{"report_id":"047c146e-b870-4715-94e1-e9e5db642f3d","version":6,"status":"done","tags":[],"date":"2026-02-03T03:56:33Z","url":{"schema":"http","addr":"tes-terminal.com","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"tes-terminal.com/","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"title":"Надгробия от KRAKEN: достойная память о родных","dom":{"size":32067,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15540)","md5":"0ace9d93e891de264a00126e4f11ab24","sha1":"16022e92fb783e62defad06995f090608c1c5f71","sha256":"3e4c6b40387504eaebc1f9687e7b54991b09c2f88fca1bba911fa10f7131775f","sha512":"e882c462daa398faf7775382e6fb58946184373642c121014ba342b9102ad3c8c2c65531db312442662f7de07bad30b89b1ad56be74d4b74cde308d7a3aace82","ssdeep":"384:3/XFhnonTFEZ8nWZKJadLFFNc08FnVhgTmwaabfTSPuFmo8f01kHsG/UEboY5VCf:3/XFhnGLcFjc00ImwjbfKuF60BCHQ7N","tlshash":"e9e25ca29b8a107b26016068dd59790d3da7c0bfbe9e785277ec35ce3fd19b08917309","dom_hash":"domhash8b5c5285ae49cbfa3132834a68640b96","first_seen":"2026-02-03T03:56:34.141787Z","last_seen":"2026-02-03T03:56:34.141787Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tes-terminal.com","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T03:56:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mc.yandex.ru","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2026-01-30T05:51:48.679123Z","alert_count":0,"request_count":1,"received_data":254211,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2026-01-29T02:22:57.625465Z","alert_count":0,"request_count":5,"received_data":6508,"sent_data":5747,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tes-terminal.com","ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-07-18","domain_rank":0,"first_seen":"2026-02-03T03:54:24.996336Z","last_seen":"2026-02-03T03:54:24.996336Z","alert_count":36,"request_count":18,"received_data":890499,"sent_data":10776,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tes-terminal.com/","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1aed78a50e347a2b777df2115b3a931e","sha1":"1bce03c9d29eda67fbbdfec44a4546149e5ab4d5","sha256":"22571a8bc621f62250c027e6a4257ba9e486c68903f4b853950f28f03738ab29","sha512":"f01dfd827da196525e43a942597e5a1cb71e2850fd93718d590a2d1c68bc71a237b9a6e831b151f2b70d4ab81143794dbe443b59f5f0d4cd4b007ee4f9b30d7b","ssdeep":"","tlshash":"0ef005953cdd44248377116537fb9148783969292c0bfd15f54c84412f9deac14bb54c","size":538,"data":"","first_seen":"2026-02-03T03:54:27.531776Z","last_seen":"2026-02-03T03:56:34.185409Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebdb6da2c5b8bbe3f6ba066ba975895b","sha1":"a9b8dfc03f2451b67a35e46705ef80d07d7a120c","sha256":"1c40d9038ba32e18774f2dcb68a01bfb378e89f069d53b8d43fbb579e8f45ed6","sha512":"91d744f19ac9692aedc821a19042a43fdf9a9891afb9c86b2d91a979145e41b7b1446808a7f2cb0d1e384a4ece85120c69ff812282377a1d4b4377c622ee19bb","ssdeep":"","tlshash":"58600033300c0003cc0c0c0300c00c0000c0003c000ccc303000f00c0f0000fc30c3c0","size":15,"data":"","first_seen":"2025-11-07T18:36:06.466308Z","last_seen":"2026-03-19T12:19:34.895414Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e9cc6b8947b81b06b2f10be9d5584b9","sha1":"c29f2cd0c7658393321aa82f620c26b5550ad63c","sha256":"4d23425cd3ab08f1729853e4b42581ab44381f88d803e55e82b0dc2b6656e63d","sha512":"450e1b2938b6286eaa483125488c488f8e3d89e45963c78d7dc8339e2f6d34f661cb22a6185c10f93814725ff838950f87ba959c95081bfa94f562e9cc80827f","ssdeep":"3072:pjJKintiFa2rCij37fwZvfbSCVCVvmfkuB+F9GI9YM8CAU:1JKit8a2rCe7fwZJivmcugF97YMyU","tlshash":"1d44d6dd76827472937334b4a03f000b72beac96f14c8965e186d9d57e789a89237f2c","size":253371,"data":"","first_seen":"2026-02-02T16:24:45.389478Z","last_seen":"2026-02-09T03:12:36.871975Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:12.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /metrika/tag.js HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 84272\r\nset-cookie: bh=YNzjhcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Wed, 10 Mar 2027 03:56:12 GMT; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: \"69808378-14930\"\r\nlast-modified: Mon, 02 Feb 2026 10:59:04 GMT\r\ncontent-type: application/javascript\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 03 Feb 2026 04:56:12 GMT\r\ncache-control: max-age=3600\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253374,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (676)","md5":"1e9cc6b8947b81b06b2f10be9d5584b9","sha1":"c29f2cd0c7658393321aa82f620c26b5550ad63c","sha256":"4d23425cd3ab08f1729853e4b42581ab44381f88d803e55e82b0dc2b6656e63d","sha512":"450e1b2938b6286eaa483125488c488f8e3d89e45963c78d7dc8339e2f6d34f661cb22a6185c10f93814725ff838950f87ba959c95081bfa94f562e9cc80827f","ssdeep":"3072:pjJKintiFa2rCij37fwZvfbSCVCVvmfkuB+F9GI9YM8CAU:1JKit8a2rCe7fwZJivmcugF97YMyU","tlshash":"1d44d6dd76827472937334b4a03f000b72beac96f14c8965e186d9d57e789a89237f2c","first_seen":"2026-02-02T16:24:45.389478Z","last_seen":"2026-02-09T03:12:36.871975Z","times_seen":96,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":212,"dns":27,"connect":42,"send":0,"wait":61,"receive":96,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/106184665?wmode=7\u0026page-url=https%3A%2F%2Ftes-terminal.