{"report_id":"05fd760e-8d94-4d7e-8d0b-d9325b60691d","version":6,"status":"done","tags":[],"date":"2025-03-21T00:49:08Z","url":{"schema":"http","addr":"upravafotiek.top/","fqdn":"upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"www.upravafotiek.top/","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"title":"upravafotiek"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-30T00:49:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.upravafotiek.top","ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-10","domain_rank":0,"first_seen":"2025-03-21T00:49:08.219052Z","last_seen":"2025-03-21T00:49:08.219052Z","alert_count":1,"request_count":10,"received_data":434326,"sent_data":4170,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upravafotiek.top","ip":{"addr":"104.21.6.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-10","domain_rank":0,"first_seen":"2025-03-21T00:49:08.217582Z","last_seen":"2025-03-21T00:49:08.217582Z","alert_count":0,"request_count":1,"received_data":11310,"sent_data":485,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-21T00:48:45Z","timestamp":1742518125,"ip_dst":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":55940,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-03-21T00:48:45.480598+0000\",\"flow_id\":1402412978774003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55940,\"dest_ip\":\"172.67.135.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.upravafotiek.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":507},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":677,\"bytes_toclient\":5444,\"start\":\"2025-03-21T00:48:45.106483+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.upravafotiek.top/","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba2434837be50ad461b023a992b944dd","sha1":"b20306b160c86cf034fd3ee82781dd1ce0755a63","sha256":"35b6ce17a500e9f7ac3601b4efb27e941f77e004cbc4b24f03f25b33ee32d14c","sha512":"b67a5ecb1b4a83942871260aab4e281cf83c0d02d7772eaa3aaf0436f2002e9e287a48c6a026e53bb6ef004634665528d8bc383b929a85d40e4c682e61a21a6d","ssdeep":"","tlshash":"1f411e7917756caa31f618a7b49f9b0e3b3985030089a9329194a494253ade1f1bfe0a","size":2254,"data":"","first_seen":"2025-03-21T00:49:10.824459Z","last_seen":"2025-03-21T00:49:10.824459Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-21T00:48:45Z","timestamp":1742518125,"ip_dst":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":55940,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-03-21T00:48:45.480598+0000\",\"flow_id\":1402412978774003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55940,\"dest_ip\":\"172.67.135.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.upravafotiek.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":507},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":677,\"bytes_toclient\":5444,\"start\":\"2025-03-21T00:48:45.106483+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/js/navigation.js?ver=20151215","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49493316c090bb3d7cca5bc09031037c","sha1":"b77b6525d82691c3d4ca05948e846500ea0cb1d3","sha256":"fbc199bf7f97061c41664b040e84616a0cb54441a2efc5801d5d401d3a049f3c","sha512":"1fa1041574393c5693e1303cd1a3361d74c889060a8c13e3a9c7b37cfced7da28ba3e5866e7f59fe8f86d7d74b188305ad457943c1afb45e73fdb0971092aa67","ssdeep":"","tlshash":"c95103c67fcc333b52d6319665ae64ed363c9072da092c26bc79d540289086502befcd","size":2967,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-04-03T18:01:31.359725Z","times_seen":6766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/js/skip-link-focus-fix.js?ver=20151215","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93d421fd7576b0ca9c359ffe2fa16113","sha1":"eacce35258f14fcd79bea2bc23f4140d25874322","sha256":"14af47320898bd93f367026f7833c9956f14e24856976e4f9e10be31155cdcf2","sha512":"c064c5bbaf7a5a82b047215083a842bfed1dbabcd71e313da319b2315a2a91e0f20f83795c806732c2f50b57b242ed49a7c86098870a56a66be07eb13c15db4c","ssdeep":"","tlshash":"d201c0b2b30d44b6045a3157cd5f61cd297d91e2b819649b8cc908501824d6d13bffb8","size":685,"data":"","first_seen":"2023-03-07T01:03:06Z","last_seen":"2026-04-03T18:01:31.326851Z","times_seen":10397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-includes/js/wp-embed.min.js?ver=4.8.2","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a03f97cc479b9f5d7efdaccec31bc17","sha1":"54518be91b7c5d4b139e032d23ffae568cc7e9fd","sha256":"dcb5e540e62fc85857254a1066afb6a7e8999279c6d4c583eef855d39f9289c0","sha512":"ed651ad04816784b4c14e54b1876498b6ed07f33325fd38aeb250dda0859f20e6f7997ef45439c1da3a6b0784de377258c9459264621caa7d17803458e70c827","ssdeep":"","tlshash":"6a21141a3338143b10db51e3b99d75c7d6f217ee240121d18d78c880fa94fa79966fd5","size":1398,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-03T12:17:00.064309Z","times_seen":3594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-includes/js/wp-embed.min.js?ver=4.8.2","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:45.758Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=4.8.2 HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":283,"data":"{\"event\":\"view\",\"uuid\":\"XuxIFbHn6+2vVz7Z3P042/CMFBkNYHem5VzzA2PGA4MiRNKGn51vymDlJL58YvLNqECASA3Icd9uBhff+ZKIiA\",\"blockUuids\":[\"0191e176-ed39-72ce-877f-f2437a43c0f3\",\"0191e177-2566-7252-ac66-37145d7ab496\",\"0191e177-2567-7118-a974-c0a4800f69ec\",\"0191e177-2568-7020-b122-ff7dbbc42b22\"]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 751\r\nConnection: keep-alive\r\netag: \"576-66a79c2c-c160b;gz\"\r\nlast-modified: Mon, 29 Jul 2024 13:42:04 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1QP4K2CYbK5M0Lw0dWLCoEEEKN4rYyOEvXIid6mhsbc3lyHtT%2BUhYYRsa9Viryzat6X5sKf%2FHOkpJWBswEPIAajqWcx4gdTb0fQiE5zzPsdtoOMII0zUdivq5aiwULky9x%2BcXiFHKg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9239720dfd0a0afa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=573\u0026min_rtt=573\u0026rtt_var=286\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=372\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1398,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1437), with no line terminators","md5":"5abc2ff9219daa9c55ea2f2893ef4f38","sha1":"4dfa94a3ca17871f8b7682d5d701be928e152671","sha256":"0b9477e1fde4f82b7e9514676f3e9a3bc7ac3003205d416985b5319fb4807f81","sha512":"1a5a1f2d9e79e36bc25e40c9076ca8db4fe334564cdcc7e62ed37ea0e19aaec1169448487a5544b71712682ca1ab3d955ffe28f087e19ae8941c24719b0b82b8","ssdeep":"","tlshash":"0621541a333c653b00db51d3b9ad74d1eaf217ea240220a14a79c888ea90fe39421fc5","first_seen":"2023-04-06T18:31:14Z","last_seen":"2025-04-04T11:34:48.41271Z","times_seen":251,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/fonts/google/barlow-bold.woff2","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:46.268Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/barlow/assets/fonts/google/barlow-bold.woff2 HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/wp-content/themes/barlow/assets/fonts/google/stylesheet.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 41640\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 28 Mar 2025 00:48:46 GMT\r\netag: \"a2a8-668aaba9-4d56ad;;;\"\r\nlast-modified: Sun, 07 Jul 2024 14:52:25 GMT\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=02qLKUAZWuwfPVfsX4JDKsJmzG11RVm1LgSj8uU0fY6sjQTDRxiAS3eliAa2SNS7d6kgZLwtPzLjn4pv%2BvI2oAe2pyNHT%2BRljxChvI2JHBC%2BNYkeLhW5fHGy0mmGgu%2FCZkda0w94aQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 923972112c71569a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=791\u0026min_rtt=515\u0026rtt_var=144\u0026sent=19\u0026recv=21\u0026lost=0\u0026retrans=0\u0026sent_bytes=23522\u0026recv_bytes=924\u0026delivery_rate=26417331\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41640, version 1.0","md5":"ca54dd2cd3afbb54c3ea66344b6e295f","sha1":"93467483ea93c28c919b4ca3db75799ac0357ba9","sha256":"f3738af51709e799eb5466ad97495b373be7ef42c0a09c3bd4c4d91d63539136","sha512":"91802751d3869fabfe0a2fa0cc4f461154ab81cd3356e2cbad48e32cf0a7b4c92884cb8bd795ce1b0799137d83ab10902fb71cfca439ad3503ef7dbdb63aa512","ssdeep":"768:g1Nu7Wf/ECFTn/cynmmeZ196DoWZxh+MxFhjWqLcwNo0figYYPin:gGi/ElomFh6zhzPWO30Ein","tlshash":"8e13f1846c5a6294bfd1a4b39ca0427f4c1c8cfee2d9eed4959d1f6730e9587322cb90","first_seen":"2025-03-21T00:49:10.817078Z","last_seen":"2025-03-21T00:49:10.817078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/favicon.ico","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:46.481Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":9386,"data":"{\"payload\":{\"RE5BX0VOQ1JZUFRFRA==\":{\"a\":\"/2JKZqeIdFFQ7skJAFOvIw==\",\"b\":\"EyBTlTPNSP776Q8GXI2k5j1k29vee7As6P3RBvtGfscXVHwrEyvPdLQ2MXqb3HybsU6v47UBdwLBlpB26JPy6HW1kSHOP11We3OPfi4vPUn7Prd+JWFjQR53qQP2nBWvwJedTqiKPxHBrLI5A3OI7FzOvOTIxttzSIgkW9tR7ve2cTgd2lWN7a17p6urVLV63583ULttNqg7piR6VxR8Ov9dQn0c271su8W6hvilVKlKN4pPtj0c2cUm6lIkr01hFsrVV2QaacRu8k+uuXGDN7A/yOyZ/KRNe/BLuDHIZLswfT3NDYI64WHspJUDXehf7fG1hjo5KkDelYlDykZt4w==\",\"c\":\"bTj+OUVntutHkUyK3tVncc+cYObMQcuC6XX6MnNNUihp/eow4I5tifbbDwLOIhJOWaIhxsC80CVGbOlP2fv3KMC24+u6CRu4dB4y1EIDGEDd+UpGGIWS4Zyt1jzjlrGPwUL0GH8XeSN4ZufoVrmKLIs4Q+q8zf95UM35pSrofLKC667HNeKIbdEgOIysP9UwO7gS0+rm4ig4fDdSmAPPt2pusDtBw+amu/PP69lKqYe561+a0ATaukzHLPUb+6RP2yp24ZUZBoz/DzmieAS9CUY0FsDBdRNNDSFVSBh39g1MALn9bSC/XpJ0uLrGgZBprXzSG/rkxpx+ocDdplwYFsmSIkrY6SoyWGPoZ75HYwNu/1FfXmV8ogCikTyubIb27kffo6XixUVlc8tPDztaBphOZlzI09qKTSJlRvphxtFb0EuFGaRCMH1zPDlr3sIvA9NY+wMkRjH0w8UeYC0PMo0BRVS5XuEs8JFQpzRLMkm73NtGf3aEB4lYtWPXXSkhhZ2ibT7nWnciUwrIV4m3wZxx6DuANWHTC2LhvkS9RImX+ccnIjVyreNhOZ5dfD/PNPaIZnBGAlacU8eDc+SIT5OH5Djg5TYaMEa5AWH+Ot4npvefNHa9s6mSPLwt1URwR2tiaIhDIISZjmcX8Nqee1RhmUQKKlffLsL/tqaFtdphUAMzWVayK9ClLOyJUkxa3q89J8+6hzXlDuwoyRfGH7hc9Q3as7fy0VHcruvMjJy7udytPWCqjMzBEyHErDp9PKGWBUpLYPM7bIkFKAs+ZitbV8mV2IwkYRlcfCO1sBhewDZqOKFHBIFSKmUOo5k3Z7aUaWCMjm5HFu/6EI6fJDNFUqFJO0mar4lezabq7pXijbSUuCTlf4XiQ2nvZ1W4wuy2H1PbcKKB44pCG0GxUYJY+cqpWu6m5wlnhja7XXHzDoN81drknqBCztQVoMns6okYDt63zaw36RGzC0nm1eOqiB7yFt/qCHOuMxi2nuP1j2AcI/yQoQz1ECH43nMt/zbcTRjBci2wSc/xkXz+hEcaI9QNZ2h1R5i+7LoWw/8iTi1rSiCixBeKnTUPZ0nbfxI3Sp7YmfPWaFZpkfWyh0rwjB4kWgcua2CgRKP1dLp1a46DQb1OXfY04VvaM9eZc6iLnLxfILxE3YxMKX9ImRmJsKIj4uOK97rmVXSD9De0pYoPZ0mLy/jdL/mJPnSa7gvoboyeRVuOcb4ZZH9PMsqQF5lz7PbH3h897ilkw/DLwV5utLmsJltBAHRFH33EfUmcgOyK/uc+fdWJggVIDKuxJ/l3smjAViG6pwiSd+11h6iNiaewGichtODYUbDUB6NQHPJmTS17xB0Cu7FsiUN1DS3oe/UAvbAgMhiY6w3/KB6RmOZ9OZLCwY+0HtmY04PmH2zUC0xTnVnTrCKv1ixZi/PGRYbxQrbfCcZbBuudo+r95nUMwx7WzA36AWwyqOYBdCr6EetO/J4h0InfDHlS4JRvxY8/4ZPdHrXOgkwE+L5eSBABEIdxECPzt/Z1dBAR8olFnaE9n973ptE49fMkOK7l3FjfX1THPrvYY9RswGUpNVFAOszW//huUkvVdQhcIRFc5WDuWFzh94yLqamkz0pZNsxCRFF+VpTGS/c/4sWgbg+BG4Yih4QhPJlbKqt9R4pQYQHPNxQhG9BFTOvOudvbkuzsSC88EiWIX3C0MktEE2R6uds2TbVK4++o3N+GTDbod0nNTHOyXwHcZWNUhAssw9vKtPMhnpO+tTC694YuS3EtKY5wnZD+aH/FtmAyuyfOC0ajTSQvPoWrtPGCc4wnbp7ePEqucAvgO+KqRMDqm0AfoF+7vBs+y/pjO57xyXc0We91oQQhYXBDjLyz1z0hWgA++QVt+9UHfb7K6vndVItRhEEm7cuxMOfe31U3vrNlyvuUTXoKqOUhcxCTQCOAAMxbK+Sod3wuqsmPMQ8ApYcYXLmb0RayIKQaw3Rx2Kjk0ayJ25F0Po3GH5l41wiDL0/88eoj7kmCeCXH/k1LJ6DkpFIxA6fa68vtqM4n1MJFpdbj85St8XabGJvcH/sSEqUm+h0YXFsKx2r0GYZ4hpLYLPW0VdOT45HvV8dgBXX6/p2FFvgaFu+ma+TCSZlkrubUSNcNMNnC3lmiKnqRm7dIZJj8GdNmk6TgcGApoTJPnxI5TpT43IbaLuSP5S4iZHb7IBxZMt5LYCEySjc3eHOgXXo1pVTGJQQgW+MQH51VbIpN0aS2BiNXFL4JofBDRwNAO5S7aD4IPWKtjjTQqcLkRM/n6NgcNhfc6uPiY5RwRDNgeoA0qATM2NZvFU4f+aDEaaCkLK1+QIJKqoCz1+YlShA+OWGdQP59jKpiZ4vy7U2oPGyXohCv6huyl5ciasR5A3Uggurv1FPuzhnjmQTJSR8B8z4+q31Pr2kIKvNGXiCkqWZzf7Tvp9lVjlmRN/wV04V55mrLu5ZVnxbbUMiQV6APQeHoLT6nLSNklYDESLjP3QANpohH0DXXTJzb4x4j1hoGbOsY/H5O+Zb7cs3pevKNpqXSqKJh6sLbCKTRu0txmOKLtpz/4oxlFDc2ZMX0rFwnDGnsC5XBmr2b/bHHIy3wwWV6EeghnaG6Q0u7wtDU7o6acJzMp8ug1tcmfL+WaWWhV2y9vOTVtQI4xK4vAMN1Z/3N2143r8MNPUzqGlwf5+9nIjs+PhmBiQIaTl3lMG7gius5BzuO2WdZBNirlXIYNPXW65GKeQ1mpg5X4Dwl/ugQXZO68UKPxbnUTRy/N82sKTmTc1DZH+sw9O/iCC91AbgLu6/ta5pxT9AEvd+uHa16qqIy2TEBUN15uV/MizVLKeXrUayEp77MnbxWsZwxI4zHbANBg5uicXRskc6wBZNc54Q1xzksKGW8GQwvP/NBt9ZKWzIGmCSGMY8I6PxhCPXeCfrHjFWnYzucrbC7eWlgOV4D4n1QodtC2vjotnXBgklTyBxpO3F5fnC1aFcMHks7/VIWt2x5+8lNDkWdcRRbbCrySI8zxEaH368qRJGxIdMaPHZ3/pZCXU6EBpuJJBTrTJ09lwSORpHQ/97B8lM6L7FybtyFs5NVbmf8v6owIEv7eZYyyQSzrGdckp4fXVZvlMuevIA8I4o1u3PpJlx0+vCqhSZuK5UNR8C5OzbRn8cge4VJC6136uiAGhkEbT3HAaRC6MQ41eU9r50rZYpkY2ND5bI5G6sdgj0z4oIudMz9W9rKVsJDhC5JBeEKqpbd0ZjGh9O4KsJ9ftP6Vp3N3gQzdmYkc9UTNYmS3X2tb/dJna22ysayJ3d23sDZTu8JQ5FJki4rXBA2gEmx0p6V4C6avhBGV7c1Mnev3vR9JbdAWFN/fELe9wHToLH25z5hBllG2pErkyliro3MfV3OTu/2FGtiPeMJ9vbfLBQ3SHsKWC9yVOdtjKlJUJlBZmk3SofzEBUraSpNbCUaZ95uCEhktvKnAQHxPf9MdFlJ7HcTATNIXj2OaP3Ri7qu80nR5MVdavqJ/850b1cxgVQ+IL8jX7qae58ReaJDbVOZlRVMk6kaQpgw8c1AaQfyLEXBrNLYzMYDEP7Lr/hZR4ufdv4i2tqWo8ympmjDJHcdKXIuan7LZE7PPG3p//PP12B8Oz/8lf1pAmIj7zKs0zF6r/fXYkjeU7jzqHH7K86eJmN2nwF5CTlvZDXk4pk+gQgjYd5rVEnC4ef8FySuFVoL8ePDnTmdGBrZ+iAG3j3UflPJ1292q89xuGHhgSdeHr6X7NydtOU1Qp8fqXdN+5DBVd7NFwX1RkPbSsEtq8o0hRolUlWOPku3bmJTCW0XwLN0iN0+vYv0qtv8If+4zBv3RxZrrVWS9oVfzYivQLWRs9u7FfTcpzlejEM/gkjmcOtgzg+6BuJ0psoN4QpsQolzw+MjMukZLfskt/BXCHuOdxybmXJVCyKxoIsZqUdLbG/WP3O65URyb63wqvLmJJbkAhk7DicWpOEllrccePT2j8hfkWWZWoKl7dOKuXdEqaCNtpHbfLDxpaqWmqElfbTctKJv+Wkk5IHCoNAsi0DqluWhUF13omjZ+m1JIT0rJrHyKNp9RyRGzuXEG15SDQlb5XWnl5C+QhGk3aMZPAUYFeh06ONTOtQtkF5sow/2aR+KZHh9OgOeS1NJJ8+wFCaJ0XVLfuK05CHqeTMbxAK5bRdmAAaQJTOXlsXMuaLfthqgAZbODL0NtnMDk8DLmyemwIYhkocd48eQFLJq/DTUV3j8ishAqPl+2GApUqqvPTSk155M91WLGpBMqAdIVqT3i0x8ETxbjfpHAc1yHZ+aW1TNPF4+tpJjuSCx9V4vcYe3bXXsmm0e2rCK0M8wKmigts3Ex42jFgQ+9FFktFaSfvIgZ0igN+fbXfL3KCY9NL/0qpStQMhW4GtxMU/axq7Tb/KhikSqUf9xAt37Pr9SAkCrMdp7KFUDN/G1y5o+lB3RoR7AucHqDlAtFbMcQ7Pq2YIubiBYtl4wx8UZWiBLTApYTh4dW+5b0PyvcyF7v0LyxRPLb1rOdAUQB2WoJ4kUko/DWYw3OHcfza3PI2eSntAmMe2h2FurXfO+MwfP/6mw+nGkqq4yzNpimCUKq0yw9rFlaoMEzOmRf4TrkiYBLIeVUHtql6Bs05uioGId/BewKTvgWFzzy6x1G87kG48ZQy/c9ho+3FCslc0bozE3NY4m+TaSjnq9jMJksOZF+cZl6TZuoRZLSauQOJxAO3RFNrXWR9IeN51y5Jp0Zguqmsn8E4lzHkNfK2YXN1MBNtOQnTRfnHt0qEJYQh13R+3eEw+