{"report_id":"10e787b5-522e-4da9-86b0-a3a9921edd68","version":0,"status":"done","tags":[],"date":"2026-06-17T15:58:41Z","url":{"schema":"https","addr":"ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"172.67.189.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"title":"Gadgets Store · Гейминг, ретро-консоли и периферия","dom":{"size":20530,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (429)","md5":"94bf79e8a11107ef4221048b78828a5d","sha1":"628404716346797da65acd4442e40f2d1f2a0ce6","sha256":"ff832571d4312a5f1c35398463a17ef9d5699610b707fe6faaf693f3650c0564","sha512":"571deb6476508dc360dd10e0b7c367abd94e232d00196b449bc1025a417beb34475f35b7a9e328532d4f74f27cff2c7b1501a11b36820243afedd231d1e453eb","ssdeep":"192:BHaFt3ElnRR71yZEyXb6hjFzzFDPkbx125zsXRsEa:JtdfxrzsK","tlshash":"7992a8b0d4f9947a011281d3da663f553eeab1b7e6df010032ac1e556fe2c85fa2352e","dom_hash":"domhash4f5f200b0915a4202c89c2d2ea1fea78","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"172.67.189.110","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T15:58:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ictpartnerslowss.com","ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-02","domain_rank":0,"first_seen":"2026-06-17T15:58:41.660107Z","last_seen":"2026-06-17T15:58:41.660107Z","alert_count":12,"request_count":12,"received_data":488053,"sent_data":10595,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":8,"received_data":62367,"sent_data":4502,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":1,"received_data":6677,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/js/main.js","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"736b02e91264d88d9020398f6c279a62","sha1":"e9af8ec83b1f21253deb21bc45b2ea25d9429634","sha256":"d54269e31dd0b13702620cf888678cef68883258686077f1fdd078769f05a7ea","sha512":"d90a4109e37e3fba2f06e4f1a2af2e0ffcf213aadfa0f46d81e135a6dcd9bb052c42f7726d59bc620b15158c354f0aaca276b1c943cff15915a6882a6f2d5919","ssdeep":"96:XNxGO/gVeiO9YBGTzAxV0TGkZW+qS4O50J:XND/gV3O9YBAETqjB4OY","tlshash":"3291b6f9a1f53cb901b384f9526b53d87878940ab48ec294366c85982fc2e55cfb34dc","size":4242,"data":"","first_seen":"2026-06-17T15:58:44.450199Z","last_seen":"2026-06-17T15:58:44.450199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4a65206fc1a25177ca20f6a84a0f22f","sha1":"e79e0bf04ee70b7ad9d2b95119056b2c00bfe439","sha256":"91cd28e2cb2e18a51e444b1a003a85184cc37d2c58cb96235af88b6cc672557a","sha512":"9f777c6c78b003f0fb82eedc2b698a9adf2e0778bce4d5bf32033a7f24e9e023af3662575929fd13c48d10f20559133b55308d23c5011b0210c2e3dd0894d615","ssdeep":"","tlshash":"02211dd1c8f5d07d006680e187a72fd23ee8a923e6ca0000379c26514fa2c96f6275fe","size":1416,"data":"","first_seen":"2026-06-17T15:58:44.467067Z","last_seen":"2026-06-17T15:58:44.467067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/js/products.js","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53e35fdd821c03a539dae246d9062a98","sha1":"5c13f472e853e4dff13b641aa8dfc864971cc3c2","sha256":"513c6ac9d19b4961a16080384bacbf48bd42bfff04352890235fd2994fe1d695","sha512":"5fa30a20a64eba29078e5bce036d0e2b9de168963f7b183c7fc57206623e7231c4b3702e149f220a4356436af95550f6635db1ea72ec918eaa23cff5f006d480","ssdeep":"384:AOdUc45GaeQgOHVIVLdNBc3kpO6qOUr0xoOjyvL6:pz4KQXItWOUmQL6","tlshash":"a652ee71865b599b1100b00bea0d7a4d346a40bfbf6b7336356c185e3fea11dc27db2a","size":13249,"data":"","first_seen":"2026-06-17T15:58:44.465238Z","last_seen":"2026-06-17T15:58:44.465238Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/assets/images/r36s/1.png","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.051Z","timestamp":1781711898051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/assets/images/r36s/1.png HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\npriority: u=5,i\r\netag: \"6a1ec842-d056\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NY0mdKrNPOkRm%2FOy4MNMhMdlp5M9HYqXqv3Crmvcg31cLzL4BijDzR7ozgQwo3eToZ4a6BHJC19CCLq7tSPfYOu6uKJBOh8Ods25JnhauyBmvOnxbCBkyuGmexqb%2FLNP9WKqQT6Qyw%3D%3D\"}]}\r\ncontent-length: 53334\r\ncf-ray: a0d34142d8c156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53334,"size_decoded":54064,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"3cc6b5b08af4570d067b0ee5ae4746b0","sha1":"ac035c813e4d22771215315f26806182bc065712","sha256":"5a95a442a65517f3dd15ecd234e0c02674f0a52b02ce14f40a9f65d922b7db40","sha512":"89c99907eaf10f093248487ec22bf97771b091094feab8512669b0bfd5087f6b9ea4c41c733a7aa581ea392051309e613666a1a5f8823ef0412add0b962a0866","ssdeep":"768:Tv3QGak9wxNbnkSUK94Z9ebj7WOgHEZBU3qttmn0EoAdYIALYVHq51LuB78hvyIy:LAGcx1kSt4DMnaHEZxnxlLYV0tuB7Aty","tlshash":"a933cfdf54b6549fc8c821b22a3450e32f53124b311e3e9722abd6469874b5ffec4d8a","first_seen":"2026-06-17T15:58:44.429277Z","last_seen":"2026-06-17T15:58:44.429277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.188Z","timestamp":1781711898188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Jun 2026 23:00:14 GMT\r\nexpires: Wed, 16 Jun 2027 23:00:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 61084\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8627,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-19T20:47:32.540177Z","times_seen":264830,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.194Z","timestamp":1781711898194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:57:02 GMT\r\nexpires: Fri, 11 Jun 2027 02:57:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 565276\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-19T20:46:04.53596Z","times_seen":359928,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.199Z","timestamp":1781711898199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5524\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:38:27 GMT\r\nexpires: Fri, 11 Jun 2027 02:38:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 566391\r\nlast-modified: Mon, 15 Sep 2025 16:35:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5524,"size_decoded":6336,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5524, version 1.0","md5":"a575b6d9df987563f85571f442cfe795","sha1":"cdc90db0ec64148e8572354a9ca9ed4a698c9da3","sha256":"bb1f2d582e7fba586ab70c91ef062d3becaf78b887654953863521b73665d171","sha512":"1d28899af97e4edd330f9440c7b2fade6dce9a1987e33789791e5d8ad1e5b5c5770901ac0eaacd513e0916336dd301abc0334a896f2cd205072f17fd846e7763","ssdeep":"96:NfDNeo9yqB+kbL0GlV/YfsRWvPC2vJT/7xtFHD1yPe0OQowlxVDWP:NfDNeop+k/fj/CiW3XnFj1HWLVDC","tlshash":"81b18ff32af2e39b5b0b4532f892f72b4dbd01253410a3b9d861fe89d92c511a4e11c6","first_seen":"2024-12-05T00:19:49.496381Z","last_seen":"2026-06-19T19:12:38.809227Z","times_seen":6875,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T15:58:17.326Z","timestamp":1781711897326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Wed, 17 Jun 2026 15:58:17 GMT\r\nset-cookie: e3b0c4_66=huoga71rvfeve; expires=Thu, 18 Jun 2026 15:58:17 GMT; path=/; domain=ictpartnerslowss.com; secure; httponly; samesite=none\n_token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; expires=Thu, 18 Jun 2026 15:58:17 GMT; path=/; domain=ictpartnerslowss.com; secure; httponly; samesite=none\n_subid=18uumd0.42.s2b3; expires=Thu, 18 Jun 2026 15:58:17 GMT; path=/; domain=ictpartnerslowss.com; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgmtHk4yfdDb%2BNzD3ww0iVtzjnsrno6k2SSrLb296yADyBo%2Bc9DDm8kDwMJQpcasTOaI57I3GQM6yO6Ka6rClojRmX96D%2Fhib2sHS5nmKg0C2dOOPUHo1rLOy6yF%2BbHhTFwpxetFtQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d3413e88a256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11467,"size_decoded":5000,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (423)","md5":"3f50da43af9e22865b6efb23e71a2d9f","sha1":"575a954b5e2cc967f57f7038e93e99d68bcce589","sha256":"3c78adf7408f74e428287231c862dded82c9bed2ccbe0d4aaf4ccd0785aa8753","sha512":"e681d3cac81aa23e9c848160dd006e2eddd9dfdee0a0a29ea0653a0d46fcf1f8106dc6f13ef884777a5e2d3fb5f478aa53b7c92eba3362b925ef751a4fd031d6","ssdeep":"96:3HaSuC8D9odBeFr0QBiqnpN0DsRhWz/S18jDTn9jgsTB2J2R/2My1ArQeiojZLz/:3HaRqEhlnRRz1yxPZEx125zsXRsEYD","tlshash":"4f3276b160f99479034380d6da2237193ebba5bba64f1200b5ac099d7fd2c89dd3325d","first_seen":"2026-06-17T15:58:44.436793Z","last_seen":"2026-06-17T15:58:44.436793Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":12,"connect":19,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/css/style.css","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.038Z","timestamp":1781711898038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/css/style.css HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a1ec842-3def\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onwhBmLjzvj2xTs5anFjizpYIErUK8pK8EXQrxyk9SwgKnG1SENA0Jej4zn9vypwfGlIei%2Bo16CvaMKQRnsGM088zEnYUTbXduWMo5glxH9%2FP9oHsy2P%2FwM8uhvQWHPcYcAo4ydu1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d34142b8bd56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15855,"size_decoded":4570,"mime_type":"text/css","magic":"ASCII