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8bl2dhx6zh0rnscez%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2360%3Acn%3A1%3Adp%3A0%3Als%3A687249396944%3Ahid%3A756484961%3Az%3A0%3Ai%3A20260203035613%3Aet%3A1770090973%3Ac%3A1%3Arn%3A318533720%3Arqn%3A1%3Au%3A1770090973352480650%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1578%3Awv%3A2%3Ads%3A1%2C48%2C531%2C55%2C27%2C0%2C%2C855%2C7%2C%2C%2C%2C1570%3Aco%3A0%3Acpf%3A1%3Ans%3A1770090971103%3Arqnl%3A1%3Ast%3A1770090973%3At%3A%D0%9D%D0%B0%D0%B4%D0%B3%D1%80%D0%BE%D0%B1%D0%B8%D1%8F%20%D0%BE%D1%82%20KRAKEN%3A%20%D0%B4%D0%BE%D1%81%D1%82%D0%BE%D0%B9%D0%BD%D0%B0%D1%8F%20%D0%BF%D0%B0%D0%BC%D1%8F%D1%82%D1%8C%20%D0%BE%20%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D1%85\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:13.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /watch/106184665?wmode=7\u0026page-url=https%3A%2F%2Ftes-terminal.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8bl2dhx6zh0rnscez%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2360%3Acn%3A1%3Adp%3A0%3Als%3A687249396944%3Ahid%3A756484961%3Az%3A0%3Ai%3A20260203035613%3Aet%3A1770090973%3Ac%3A1%3Arn%3A318533720%3Arqn%3A1%3Au%3A1770090973352480650%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1578%3Awv%3A2%3Ads%3A1%2C48%2C531%2C55%2C27%2C0%2C%2C855%2C7%2C%2C%2C%2C1570%3Aco%3A0%3Acpf%3A1%3Ans%3A1770090971103%3Arqnl%3A1%3Ast%3A1770090973%3At%3A%D0%9D%D0%B0%D0%B4%D0%B3%D1%80%D0%BE%D0%B1%D0%B8%D1%8F%20%D0%BE%D1%82%20KRAKEN%3A%20%D0%B4%D0%BE%D1%81%D1%82%D0%BE%D0%B9%D0%BD%D0%B0%D1%8F%20%D0%BF%D0%B0%D0%BC%D1%8F%D1%82%D1%8C%20%D0%BE%20%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D1%85\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tes-terminal.com/\r\nOrigin: https://tes-terminal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nexpires: Tue, 03-Feb-2026 03:56:13 GMT\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: yabs-sid=735376901770090973; Path=/; SameSite=None; Secure\ni=+34b5Avw/EqZxFUdRDgINRqMr73Dfs0s0VD/4zWtvN3zCSI/eX07uhOTFOtPkxxJgWbAHwHQBDlf7ewuxOp3aMhbthI=; Expires=Fri, 01-Feb-2036 03:56:12 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8678766321770090973; Expires=Fri, 01-Feb-2036 03:56:12 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=8678766321770090973; Expires=Wed, 03-Feb-2027 03:56:13 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1801626973.yrts.1770090973#1801626973.yrtsi.1770090973; Expires=Wed, 03-Feb-2027 03:56:13 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YN3jhcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Wed, 10 Mar 2027 03:56:13 GMT; SameSite=None; Secure\nbh=YN3jhcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Wed, 10 Mar 2027 03:56:13 GMT; SameSite=None; Secure\r\naccess-control-allow-credentials: true\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\nlocation: /watch/106184665/1?wmode=7\u0026page-url=https%3A%2F%2Ftes-terminal.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8bl2dhx6zh0rnscez%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2360%3Acn%3A1%3Adp%3A0%3Als%3A687249396944%3Ahid%3A756484961%3Az%3A0%3Ai%3A20260203035613%3Aet%3A1770090973%3Ac%3A1%3Arn%3A318533720%3Arqn%3A1%3Au%3A1770090973352480650%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1578%3Awv%3A2%3Ads%3A1%2C48%2C531%2C55%2C27%2C0%2C%2C855%2C7%2C%2C%2C%2C1570%3Aco%3A0%3Acpf%3A1%3Ans%3A1770090971103%3Arqnl%3A1%3Ast%3A1770090973%3At%3A%D0%9D%D0%B0%D0%B4%D0%B3%D1%80%D0%BE%D0%B1%D0%B8%D1%8F%20%D0%BE%D1%82%20KRAKEN%3A%20%D0%B4%D0%BE%D1%81%D1%82%D0%BE%D0%B9%D0%BD%D0%B0%D1%8F%20%D0%BF%D0%B0%D0%BC%D1%8F%D1%82%D1%8C%20%D0%BE%20%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D1%85\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1\r\naccess-control-allow-origin: https://tes-terminal.com\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Tue, 03-Feb-2026 03:56:13 