4ehe4/Jz+s0yJx7R2BZlVDLgQF91wNR4N582tsBvHRnmLOKEMi1CxO8dNmsF6KgXXqwzcLaKdjbDRZfUU/s0J/CyyNKnYCYoW0SeFkJ/vkvZJjeL0NCi0FSOzlR9/jHvqOYWRPG54gU7HpcexCa0ESWIVpm/ihaO51Sw4MoLu2jT0gjFLRDQfDPU3cWOiUskNyd69rfZlekDSf2SBMnq2YprdgbDsh8vDVJ9l1tGHvYYbbkpwqy/qNfpqx+UOfsk/OqGVqVNlkU0IV1v4qnxtiPFVgTHVNKkH8kjyhCKk0gyRdHb3Rak45xQJNJCzfKfa1SPHgwFB/r8V7alyYxW3+8nzD8gIhfJSsOKCSe21RveQXiRMYhEhXwr79WP/V6KjFio50gPiEQ2xeX5G9ev+uxAnYLGzER23rXUUujsqGC6fBLtPwh5VQbOCTpXtDFR/Jz2c2BhCiT8gBvdtY9ItvTMR+iD+5ZW9jPr46zRVYQW/nniBhUjPGMwruY3GSISbDoXOpe0l3ycVcb34m+jApTAGut5aPDvtbTjBzKcQblLHBi1cYIhxW2+av7UYE4eQ1QhYYDg4/Ucb/po4SBUXfWcP5Sn+V+e4TZrYTHXgIJF2remDNCl68b+nbWrOb/4FEl0W4I4Y3nDZL5sIxMGFO++M+ZBKLAraVH+VKbDWGGy+QbI0V3s3r3G3ANkps9rARLQcujFFvxaDm/heWvC6Kj/ZWCPLyRpWwFwevit2xUgPlvV0Mg8doVYX+s7OTdUypf45YLoKt/c6hp+9vwjNgWZurShdbZlDROK1nSlE7DpHqQ00VXdeHgK5RluFuy7UWjOdaUp9xqv1XNIbXtJPfouBDoSQnsL7IgZRbOlXDln91PhUo5wucOd/4brulOM99a9vQpyhSkSUcqSV/tEQUaeDNWSoqzWqeK5hXD4QxtmUxxyPSpL0C65qHcZsehkHR3FaLWTMrdNeyZamZIxQBEtaj8uQc0Qb/vPfVciYhpg2p+4bGNhiZUZ3OMNTVjm/U4pphf7QjUbxBhhEcY8Y9YfIqgZacWmKYTcwIyy6SAD4fmuUOvdZWdk9E5FR3vag6VM7jIaxhQ7Usc4FWa8IjdN+HK0ltaR6di5OnJEKeov6rRfoLgr8Q6Xw1Pqjzjeyp21hhxLxfJi24cpJdEr8sCyNeFZCbLQ0znHcEyo0HcKXfk+E/tBs7qO/nZIhyS4qMRcx50xjDxD+lipmIsSJ+JDxNX/QCXHnzuGaEmPIAAUr5lM7uXcdsFjmHuyC44QcQ7hLVNnDsREXc7pOtZAJ6tvTNQOx/XPpBEaGxyideOtn4hUSoTtt9hi9fPDIxJh05cHHzkUe05T/SzkAgQrWk+IFm1AQA4GTCv6nCQUDwYWGl5U8Go3aFPycJPuLXFGMtRIM+d9Pd5yhfztBxEYi/TBRwn0V/UofUk87mF79oSA2+fSmzCNZ9YByJbJ6dYYyhHF3YFRN5yvdjobuHwhFledutly59Eb1UrhL/WogihoNAyy/s4X/n9TGaSWdvKJuac341b+JTAUxV5cPXBUeBIU/ruJNX1TKUneJlQs5FDjKVh9hzboBqkj4IgOWR/RUjIo5l4C/iIYt9bQRN10NmexKNyZIQZ3ZgpXW2M+qNkeax5Tp5qklpF2SVqfwvUWvFDNvBRe+qz8hTlTLngfpfPSoP3VPlEnyCDv9Bo7Xk2S7EyGLFzTE9bAeER+LtGxLnQEOgRdi4CkSlg3NjqMnaqFbvCctIRWlYBmakIF6my9mB685PKyOIbdnobBV1EsZc6Ae67vmAuGmB8ZXcYjcxzJrDhv+CBjb1LCyrPDOZL5kXZkeQ/BiVaKZyGJhMVsQYEZkDUCzJXDRYuJfmE+Im/SzCIrwF2f51PxhIv0j7rD9QvMKMrXYgNNT6y3i9m8TFRCAFF1w84EOzh0f4SgwSZsDkwXMDJHALOBMLDy6nxXJExTjKOaCxkW85YwSupqRSnv8RtBMIeyr5tOJOU2MEjPnStuzpo2mKnqaSWML5YmxgyJvGJ2zM8j1I7k2oro0swNRGwvVXSvECoO5VkZEcU0lYc2TQBqTtiI0XkwQfopDkH2JdLQC0ApgFdLpC0WdQXOfZ2AWpTW2crzK87p8Av0zxi96Eupmahqf1EKj+YZJYrQEfBc0aCynTxhwCmVQB60KjP75LxwmxNrrkliQLEqZ4AMwsFoYGsiqqaE38WRFRzsZSNqga5XGDdovBlxm1QZD0ngphoFoAjN6BbkWIYMnuDQEqL37Fm6mL8oEvEzSxu4SRfxfFN5tM/F1JvLQKDJPMGOPro/G27BHm/p4arWzGLirQ4J1hZYqokFfeC9fbtNQA/DFGGVicsXVusHuTZxY9bfZ4nmglJSuF+gtBoR1F1YvNSrjqpKarD6v/3Xn6DEqQcTrEEHqBzu4noquWuoyp/CZXZfO2RK2uArZOFwnMzPiNRS6Up8qa3S3xbxRmsh/XiPuEgVO6noSQCcXLwamFl6u6ZEY3GaiY9akO1Q+jfNF43Lgxyfb8pRO1lD1dKOZ6+viCVcmBHyZKD/5jIQOyXvU+NAeOK/ngmuiJd31ZoIrv6xkaLMNV/RneNG/N+C7VBxBQc5HwHdzmjeGmDl2eWD+RiupS9Bu+Jadb4y/AQ7z0T90xQbriM7Hhsp2FSmZYJuyIk52Zb1KYmOEle6HKjYQZ9DqbaRNPA9aVx51Ye8he45zoSNsh2OOuIPXmvb+hYvljFN8XFoXZ8bnbEwVsKIsrYJijsKg27a72nil9g4PMLSuLr+HJU8kJOkEq+YKthV2Vr5MK/QDntZ8RDK62X2+bHXmvy0CgI02qyiKeFf36HP9kH27pLIcLu4qPS3agL0ZqC7EI8HE/Lafa/ajJbMHwPtLL0g2L9ZZQUbMhmIFkeYL2ljXPWvma2J91GS7gD9PnRuwYnXzaOHidaoGlAygXzrsGRQfMLxF43jbYLAVYb5az0E5XnKxCMyACvNZRjzVfc6GUxcahs78PJMDhTScgh5YyMj88fCqRQcjlogEFhzIcBa9cCEj8mon3fMR4jHpjCm/qINdPOgflAFIR09Jy6EX2C/OBQhHlQw7hUfxkmgTeJkUKUbK0UcdFVE/56hFvNf9ulT96is6osLTOwn1nDwhfXyMcuTam9qeoWW6FEBCeY6jwg4K42n9C0L8xEx/zyrH4D0SsjELAZwrZ3n3jg7yeVJ3Flw6dz9RTF/Ep9fUkDfpK/wY0qRbe4KRlJ2Z3lCQVZCXqHUUuodB2IXOm3dguPNh3xIQQ+3frXvDLgBZc6uTsjy76T9/aVLJdCnoepOuLV6PexQecfivbL87+LRmG+aGPF3x1Lta41RcmTN7Bt3Rej0gysDXVTBeCqTZwmZ8TKRLtZ6BbnwIDXwXrgStuavxLE7OHjNipRkx+7zt0ygooyWG6QFwxtWDOqHNujAg9WLwJaF7Xq3OCzzgP4MhFGkr7btEqc+SYXAyay2xjVUuGGUqyxheSVVBLjTfc4u58dWxelspGgs464ZwHT+Pv6Ws3mUS6lkMUpU7TR6OEf1KsMYbQDvIaDjZVxI/+MTbrLg5yNu1qPJ16EqtaaAnyAumIjXpJ4lz4XBmGZqbZYM536N447TkrEygSNQxaejUIHCtrZrFwwpF8UFPLcdr8hHIvGG68J6Na5ia1OPNIfoiNDd/AOBQPY+ISZyGE3l/PsSgpkCYm66XoJyToT99T/3vpkrKiHVkl39iTrS2Gt2UWCK8O0QRGWRUTk2fts3bNk8r3Hd3xD6AQAjiqcFfYyyPwWOeSP7+pVFUnQGbpVbNXnlN6yfswc0PEbu8xT8GxX3iIFX5BVyf9Yn6kRPo2SYGORYIUzOGkjCBpO7udpyne9JIyvw3x6yYhmmtvE33p/BFQWciJYnA6RtYUb7l/8U0lcQPpgI2pYjbXdCcYIGaxSlaLMDb1woE+G1Rw8p5tkd4kOQyuFU3xl/cnhbkov/VsRoq6i3rlhHVjObNlaxKtxphfDyXf66fD6Fe4G4MZzat35Jmtf4ese9jYKeeXvGtSGaLLpCC0ijJ6useAWa9HO4Oeqtl\",\"d\":5,\"e\":1}},\"browserId\":\"a7d93646-a808-470f-82ba-cbd8f5152a39\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: MISS\r\nLast-Modified: Fri, 21 Mar 2025 00:48:46 GMT\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3%2BEQ04Wtpk4gWV4kfbUhl0KwnmUFdWkC%2B7H%2BR6CKcS%2F8ByUhDICInbV5HyOB8Lt5QQiTSgrhlinpezlAcvPQHltQw%2BYp81kWg1gKJDZt0ACoI%2F2FwsscCRIGS%2B4%2BWwuprr9rCb3JkQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 923972127eb30afa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=564\u0026min_rtt=529\u0026rtt_var=176\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=1694\u0026recv_bytes=737\u0026delivery_rate=5372912\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upravafotiek.top/","fqdn":"upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"104.21.6.