e10004272c4abc783b89cb0016fda420af1a78386e3faf9bdc4ef9eafba7aba4631e5b2c82eee3fe62934d57","ssdeep":"","tlshash":"4dc0c0f83920bc7bd36f0035db04a4cfd8b128ac21010d273d0c1425035a559ecee342","first_seen":"2025-11-04T09:03:44.043999Z","last_seen":"2026-05-31T11:19:26.34016Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/gn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 109\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-6d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2247742\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6c9KVcEbqMHBRlMEliC2FAG84fi%2BYaHNqP4MM0cMdlwTCopVIOEy%2Bb3SGqdk2lNPsT8k5NeBDwxVcM2PVfCLKbcM5GgU65rggom\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0d2aa023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"4b16f8bf0918b7901b8793a8c0984f93","sha1":"c40a0401f1829b87303fc11a07b482d86d208e2c","sha256":"3eaed8da6b86e4cd6c02d1a1a022d7af7d70adaa7da48c609a44dfeccf4444c5","sha512":"7283d3f05fe8d94ea555ce5ce7850487bcffedf6b247dcdec8b09bed88400c844414bb730464c7fe31d6d170b8c97cd72a15524bff0b0a51302bdab48121beee","ssdeep":"","tlshash":"66b012c1a3697c7dcba37d634bb80659bd75232e191887672c9d9310672210ac0c9387","first_seen":"2025-07-04T08:06:50.019612Z","last_seen":"2026-05-31T11:19:26.474819Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northwelltrust.info/images/mon.png","fqdn":"northwelltrust.info","domain":"northwelltrust.info","tld":"info"},"ip":{"addr":"159.100.6.19","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:09.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.northwelltrust.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 11:00:19 GMT","end":"Fri, 08 May 2026 11:00:18 GMT"},"fingerprint":{"sha1":"BC:12:ED:CF:65:07:EE:AC:3D:BC:37:ED:C1:F7:DD:5F:06:48:6C:38","sha256":"B3:5A:87:72:23:E6:12:EA:FF:CD:2A:31:E4:F5:4C:BD:E6:7F:83:18:D2:35:40:64:FA:B3:F6:19:F5:CB:3F:57"}}},"request":{"raw":"GET /images/mon.png HTTP/1.1\r\nHost: northwelltrust.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlFHWDlWK3NBL29YQTdFa0t1V01ST2c9PSIsInZhbHVlIjoiU0NyblRNZUVYcmdaVzZzdVpvRHJ1OW14Nm5ydHRtOGorcnk2SEdEdjN4OVBidTZFK08ydStsQzJlMjdKaXgwM01lY1NlUi92ZHJNY0FCWms5RENIWExTTDJ5emwvMEMyd210S3U0ejEwNHlWVDFqcVBLTHBsNk1rZlg3RWFVeU0iLCJtYWMiOiIwNmE1YzZjM2Q3MGFhOGIzM2I4MWM2NzEzZGEyZDQxNDE0OWI2YTU3MTRkNWJiNmUyZTczZjMwNTdlMGFiNTA3IiwidGFnIjoiIn0%3D; northwelltrust_session=eyJpdiI6Ijlya3l0Ty9jcUtxdVJYZmZBT0RiL0E9PSIsInZhbHVlIjoiN29GMHo3ellTaFRSSXBzcElrZ01IMkVIUWUwdjlqZmduY0FMOEc3K1VyS0lDdCtVYnNuaUZkTkJKMVZMQThGSk0wSDFXWFRBNVpJUTFwajhGS1JzRlg4ZXE1TzNraUdqRXpmQnBjMndMVzdKRnZTeW1ySVNxUFkvdlRGQ3A4QU8iLCJtYWMiOiI3NjMxZDQ3ZWM4NDA3M2FiMzU0NDkzOGE0ZDcxYjg3NTExMzQ1YWU2ZWIzZjIyYzBlMGZiMWVkMzAwNmE4MjIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 26 Feb 2026 06:24:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 07 Feb 2026 11:43:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2154406\r\ndate: Thu, 19 Feb 2026 06:24:09 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2154406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"1c9f70909822ed216a4945ee709fd8e8","sha1":"79709097a25cd2344c4fb0337686b7b6801c9eeb","sha256":"7f47f4e930914f98ab01701a7a2755e18bf77f947e4cc9e86554702ef2c40123","sha512":"55d17a23481fe3af06a39aebf59a7e0909409cc7299e90b61f62f9c145a35baa7abb3c535b23cf3069231f8cea26bc386a6d3af516dd44ef9301cd7019c4837f","ssdeep":"24576:R+YV2/4dsxzyrcybNZpNih9r+5tFIvA2drBfT:5xexkcypwh9r+5tFMrFT","tlshash":"df2533d4b4d09389cee2bc369dd80832a7b843c4655f909fd87272803bc8f57a54aed6","first_seen":"2026-02-19T06:24:41.543453Z","last_seen":"2026-02-19T06:24:41.543453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"northwelltrust.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/az.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northwelltrust.info/","date":"2026-02-19T06:24:12.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 23:55:48 GMT","end":"Sun, 03 May 2026 00:51:06 GMT"},"fingerprint":{"sha1":"97:E5:1A:B3:84:F2:6B:A4:C9:CC:1C:2F:0C:D4:69:CF:C4:79:1C:DE","sha256":"EF:AA:87:60:10:3F:E6:19:B4:27:93:81:80:21:B8:60:D5:77:0D:BB:83:21:E3:EA:F8:74:19:34:97:18:CD:A2"}}},"request":{"raw":"GET /w40/az.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northwelltrust.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:24:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 169\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2162138\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwO%2F87g%2BrloXuqJZ4YJavHK69AJ4kd9Gc0bIOzGCBZVLXjTg%2FyuUzIqyTc0kEp%2BST52jnx03uEubSR1kKSNJAbsQrtxY11NL2sBw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9d03ae0b7a4823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"0660d7fdfd33eac7b92040662d6cb12e","sha1":"3ea647f5cdccdba6810f35723e37b0235f4a6f09","sha256":"72052bdac6244d9b1dd4b32aa938f468dc2ab49cf23f7dad4787d3e04762f1c3","sha512":"2370e08c4a3bedd351dfa3e550e34dd131a55e9dacf4b1a98e8afd3102d914dbac1cf694cc9ab8a1931509a84c061a4db337e7b879059f282526b1e2ef8fa6a0","ssdeep":"","tlshash":"7fc0c0533132cc218141d733ca100804cc10728c103b012c0089900a8f7080dd2dcbc1","first_seen":"2025-07-04T08:06:49.97729Z","last_seen":"2026-06-01T02:23:28.142551Z","times_seen":40,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}