GMT\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/106184665?page-url=https%3A%2F%2Ftes-terminal.com%2F\u0026charset=utf-8\u0026hidv2=320804796269330564\u0026hittoken=1770090973_1a4b0deb5b4e882bbf78f789787de59f0a65da0667235aff27f7846b60166ecd\u0026browser-info=nb%3A1%3Acl%3A145%3Aar%3A1%3Avf%3A6g20vg83qczf8bl2dhx6zh0rnscez%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2360%3Acn%3A1%3Adp%3A0%3Als%3A687249396944%3Ahid%3A756484961%3Az%3A0%3Ai%3A20260203035628%3Aet%3A1770090988%3Ac%3A1%3Arn%3A881361806%3Arqn%3A2%3Au%3A1770090973352480650%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2154%2C2154%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1770090971103%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1770090988\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952132)oms(0)prs(2)wss(2)w2s(16)evs(MTA2MTg0NjY1OjA6Mg%3D%3D)ti(0)\u0026force-urlencoded=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:28.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"POST /watch/106184665?page-url=https%3A%2F%2Ftes-terminal.com%2F\u0026charset=utf-8\u0026hidv2=320804796269330564\u0026hittoken=1770090973_1a4b0deb5b4e882bbf78f789787de59f0a65da0667235aff27f7846b60166ecd\u0026browser-info=nb%3A1%3Acl%3A145%3Aar%3A1%3Avf%3A6g20vg83qczf8bl2dhx6zh0rnscez%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2360%3Acn%3A1%3Adp%3A0%3Als%3A687249396944%3Ahid%3A756484961%3Az%3A0%3Ai%3A20260203035628%3Aet%3A1770090988%3Ac%3A1%3Arn%3A881361806%3Arqn%3A2%3Au%3A1770090973352480650%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2154%2C2154%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1770090971103%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1770090988\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952132)oms(0)prs(2)wss(2)w2s(16)evs(MTA2MTg0NjY1OjA6Mg%3D%3D)ti(0)\u0026force-urlencoded=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tes-terminal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: yabs-sid=735376901770090973; i=+34b5Avw/EqZxFUdRDgINRqMr73Dfs0s0VD/4zWtvN3zCSI/eX07uhOTFOtPkxxJgWbAHwHQBDlf7ewuxOp3aMhbthI=; yandexuid=8678766321770090973; yuidss=8678766321770090973; ymex=1801626973.yrts.1770090973#1801626973.yrtsi.1770090973; bh=YN3jhcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nexpires: Tue, 03-Feb-2026 03:56:28 GMT\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 03-Feb-2026 03:56:28 GMT\r\naccess-control-allow-origin: https://tes-terminal.com\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-07T12:38:04.927942Z","times_seen":110983,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/50977622741_matanga-ne-zahodit-matangapchela-com.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/50977622741_matanga-ne-zahodit-matangapchela-com.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OzQHDUoBwD60FvNs; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/2839805563\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":28158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"2a1ce9eef1736feeac42813782670a66","sha1":"6344a36567c8b4564455b35de1efbdee66b759d0","sha256":"8de62cc4768115ee0ed676e530ecc70867a15a7adb6e5d0cfdc14f8d4f2aabab","sha512":"a3b3aad9da9bdede60570aaf8447a5838f8cee8b3f9eec4c48857548f914b754f8a50cdb76a1ce8478132fee395c225c88ed6d3db69089106d84c58955204699","ssdeep":"768:StyXHaOVmwmx4sZ2IR3MmYguiwKm1+isTn4GXx:St0AwI4sSniwKm1Sku","tlshash":"4cc29d63ec04c783684d87f9be035ebc790a9b48e98137fa69608dcb7d245121e9653f","first_seen":"2026-02-03T03:54:27.510265Z","last_seen":"2026-02-03T03:56:34.150992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":457,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/templates/KRAKEN_CAP/fonts/Montserrat-Regular.ttf","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:12.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/fonts/Montserrat-Regular.ttf HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/templates/KRAKEN_CAP/styles/style.css\r\nCookie: __ddg8_=7CFEZycYHOU4ZDZv; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9154gbrAm3B2sxAe; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":197976,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", name offset 0x5200016d","md5":"5f72a800c0699be01bf0359713a8b2da","sha1":"fbbda4cd9c07481c558ae9683c927b455892afc9","sha256":"630f8ae712b7b6328e6ddeeddfc6e024a813091840f2021c40b4792fe0595fd4","sha512":"3b8e9fc37a60d784824bf142dd5b8d861a971e2e44292a600ffe52311fbf46d5f1ab6eeea084d3e5cd11a487c03439eff5e27ccde53b929ad0c0a433348cb6e0","ssdeep":"3072:X1lVLYf3EdzoWpiJ0ffmqPHmcmKjtsHhC+of6MuFLBLY7S5dvQFMxzpSKEELaAf:X1lVLYUrc0ffmqdSzvdVpSK1","tlshash":"5f242917fa17075ed5c68ff89ef80790a35cbe9c79148bc9c42e5160d78b9aa314ca8c","first_seen":"2023-07-19T05:17:54Z","last_seen":"2026-05-14T11:41:34.848759Z","times_seen":140,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"mc.yandex.com/solid.ws","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:15.