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-21T00:48:44.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upravafotiek.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Feb 2025 05:45:59 GMT","end":"Fri, 02 May 2025 06:43:41 GMT"},"fingerprint":{"sha1":"93:DB:A0:28:34:4A:D1:06:EE:F0:F3:63:61:90:68:D2:CE:72:22:80","sha256":"97:6E:B6:3F:43:E1:6A:F6:E1:59:0E:61:3C:42:40:74:DB:59:B6:C3:54:D5:12:C9:56:15:3E:AA:37:DC:F9:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":206,"data":"{\"resultCode\":107,\"ssoDelay\":304,\"log\":\"Detected Browser: Firefox\\nFrameListener: Frame returned code 107 with message IFrame: Integrated Windows Authentication failed with status code 401 (Unauthorized).\"}"}},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 21 Mar 2025 00:48:45 GMT\r\ncontent-type: text/html\r\nlocation: http://www.upravafotiek.top/\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jWjK4eMGiHbpW8c6vg%2BvYArLIhMgvlN7w5pp8AggFENwMXzxPI%2B5kjLIisZbtq4b3AL6xTTOIxOD%2B95mMsbN7IvjYPG6ojYQOUCMWAiw5nBU71oM8hdPiK8DTlym9nL0opBS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 92397207be52569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6179\u0026min_rtt=662\u0026rtt_var=10964\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3286\u0026recv_bytes=1255\u0026delivery_rate=4553459\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=8136c73b65be0f9c\u0026ts=356\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":10488,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":342,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/fonts/google/stylesheet.css","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:45.749Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/barlow/assets/fonts/google/stylesheet.css HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":24,"data":"[\"O43z0dpjhgX20SCx4KAo\"]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: text/css\r\nContent-Length: 185\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 28 Mar 2025 00:48:45 GMT\r\netag: \"278-668aaba9-4d56b6;gz\"\r\nlast-modified: Sun, 07 Jul 2024 14:52:25 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e5nYRftda%2FbB1SQvqVOetBEDxX6X9gaQxaAw6WNdxnvkjF2Ke%2Fl1EL8eshSwlNT6d%2Fh01SWTiL3LdNGQZQ7%2B%2Fbr8BL90yKyPfhcTGMNX1w9ORoByGQ3M3YS1YJuVa0UKZ06p02%2BiQw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9239720de9c1712f-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=438\u0026min_rtt=438\u0026rtt_var=219\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=406\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":632,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (656), with no line terminators","md5":"f7e13257cf57c182160b57dcacd78df6","sha1":"df7b9461feb204bea2d655c09402a78f6484cfba","sha256":"c3fbd1300379fa08e93642fcbebb210637a91276122eeeba3a7c3ae2235d61e8","sha512":"90472749e2bddc7a4197d59bb982a2a720a285b8512038803e137ca6e942af24fffd24e732c87ea829e42a445a67a36cd69e5e27e6156d10aa17720e0bff88e4","ssdeep":"","tlshash":"a5f08682a8da3430b0260d9d73eb97210d5f316a30225226bb2e2b165fe7968439576d","first_seen":"2025-03-21T00:49:10.818605Z","last_seen":"2025-03-21T00:49:10.818605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/fonts/css/all.min.css?ver=20220218","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:45.746Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/barlow/assets/fonts/css/all.min.css?ver=20220218 HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: text/css\r\nContent-Length: 22524\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 28 Mar 2025 00:48:45 GMT\r\netag: \"190f1-668aaba9-4d5652;gz\"\r\nlast-modified: Sun, 07 Jul 2024 14:52:25 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CVKdBiJE2IPmnbMkBb54CKSQ0%2FmNNzXmQVOXq0rTrr%2BA6nkyHklPXfa63a67IUFC6W4KWvy87Se4o%2ByVRUQ50K9Ayowq4b%2BcXCYTLiufpFJOo9CL%2BOhv9hNk4EPSMODZw%2FSMJWa%2Bzg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9239720dea6f569a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=515\u0026min_rtt=515\u0026rtt_var=257\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=413\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-04-03T18:46:53.248171Z","times_seen":22069,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":487,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/js/navigation.js?ver=20151215","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:45.754Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/barlow/assets/js/navigation.js?ver=20151215 HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":126,"data":"widgetId=0\u0026channels%5B%5D=Line\u0026userId=0\u0026isMobile=0\u0026isOpen=0\u0026isSingle=1\u0026widgetNonce=c7631312d9\u0026action=update_chaty_widget_views"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1094\r\nConnection: keep-alive\r\netag: \"b97-668aaba9-4d45cb;gz\"\r\nlast-modified: Sun, 07 Jul 2024 14:52:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hW6rJb8Q%2FiPQsxIGVgP8XjfxYugVl6TAX9wDmos1KpOsGohnn4hVRZfss3HQkhXVl7JLKRlqYaBo3PFT2hPn%2B6G77prEiTF9ByuT2gPzuwDdI7Nc%2F8zvl9aLGZet3Bbwlq2Mh%2Bk5eg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9239720debd07129-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=466\u0026min_rtt=466\u0026rtt_var=233\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=393\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2967,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3275), with no line terminators","md5":"1b311704eb77d8ba4f7bdd6f3baa0246","sha1":"cfa867a027ce3c055b6ddef20a47083affd4a9ab","sha256":"f88c00e74a03a5c22fe79f8a24072f36ba9db734fe1116a28f906a184390521d","sha512":"7ac91f4c2a593f70c37c76ffe6336c84ba83624dd96feae17c81bcd9b1b742649c9dec8a1b11bcc12b68b1991945e74726d91bedd152e799f4dc7fa9557cb05b","ssdeep":"","tlshash":"3b61249729f1233f499affca63ae5426362b9d44f7046912b838f841144c641ceb9fce","first_seen":"2023-04-06T21:19:48Z","last_seen":"2025-04-06T20:18:57.59186Z","times_seen":392,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/js/skip-link-focus-fix.js?ver=20151215","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:45.756Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/barlow/assets/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":150,"data":"{\"uuid\":\"XuxIFbHn6+2vVz7Z3P042/CMFBkNYHem5VzzA2PGA4MiRNKGn51vymDlJL58YvLNqECASA3Icd9uBhff+ZKIiA\",\"publicationId\":\"886798\",\"publicationType\":\"article\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 417\r\nConnection: keep-alive\r\netag: \"2ad-668aaba9-4d2603;gz\"\r\nlast-modified: Sun, 07 Jul 2024 14:52:25 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nCache-Control: max-age=14400\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bc3I5p8rr6EazA5QNKAR%2F51QrheAc%2Fer0IZOaPrnvyaNNfAQpIGZkCEhWJqKrGX0P6FFfsAt3d1kDHuIPi9egioufgvm4O9W%2Bi%2Fw71ug8%2BGP%2FI233dLheC9ehT68wY0YjKjnq9igvw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9239720deccc1c0a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=512\u0026min_rtt=512\u0026rtt_var=256\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=402\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":685,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (766), with no line terminators","md5":"825575b61613af18835e303ed5e0c7b6","sha1":"51ea336a9061664dd9d7ffaf0deb9e8944827f41","sha256":"c7981ef4dd35b54facbc8948cf87bd1ef850b4a80daeb2a71207d898aba92f8d","sha512":"6b59b25854b69f61608d006535b4d56a3121918b2f07d54c8e160cf122f40409d174fe0434c2d2073b806fb4a5c5f53307ba8473b18f6e27f995394f7258385b","ssdeep":"","tlshash":"da01c077333905b90cae7b5b8a6f160e297f6d80f810e2464848bc40142cd4fd66eea8","first_seen":"2023-04-05T08:27:29Z","last_seen":"2025-04-06T20:18:57.587215Z","times_seen":581,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/assets/fonts/google/lato-regular.woff2","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:46.271Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/barlow/assets/fonts/google/lato-regular.woff2 HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/wp-content/themes/barlow/assets/fonts/google/stylesheet.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1689,"data":"{\"name\":\"IDUX_ESTSClientTelemetryEvent_WebWatson\",\"time\":\"2025-03-21T00:47:23.301Z\",\"ver\":\"4.0\",\"iKey\":\"o:69adc3c768bd4dc08c19416121249fcc\",\"ext\":{\"app\":{\"ver\":\"2.1.20329.5\",\"name\":\"IDUX_ESTSClientTelemetryEvent_WebWatson\",\"sesId\":\"Eqr3GYfiugFRpSJFZ7HIrR\",\"userId\":\"p: 