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /solid.ws HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tes-terminal.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 3sQvtY9iSJy6HBFHk8W8Aw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: yabs-sid=735376901770090973; i=+34b5Avw/EqZxFUdRDgINRqMr73Dfs0s0VD/4zWtvN3zCSI/eX07uhOTFOtPkxxJgWbAHwHQBDlf7ewuxOp3aMhbthI=; yandexuid=8678766321770090973; yuidss=8678766321770090973; ymex=1801626973.yrts.1770090973#1801626973.yrtsi.1770090973; bh=YN3jhcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching protocols\r\nStrict-Transport-Security: max-age=31536000\r\nSec-WebSocket-Extensions: permessage-deflate;server_max_window_bits=15\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: OaVyowyYqeulQLk/6yfUCFkjwNk=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T13:07:03.550089Z","times_seen":17761838,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":27,"connect":50,"send":0,"wait":60,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/27728147231_kraken-ssylka-cn.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/27728147231_kraken-ssylka-cn.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=t23shiswFncWW83x; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/2536683746\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":42660,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"d074b6765a05647c9f44b02a02a93726","sha1":"1881d7611eb4b96587dc15a4327a8466b98eb203","sha256":"92b3d4bb7eb96f0900a8527d2921bf24539afad3423f740905d4cf07013efe22","sha512":"751b5e1d022ccc66065a2be19f9d618551ec314387a5b5fd0bf4da8b2be080bee5ecf375f832073590136a572741d8501a0be637a9271032b8287bf93ad95c38","ssdeep":"768:SXCt69mBT2ptTekHlOPFBwChndSaBWacq1rRWAwdAjxR3ccoyoc/t/Ir0rsHz6JT:SXY6wip1eAO/hDB/L1r8dADNl1k699hD","tlshash":"2713026de127443adc183ee48fb9037f2c54a4b86db2754ea11450a4973a7f9f98e42c","first_seen":"2025-11-13T06:10:51.366894Z","last_seen":"2026-02-03T03:56:34.155939Z","times_seen":3,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":486,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/17469285971_blacksprut-com-pochemu-ne-rabotaet.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/17469285971_blacksprut-com-pochemu-ne-rabotaet.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uk4P8xPtMJJKQHDP; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/502602729\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"164948b53e4308e42c7a0a2e9ab21ba4","sha1":"60cbac2ab9a8c8719ff6f21df71c04216481b6c4","sha256":"58018b4c73e8a637d7c2bb59d5c24661102cdce1f61f79a997740e3ebcfd7d37","sha512":"e57f97cec5b7950ab092b6b3bb65f5f58c6857208a79f342a5b698555e91822c7016da1bc7928a1b132d084935460712b32805a7367ff35957e505b03f84abcb","ssdeep":"96:SEMQKsJCJU3jF9FxKJcFJSK66MOrPbkY9nlfzWaZuFIjVqErPO2khkI:SVRsJCJeF93FJMQrPbkwZrPvkqI","tlshash":"d302c8138d1ccb86a46d82e9be031e9d3a5b2b5dec422aff05210edf3e640421dc956f","first_seen":"2026-02-03T03:54:27.504299Z","last_seen":"2026-02-03T03:56:34.158277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/16020955061_ssylka-na-kraken-v-tor-brauzer-onion.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/16020955061_ssylka-na-kraken-v-tor-brauzer-onion.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GFPQ5QDEdwIyy7X5; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/3693206045\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":39757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"327cc97f59079ea82b9404705f0b9079","sha1":"f1397f65d4307c32ad6eed0f4233c095f93b6733","sha256":"24520dae23982502e84d04e24414c48afbb300c8121d69a2b1f569d353976a15","sha512":"67685d26eca0b777e310e6ac76e78b3804ef2b466a6a4ee79ab24afe871e3ca85d5e6f089ceea8ef8bbb3bc112c67df1345c079e4e5d18d41e71c17be1a659b8","ssdeep":"768:SU1+ML2XEEfiTKCy8x5r0v2AKfva0r+uhUVP3KpeEyNnjH1NU3:SfML20EWSY5Qv21X3hUVPREyNjH1e","tlshash":"c303e0d7ec13c213298c23ad8765cd64af14a63f96c437eb0c656a6ce3707a8b063d15","first_seen":"2026-02-03T03:54:27.517643Z","last_seen":"2026-02-03T03:56:34.160669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":465,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T03:56:11.