1900\",\"locale\":\"en\"},\"cloud\":{\"role\":\"WUS3\",\"roleInstance\":\"PH2XXXX\",\"roleVer\":\"2.1.20329.5\"},\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.6\",\"seq\":1,\"installId\":\"f654de1d-39f5-429e-9103-c98f17d1e359\",\"epoch\":\"3846500503\"},\"user\":{\"locale\":\"en-US\"},\"web\":{\"domain\":\"login.microsoftonline.com\",\"userConsent\":false},\"intweb\":{},\"utc\":{\"popSample\":100,\"eventFlags\":1048576},\"loc\":{\"tz\":\"+00:00\"},\"metadata\":{\"f\":{\"viewId\":{\"t\":6}}}},\"data\":{\"baseData\":{\"properties\":{\"version\":\"\"}},\"viewId\":55,\"Data\":\"{\\\"pltMetrics\\\":{\\\"apiTimingInfo\\\":[],\\\"isPlt1\\\":false,\\\"plt\\\":1271,\\\"timing\\\":{\\\"navigationStart\\\":1742518039608,\\\"unloadEventStart\\\":0,\\\"unloadEventEnd\\\":0,\\\"redirectStart\\\":0,\\\"redirectEnd\\\":0,\\\"fetchStart\\\":1742518040511,\\\"domainLookupStart\\\":1742518040512,\\\"domainLookupEnd\\\":1742518040514,\\\"connectStart\\\":1742518040518,\\\"connectEnd\\\":1742518040552,\\\"secureConnectionStart\\\":1742518040531,\\\"requestStart\\\":1742518040552,\\\"responseStart\\\":1742518041084,\\\"responseEnd\\\":1742518041084,\\\"domLoading\\\":1742518041235,\\\"domInteractive\\\":1742518041579,\\\"domContentLoadedEventStart\\\":1742518041587,\\\"domContentLoadedEventEnd\\\":1742518041592,\\\"domComplete\\\":1742518041676,\\\"loadEventStart\\\":1742518041676,\\\"loadEventEnd\\\":1742518041782},\\\"pltOverallTransferBucket\\\":15,\\\"dns\\\":2,\\\"tcp\\\":34,\\\"pageSource\\\":\\\"LPerf\\\"}}\",\"ServerPageID\":\"1104\",\"PageName\":\"ConvergedSignIn\",\"ServiceID\":\"3\",\"CorrelationId\":\"bee173c1-8306-4358-bc33-9c50481cb696\"}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 226496\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 28 Mar 2025 00:48:46 GMT\r\netag: \"374c0-668aaba9-4d56b8;;;\"\r\nlast-modified: Sun, 07 Jul 2024 14:52:25 GMT\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2B3AJqf%2FpIq%2F8KVCxolZ00yfevFXoMSKwHC6Ut8ZOdHeJ6Mf%2F2GdBoMArpgDcK30S50NA1it1zbbVe9Rg8ga5jfVaXn5%2F4MfAYI2gB2%2FcOqXZfhXbkiQEAiyzwXYNLmIL8%2FKqJ4ajkA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 923972112e347129-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=494\u0026min_rtt=466\u0026rtt_var=180\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2041\u0026recv_bytes=905\u0026delivery_rate=4925170\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":226496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 226496, version 1.0","md5":"7e0d3d5ee54b0a11873ab3db7cdb57ea","sha1":"febb106a64272ec1e6617a0a14c88a3bef4bbd3d","sha256":"fe82749d19bb01e16c1187f5e29a0af3a374190cb2902191268022ac87ec186a","sha512":"197724936f43f9ce9acfb81a886ae46ff80932554a06398582d2fa845e58c81103c81ea736f4795ed6c23d64f6c9ed584c10cdd662c2beaf28ec5ef7b95fe8f0","ssdeep":"3072:8t94vAqrGt0DZWrgibdN+PJfzi3V8scYNgU9LabqxHJ+O/Usq3wkqPWojbqn73VD:894vDg0nQCPJ+exUNcaJnHMYc783u","tlshash":"d4242381506edec5fe8972ba0b864d5e271095b436cf7034f8b9562b1f99cc0bf0991b","first_seen":"2025-03-21T00:49:10.821884Z","last_seen":"2025-03-21T00:49:10.821884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":645,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-21T00:48:45.098Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":229,"data":"{\"query\":\"query { consentManagement { cookies(visitorConsent:{marketing:false,analytics:false,preferences:false}) { trackingConsentCookie cookieDomain landingPageCookie origReferrerCookie } customerAccountUrl } }\",\"variables\":{}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-litespeed-tag: 4f090_HTTP.200\r\nlink: \u003chttps://www.upravafotiek.top/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TI8dR12kgTGT%2B%2FIZa7ndg9bl7mHHErIMKdmIzpwxtx8cdp2x8ZpYJpCgXnHzVoaNaENJqS%2Bh7GrIZ8MSPqIUBNmsfa9tg2SChC81PWqPI73Do%2BlZwkF0d0AfbR13sycHvfiRzttBSg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 92397209eac45687-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=462\u0026min_rtt=462\u0026rtt_var=231\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=405\u0026delivery_rate=0\u0026cwnd=243\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10488,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1953)","md5":"0e6bd1e9685c86b0b69fd724441d2fd0","sha1":"2f668c19225b5088906db1b090f4d88589841982","sha256":"4e895957e057de749d27e360344705a24d50ff42ec357678e7683c801bd281df","sha512":"c0cbe9ee5c0fc522a3138d11fd963505e149cce28487b83ef8c1126cc5e121744b302219d95b5c1f18128335f5740d279c124eaff8cb0a523b538cc715e49119","ssdeep":"192:fCmrx3BAlyhoijLOTciZ9ruPkYdMyVFh/SXp1sswZEU9Ioo4A3hPv5G49xDfkK2F:PvoiOTiL8Xp1fKX9ohX5nxkivFENZg4H","tlshash":"95221b369b563a37129342d7f17b7799fb7b8010918a7d30c0ad50b523c5ef4a2b714a","first_seen":"2025-03-21T00:49:10.822789Z","last_seen":"2025-03-21T00:49:10.822789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":9,"dns":8,"connect":1,"send":0,"wait":373,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2025-03-21T00:48:45Z","timestamp":1742518125,"ip_dst":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":55940,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-03-21T00:48:45.480598+0000\",\"flow_id\":1402412978774003,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":55940,\"dest_ip\":\"172.67.135.129\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"www.upravafotiek.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":507},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":677,\"bytes_toclient\":5444,\"start\":\"2025-03-21T00:48:45.106483+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.upravafotiek.top/wp-content/themes/barlow/style.css?ver=4.8.2","fqdn":"www.upravafotiek.top","domain":"upravafotiek.top","tld":"top"},"ip":{"addr":"172.67.135.129","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://www.upravafotiek.top/","date":"2025-03-21T00:48:45.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/themes/barlow/style.css?ver=4.8.2 HTTP/1.1\r\nHost: www.upravafotiek.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.upravafotiek.top/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1689,"data":"{\"name\":\"IDUX_ESTSClientTelemetryEvent_WebWatson\",\"time\":\"2025-03-21T00:48:05.495Z\",\"ver\":\"4.0\",\"iKey\":\"o:69adc3c768bd4dc08c19416121249fcc\",\"ext\":{\"app\":{\"ver\":\"2.1.20329.5\",\"name\":\"IDUX_ESTSClientTelemetryEvent_WebWatson\",\"sesId\":\"marqE52yeILbrlyhyQT3sj\",\"userId\":\"p: 1900\",\"locale\":\"en\"},\"cloud\":{\"role\":\"NCUS\",\"roleInstance\":\"CH1XXXX\",\"roleVer\":\"2.1.20329.5\"},\"sdk\":{\"ver\":\"1DS-Web-JS-3.2.6\",\"seq\":1,\"installId\":\"4ec4531e-c33c-4455-86d8-cce8ba14fd5e\",\"epoch\":\"1767946619\"},\"user\":{\"locale\":\"en-US\"},\"web\":{\"domain\":\"login.microsoftonline.com\",\"userConsent\":false},\"intweb\":{},\"utc\":{\"popSample\":100,\"eventFlags\":1048576},\"loc\":{\"tz\":\"+00:00\"},\"metadata\":{\"f\":{\"viewId\":{\"t\":6}}}},\"data\":{\"baseData\":{\"properties\":{\"version\":\"\"}},\"viewId\":55,\"Data\":\"{\\\"pltMetrics\\\":{\\\"apiTimingInfo\\\":[],\\\"isPlt1\\\":false,\\\"plt\\\":1125,\\\"timing\\\":{\\\"navigationStart\\\":1742518082086,\\\"unloadEventStart\\\":0,\\\"unloadEventEnd\\\":0,\\\"redirectStart\\\":0,\\\"redirectEnd\\\":0,\\\"fetchStart\\\":1742518083129,\\\"domainLookupStart\\\":1742518083130,\\\"domainLookupEnd\\\":1742518083134,\\\"connectStart\\\":1742518083137,\\\"connectEnd\\\":1742518083171,\\\"secureConnectionStart\\\":1742518083153,\\\"requestStart\\\":1742518083171,\\\"responseStart\\\":1742518083339,\\\"responseEnd\\\":1742518083340,\\\"domLoading\\\":1742518083594,\\\"domInteractive\\\":1742518084068,\\\"domContentLoadedEventStart\\\":1742518084069,\\\"domContentLoadedEventEnd\\\":1742518084076,\\\"domComplete\\\":1742518084164,\\\"loadEventStart\\\":1742518084164,\\\"loadEventEnd\\\":1742518084254},\\\"pltOverallTransferBucket\\\":15,\\\"dns\\\":4,\\\"tcp\\\":34,\\\"pageSource\\\":\\\"LPerf\\\"}}\",\"ServerPageID\":\"1104\",\"PageName\":\"ConvergedSignIn\",\"ServiceID\":\"3\",\"CorrelationId\":\"4ad64bf3-d940-42a1-942d-ae0e66404fc3\"}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 21 Mar 2025 00:48:46 GMT\r\nContent-Type: text/css\r\nContent-Length: 7749\r\nConnection: keep-alive\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 28 Mar 2025 00:48:45 GMT\r\netag: \"935e-668aaba9-4d56c3;gz\"\r\nlast-modified: Sun, 07 Jul 2024 14:52:25 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nCF-Cache-Status: MISS\r\nAccept-Ranges: bytes\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZYh%2BBY2fv7upO37L9Skwn55M92LOlORmvR88XuZsqa8b0FU8DgIv4%2FZxmuxXfMcdRoIzrYgdOmXs4PnIzzfO8%2FQ67Iqg4kjCZNxRqgQamSoxzI5jjuDWtymU7DIAv6a%2F81RwENrCMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9239720ddd345687-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=568\u0026min_rtt=462\u0026rtt_var=176\u0026sent=7\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=4974\u0026recv_bytes=796\u0026delivery_rate=10284090\u0026cwnd=248\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9ffb082864dff56670ba67e8eced11c4","sha1":"44fea1978f1789aa85c11575893d6ad4324447f3","sha256":"09884801ff281b9bc6c07da932adde6a0d73a44c37b91260f68b60903a9a006c","sha512":"11ba1d88fc45c1c0827c79d433780fba254a99babdf197b3713dfdd1ced42e6636ec178d554819b75c955f4108e2a60d50235686b49d3520c54754c4f2672280","ssdeep":"768:IHvy3SOVN6hA6SpkjlJkDSk+akej/Bku3k+S+ufk3V33FYaCTrVN:IHvyCOVNh/3pwk13FYaC/7","tlshash":"730398a17f502c84a21fd1a8afd6e794da2d4061ff0e4dade4512a3cc38929511bff4d","first_seen":"2025-03-21T00:49:10.823602Z","last_seen":"2025-03-21T00:49:10.823602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