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vcXkvLakwklPMJfw; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg1_=S9vX0Yb2sbAbCRB2Kdb4; Domain=.tes-terminal.com; HttpOnly; Path=/; Expires=Wed, 03-Feb-2027 03:56:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreferer: \r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":32978,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15540), with CRLF, LF line terminators","md5":"cf2f95d2a5f647e34bb85d51c94e4979","sha1":"e2faed76f0bcee4005b5a2bc0bdfb564d6147c34","sha256":"6a86148b1e54df2466d7043f3ac405bf13b0fc8737b80199bff7c866e8552139","sha512":"bc657c7203077600cff61a31e1704f246dc2fd24d18cd1453f203457f3cf87f02e094ffef9506067a66ae2722cc069c2f62d0b37f2465218ce76dd91dc3a04c6","ssdeep":"384:d//xAnAnTFEZ8nWZKJadLFFNc08FnVhgTmwaabfTSWK8eHmFxVg5zBf+s:d//xAn+LcFjc00ImwjbflAmvUzBN","tlshash":"28e24b626a8a042b13316079ce557a0cfea681bfbf9b245136ec35db3ff19708917349","first_seen":"2026-02-03T03:56:34.163293Z","last_seen":"2026-02-03T03:56:34.163293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":49,"dns":1,"connect":19,"send":0,"wait":531,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/10943434361_sajt-gidry-sentjabr-matanga-ssylka-onion-com.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/10943434361_sajt-gidry-sentjabr-matanga-ssylka-onion-com.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=g3U8pD8yf2jtobaG; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/817757276\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":35944,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"9099cfa5a91365a072adb71348410204","sha1":"04360013e09d7efcc379105a4605ffbdf5d75792","sha256":"c62680664b7c47429d7d10f56dca3a168ed1fe37f4c815908a9e60c5de4c486a","sha512":"ce35814d128d2330e0a1c4c46049358c3cf6dda17dbc6fedc8f993a26968c47701dafe39d83a74621cd50f8ef9751872aa719ea70dad90b2f200ad644eaf894d","ssdeep":"768:SYJukfoXOpMCTkT2xuyiCG8d5v1Lqteq66lTjjjjjjk:SYJvjx4+5vUY","tlshash":"69f2bf07cc0900d6a85c9bbafce94eb92d5c069cf85bbffe45a75e8933906125c5b078","first_seen":"2026-02-03T03:54:27.505618Z","last_seen":"2026-02-03T03:56:34.165412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/7ea36469c6e5e6cabdefda3ae5ecd603ed00aa6f.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/7ea36469c6e5e6cabdefda3ae5ecd603ed00aa6f.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=gAhB9huHHR8bOncJ; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/2153323273\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":30261,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"a9653a8ffc6058265f8baa188b0af7e4","sha1":"7ea36469c6e5e6cabdefda3ae5ecd603ed00aa6f","sha256":"3feada303c7e6b8b081d8ce4d3f228681cd884f371e65fb9a593ee46d1d10b42","sha512":"30cba00d19517670da714a01eb71b10c344564225d41659d95cadb683eccddbdf25f93823a081c6060c5371c778db82225287c3b428b9c273678dcd1572deea8","ssdeep":"768:SfCebyptbSNqAsQNeXhZS+Obdnhkf4I4ge9gN306PrG:SfV6VMNexZSP64I4geWR06jG","tlshash":"ecd2f185e0215860fb38cab097d57d0aa674efde1a74aef221c1b0e45f45dc4ad4c822","first_seen":"2026-02-03T03:54:27.513988Z","last_seen":"2026-02-03T03:56:34.16697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/44714343861_stabilnye-zerkala-kraken-kraken-ssylka-onion.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/44714343861_stabilnye-zerkala-kraken-kraken-ssylka-onion.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qcEp8fQutMDIkUKm; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/1119411399\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":126174,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"910f1030db827d5e7ff1a9485cb0e51d","sha1":"1af69daa50a5ee255df440970ee75c34ed1314dc","sha256":"0993cc128942154ea51250fc2e60a15cfa423fcb4df47be224683bce8d46c9a0","sha512":"18b902606a8703b4d6bf4becb532360b06746498219b8cd567a58456c1cb3eacb33f68c0c182e78d66006b0d2156f3b41c66d23771b3a16db8ff6436f271083e","ssdeep":"3072:tAgzETUs6wYLIl+DLquZdJ9FiO9KhspC4bSPJUg2PI:tAuuUsxog+DLquZ9BacSCg2PI","tlshash":"7ac312496ff99c05c3e993a170677310e8890567ace78f98a7fed1ea13a041c69c5f42","first_seen":"2026-02-03T03:54:27.507815Z","last_seen":"2026-02-03T03:56:34.168502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":380,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/templates/KRAKEN_CAP/styles/style.css","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/styles/style.css HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7CFEZycYHOU4ZDZv; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\netag: W/87325256\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"e64a2c9536d74438497f49d7546dd238","sha1":"72f60e5616ce747a758e77056b1e9f35d5caf1fb","sha256":"b5f2f5b8acc41af5d1e493354718795990ecd36bfa05e02471546976c4c71b7e","sha512":"6fbb19853c1eea122f4ed7bffa1fbb138179897b343006a20c328f18cad24803381d10d62103218977a67154fb4f8bd0c133718729230d7ff54e7d41f31d95b4","ssdeep":"192:hVvIgYSG+I1dzTMsD7eLJu5f7wJCs52obc1pfutK:v+fP","tlshash":"2ee1bc49a6052005a2b3a97cbbb20b14eb6544635b8b91f979ec9348cff907942a1fdc","first_seen":"2023-07-05T20:50:20Z","last_seen":"2026-03-19T12:19:34.881959Z","times_seen":746,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/26971624471_ssylka-na-kraken-cherez-tor.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/26971624471_ssylka-na-kraken-cherez-tor.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zAVxSNCBotw5WasX; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/2293853415\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":50112,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"4cdfbcf55f66a3f83d5bc5ea26ef7b3c","sha1":"d119a0da6122915d52b030dcfc7b90568be001a9","sha256":"ff6de665456de7b7c13a342d202489daf5719f57561715f6a457c21c97663668","sha512":"2385bf5ecfa81b5c784d6703003301c14592e7626d276655ea5d370d1c0f2ed984638ce27ee495acee5aed685b254b45d7f53afba35f4e56d770984c30c86a64","ssdeep":"768:SSvZKmf5Fhox5nU7C755DNxpJOF+lFjMdpdJyQUqFFFQqCHA:SSvUEhoTEC75XJOIwdjJAqFCA","tlshash":"9023025fc8552af3943adb144398b295408fcf828969f8f678b6ae160a5f7f04d18cf0","first_seen":"2026-02-03T03:54:27.512486Z","last_seen":"2026-02-03T03:56:34.171064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/43168488671_kraken-cherez-zerkalo-krmp-cc.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/43168488671_kraken-cherez-zerkalo-krmp-cc.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9qmaFs1DS9wxewSf; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/2104232777\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":50792,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"2627afeaae59023a9fcbab96a5d9810b","sha1":"bb4e53ea28791ec452d36223d808338aaef5b25a","sha256":"12a27ace762a0606ffe04330bf96d5f95c63c9a27f20c48d9fed988b8466587c","sha512":"23df322ec161ea35340682ae86ce2c8627824ccf50c75ba5f7ea030e8370ef634a28c8ba5db4eef249f126201f133e65ecaf4caa9b80ceecd13fb1ade4b85824","ssdeep":"768:SGzJ389nTAqQJgJMRIOQiPl0sZJTdsgbMg+DdStYPr/+ABqWz/Qojbevoev:Sq+TJQkzOQalTZlOPXDoiJkWwvB","tlshash":"2033f1adb35a2321ac2f0bbae4d175730ef13ed903179c39c21900d1f3696a463dca49","first_seen":"2026-02-03T03:54:27.528052Z","last_seen":"2026-02-26T15:43:04.376206Z","times_seen":4,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/24555098201_darknete-internet-magazinov.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/24555098201_darknete-internet-magazinov.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ZrmZEFOtDlsslV6L; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/1523448501\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"4f349694ebef596d41bb4afc0c3ca885","sha1":"214e416a2567bdb594f34245e0e85bd53b02ca70","sha256":"91812071fe1745d35bcd59f13c2ad8a77b185fa057f30edc4432cc4904e0f089","sha512":"2093670fa8c9e092ca803650c06025472b56d52d432d7950556097440551c27e6614d649e5b165bb1aab34690ad6fd50b8a8f59336d0acc4729b4a732ccf0565","ssdeep":"768:SC51FG7FE5feJiKK37tVtvjCJceVDuGRY3cNPEe:SOFQFE5feJ8LoUspp","tlshash":"5df2d1135d0623a22c6d4b689d72497a2a0c433ce23673f968b14c5772743efed6207d","first_seen":"2026-02-03T03:54:27.490707Z","last_seen":"2026-02-03T03:56:34.174158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":425,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/templates/KRAKEN_CAP/fonts/Goldman-Regular.ttf","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:12.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/fonts/Goldman-Regular.ttf HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/templates/KRAKEN_CAP/styles/style.css\r\nCookie: __ddg8_=7CFEZycYHOU4ZDZv; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ueVOi3XFzOeJre0v; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 3\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":77276,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", name offset 0xa9000005","md5":"a46de11151df704939107617999a4d7f","sha1":"a54569b16f2f9ba2fcf23c42810860483c22c5c9","sha256":"69307446f5aaa5e84bb5c07156e4244d65dc64bffde8877a470e8ae446f3c9f0","sha512":"ff891c44e5b273fe1202380c0beae757bc56708a033546c9202e65eb8ae4702a1abed85dc08b1080ab420d3cc07f3a2d69fa1c0bc9053ee309ae1a48f605aa76","ssdeep":"1536:Q9hLvIjebpyYKZTVkX+Wlp3S4sacFlwF2RcPr3DN:2lv+ebpyYKN+X+WDS1aO6F2WPr3R","tlshash":"52832a17a710a759e5714ff47e9da38037acf4ac3805538ad01c5aa36f4f8983e4ba9c","first_seen":"2023-07-19T05:17:54Z","last_seen":"2026-03-19T12:19:34.878988Z","times_seen":102,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:13.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nlast-modified: Thu, 29 Jan 2026 10:29:00 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ntiming-allow-origin: *\r\ndate: Tue, 03 Feb 2026 03:56:13 GMT\r\nset-cookie: bh=YN3jhcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Wed, 10 Mar 2027 03:56:13 GMT; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\nexpires: Tue, 03 Feb 2026 04:56:13 GMT\r\ncontent-type: image/gif\r\ncache-control: max-age=3600\r\netag: \"697b366c-2b\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-08-07T12:38:04.927942Z","times_seen":110983,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/106184665/1?wmode=7\u0026page-url=https%3A%2F%2Ftes-terminal.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8bl2dhx6zh0rnscez%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2360%3Acn%3A1%3Adp%3A0%3Als%3A687249396944%3Ahid%3A756484961%3Az%3A0%3Ai%3A20260203035613%3Aet%3A1770090973%3Ac%3A1%3Arn%3A318533720%3Arqn%3A1%3Au%3A1770090973352480650%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1578%3Awv%3A2%3Ads%3A1%2C48%2C531%2C55%2C27%2C0%2C%2C855%2C7%2C%2C%2C%2C1570%3Aco%3A0%3Acpf%3A1%3Ans%3A1770090971103%3Arqnl%3A1%3Ast%3A1770090973%3At%3A%D0%9D%D0%B0%D0%B4%D0%B3%D1%80%D0%BE%D0%B1%D0%B8%D1%8F%20%D0%BE%D1%82%20KRAKEN%3A%20%D0%B4%D0%BE%D1%81%D1%82%D0%BE%D0%B9%D0%BD%D0%B0%D1%8F%20%D0%BF%D0%B0%D0%BC%D1%8F%D1%82%D1%8C%20%D0%BE%20%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D1%85\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:13.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /watch/106184665/1?wmode=7\u0026page-url=https%3A%2F%2Ftes-terminal.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8bl2dhx6zh0rnscez%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2360%3Acn%3A1%3Adp%3A0%3Als%3A687249396944%3Ahid%3A756484961%3Az%3A0%3Ai%3A20260203035613%3Aet%3A1770090973%3Ac%3A1%3Arn%3A318533720%3Arqn%3A1%3Au%3A1770090973352480650%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1578%3Awv%3A2%3Ads%3A1%2C48%2C531%2C55%2C27%2C0%2C%2C855%2C7%2C%2C%2C%2C1570%3Aco%3A0%3Acpf%3A1%3Ans%3A1770090971103%3Arqnl%3A1%3Ast%3A1770090973%3At%3A%D0%9D%D0%B0%D0%B4%D0%B3%D1%80%D0%BE%D0%B1%D0%B8%D1%8F%20%D0%BE%D1%82%20KRAKEN%3A%20%D0%B4%D0%BE%D1%81%D1%82%D0%BE%D0%B9%D0%BD%D0%B0%D1%8F%20%D0%BF%D0%B0%D0%BC%D1%8F%D1%82%D1%8C%20%D0%BE%20%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D1%85\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://tes-terminal.com\r\nReferer: https://tes-terminal.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=735376901770090973; i=+34b5Avw/EqZxFUdRDgINRqMr73Dfs0s0VD/4zWtvN3zCSI/eX07uhOTFOtPkxxJgWbAHwHQBDlf7ewuxOp3aMhbthI=; yandexuid=8678766321770090973; yuidss=8678766321770090973; ymex=1801626973.yrts.1770090973#1801626973.yrtsi.1770090973; bh=YN3jhcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 670\r\ncontent-type: application/json; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 03-Feb-2026 03:56:13 GMT\r\nx-xss-protection: 1; mode=block\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://tes-terminal.com\r\naccess-control-allow-credentials: true\r\nexpires: Tue, 03-Feb-2026 03:56:13 GMT\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42ee75967900f1f7fb0a209431dfe0eb","sha1":"db25523b2180abcd8dcbe31905aaaa69f9e241db","sha256":"d3cbb096b76d1feb5edeb8bdd976e08851daafc3420d2cbbfcb3d8e9135eb41b","sha512":"d949a9d82966877a828b35f21e6e0556e9215b1a084886c4bf304ba4ea45d4feecd0c1316b6e00dfd7778b9e4628079a4b08d443fc04ee9ad4ef40c06d43dc21","ssdeep":"","tlshash":"9901f4c58979cbb999478f5ac65d3a03245e38265cd127101381e060098ee17360fa61","first_seen":"2026-02-03T03:56:34.178059Z","last_seen":"2026-02-03T03:56:34.178059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/15152495571_ssylka-na-kraken-v-tor-onion-zerkalo.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/15152495571_ssylka-na-kraken-v-tor-onion-zerkalo.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=KgugZdrXBTckeE15; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/2311945349\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":78168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"8f656993f0266849ac0635ad90eeb100","sha1":"8c869de6e355388e43c07e44c299b87bb2a05d99","sha256":"78148430ea840cc3b72eb795c5694444e386fe19328b13fa75102648a68c2620","sha512":"042bdd5c0b5452ba727052455a27367857848ab2099143e95c3d0906d149b2e8658b0ebfd7993a0c574c89ea00833fde0d10a03db935016142ae0e919df6270a","ssdeep":"1536:SO0YZ6vlaPXonU8vCMVwOHm6FnX0vPYMR3wEsBbQ0qUFI5uFay:RgGoTvYBg8q6MCuMy","tlshash":"0f730243a942c99a51b8af5ecb6339d567903ff26b8ede814e1773c5b28e71d2d20007","first_seen":"2025-11-19T08:03:18.396197Z","last_seen":"2026-02-04T18:02:31.735438Z","times_seen":5,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/PARSE/DATA/IMAGES/14747879431_kraken-oficialnyj-sajt-ssylka.jpg","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/14747879431_kraken-oficialnyj-sajt-ssylka.jpg HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PtdtxRnn1D7JDavt; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg10_=1770090971; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:11 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/3066092492\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":22118,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x400, components 3","md5":"030de371af6845fe5748c787ee9617b2","sha1":"948e56ca2daad1b249ff248105643f31a0862d2f","sha256":"a48f5731a4ebd3a134b6ff25036c910009869c5003da894947f16b2167f3888e","sha512":"0b2625d1e176056840c5b17bc84294b487ff6820be880b95672f0775d2f209a2f8b5e3f8827fc296510e5c428d135673b3bbf5edddbc9ac70edfa6b10ec74ad0","ssdeep":"384:SfRBRWhjGJqzCNhV6fagr5A/zyBlVNC1v3OOuJ:SLRNqz06fMuBlVoeOuJ","tlshash":"57a25983cc1d8e17a038c3b9bf5b6e9d335a2a588d24b6fe14220dda3f625015c9f45b","first_seen":"2025-10-21T05:54:47.899274Z","last_seen":"2026-02-03T03:56:34.18213Z","times_seen":4,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/templates/KRAKEN_CAP/img/favicon.ico","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:13.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/img/favicon.ico HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=9154gbrAm3B2sxAe; __ddg10_=1770090972; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4; _ym_uid=1770090973352480650; _ym_d=1770090973; _ym_isad=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=l8WkfhjHdQUTa92w; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:13 GMT\n__ddg10_=1770090973; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:13 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:13 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:13 GMT\r\ncontent-type: image/x-icon\r\netag: W/3016354230\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"8b49caf1ff0717a2b01e3da803e2ef2a","sha1":"90b0e92c2251150d6b5d1038842208f9ceeb407f","sha256":"2c195444f7cb1c9023cf1ca7c0d52cb6d116d22b4c96453b12ca356daf77cb65","sha512":"0c9066de2f26a1e9b35a117ab625f00a832d075d4b9683706566a9798633fa9de6f1c33763db4df550597d194af1b9dd0e6bfff798514e39faf97862d758743a","ssdeep":"","tlshash":"b32197cdbb20dc1de54ad0728086c2a2123a7859862a100ff0cd793b3b550585fa2e49","first_seen":"2023-07-10T11:55:36Z","last_seen":"2026-03-19T12:19:34.893621Z","times_seen":107,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tes-terminal.com/templates/KRAKEN_CAP/img/logo.webp","fqdn":"tes-terminal.com","domain":"tes-terminal.com","tld":"com"},"ip":{"addr":"186.2.175.37","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tes-terminal.com/","date":"2026-02-03T03:56:11.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tes-terminal.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 23:02:30 GMT","end":"Sat, 04 Apr 2026 23:02:29 GMT"},"fingerprint":{"sha1":"6D:CF:67:DA:0B:C9:4B:30:CA:41:28:1B:4C:A2:5B:C6:FF:B5:16:1D","sha256":"4D:58:3B:8E:9C:E3:0E:6E:5D:80:69:84:A0:36:13:03:30:10:9C:B6:0E:69:D9:3F:5F:99:09:58:CE:72:0A:9F"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/img/logo.webp HTTP/1.1\r\nHost: tes-terminal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tes-terminal.com/\r\nCookie: __ddg8_=vcXkvLakwklPMJfw; __ddg10_=1770090971; __ddg9_=91.90.42.154; __ddg1_=S9vX0Yb2sbAbCRB2Kdb4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1RhKUby53SMEBsby; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg10_=1770090972; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\n__ddg9_=91.90.42.154; Domain=.tes-terminal.com; Path=/; Expires=Tue, 03-Feb-2026 04:16:12 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 03 Feb 2026 03:56:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13996,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"RIFF (little-endian) data","md5":"5300a98bf7f37b997fe648378208b746","sha1":"9c37be9ed0f900df6d1ec76c31c55f0f5e1d0619","sha256":"afec6c7de8ee787409e548d14e06a7c4e0fb825fdc66214dd6558d6fa21e2c4e","sha512":"84e69b67f7af6fd7103669b00b52c755fb24407a2b3d62ef28ef6c191d0efcd652c2cdf5367a89250bda0f4cbf2730a898bb7e7c5eb1292c24f5d77e4cee2b4a","ssdeep":"384:9Bgw9Pw8a4XeO6Y1YX43hCej6YbErEXHxt0MeAx3K8C+xq1Q:vgwtI4XeOwX4xCelxXxG0g8nz","tlshash":"0392bf07224e9361c2fba0f9c55b1bd8d4139680b7d6ead4c508f2e15cae724f69d8e8","first_seen":"2023-07-13T18:41:18Z","last_seen":"2026-03-19T12:19:34.886135Z","times_seen":104,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":508,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-03","alert":"Phishing Block","trigger":"tes-terminal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-03","alert":"Sinkholed","trigger":"tes-terminal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}