text","md5":"38f3591be5c0872ac55f5f6fa60595c7","sha1":"f068b737a6521ffc76ff3bd7781747cbe0dcb8ff","sha256":"497120cad4da321973c095c90b1c7d4772457aa7530ffc0fbb925b10811ef4ed","sha512":"cefbbce513a1c1382fbf53145795954ca6736b7ce4a2a17009020e3f44e9c1de1046a1d69ebc45cc295159296c0d68ce2d6fe99924fcc552c33ec5b3b86f7b7c","ssdeep":"192:lA2Rdz7qWHU03f7ZMKGEkCs3FHsRPxAeAn/subCaCAdNw0B54pz81csjTwKXT8tZ:lA2CaFRiSHJNCHkep7LEkH6","tlshash":"1662745773346238b527b664b9979b9ab328a143910cf5bd6de4000cc6cc2fa56b2b8d","first_seen":"2026-06-17T15:58:44.439715Z","last_seen":"2026-06-17T15:58:44.439715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJnecmNE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.229Z","timestamp":1781711898229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJnecmNE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5644\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:25:33 GMT\r\nexpires: Mon, 14 Jun 2027 10:25:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 279165\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5644,"size_decoded":6456,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5644, version 1.0","md5":"90926c36b712cb131f3f890bbb8c477e","sha1":"854e6f96532537002044042175ea57d6f83bf4e9","sha256":"0b1fcab42c18b69bcfe9ce4799fcbff5af1621c53ffcfdc4723c6f5ec4ee3ffb","sha512":"83807f0c7a832ffcc7093e676b8da21b323e0ca46b407978249565197416429f8208191b50a47a0ee0e0e56fb0a7e52a57aceebe77544580b88c174078446147","ssdeep":"96:fIFfzjZxOWVAeoZKJygG7gQ0ARrvfzR7YHDviqi9CdWRxHTjlt7ndMk+09RiOb:wlLOLZKJzJARrl7Yjvhi9CdoTjR+09L","tlshash":"dcc19e7ff40ea6424e4c3c7afa3fe30fd5c1109f5e3985f12696a9283562195821c2e6","first_seen":"2024-12-05T00:19:49.50341Z","last_seen":"2026-06-19T19:12:38.739989Z","times_seen":23561,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/assets/images/laptop-i9/1.png","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.425Z","timestamp":1781711898425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/assets/images/laptop-i9/1.png HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\npriority: u=4,i\r\netag: \"6a1ec842-a2a6\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FiKvWKTGq6PWGH582OM4Q4U0HQABVFfK6v90mq9O2AGVMPFZlXg2%2BDNfd2Bl6nZQeRqwz6VqyE1JJYvJbCwAc4ctdOEmwCWqjuGg%2Fh2Z3SRZN2PE9CU8p9A3V4EujfEy0DmQixB5mQ%3D%3D\"}]}\r\ncontent-length: 41638\r\ncf-ray: a0d3414528e556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41638,"size_decoded":42370,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"3d1496299b9888060c1ea459a7b19481","sha1":"e44c9826ec767fbd70a2f6b06bdc78065ce48eed","sha256":"5d58396f4fc5036b8a52a648772b6767c41e062655cd94b668033531fa4746f0","sha512":"62a87e1f0a39ac707417a00cb048032007ece284639d7251ef8bfb5409c4cc1a93965306511222df16032eab1ee99f67fe1876f766986ca12dc2dfb8627f2831","ssdeep":"768:hfw2NxIdWh9qwu6aoCEaofx3TwxwFxbPIHAeO/5k:hfwYxIazaoAqxDw0AgeE5k","tlshash":"ad1301f7d1ec4082d1493df880a2c36dfbd27f152a0968962514ffee3e5cd4ab464962","first_seen":"2026-06-17T15:58:44.444107Z","last_seen":"2026-06-17T15:58:44.444107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/assets/images/notebook-i9/1.png","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.429Z","timestamp":1781711898429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/assets/images/notebook-i9/1.png HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\npriority: u=4,i\r\netag: \"6a1ec842-1c798\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pe2cOs4%2FgYsS7NMlJeCPTsLsK8pq0OiGU5wyNEPJzmmEFxqfIwYdancE%2BQzdbZZq%2F0vMM4V%2BZO1XSC%2BDUJemHN5X%2BrrIVsRbnxXljBIwoy4X9tSpWTh4LC9%2Bbo43mBW3iz1tx1%2Fk1A%3D%3D\"}]}\r\ncontent-length: 116632\r\ncf-ray: a0d3414538e656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116632,"size_decoded":117376,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"9d4eebecdfc8f244d462375a90d8bbde","sha1":"0375351d60e17b45be1735da7ea2334d17f2e53f","sha256":"36a08911b985dea0eb4f992bcb9bca9e1965b1e855d1c6c9165ecd960fccb8af","sha512":"77344a17bd81760abc6eb786981153f21b93069985d16da43a7fe0ff8ff4871354e6c0a676a43a5f7a4b773d6059a4fa7a889165452e0d3c622852d395e7e78c","ssdeep":"3072:Ex4cJOygEJu1uU4/rCZtNy+JxT5L6Hkg67GYNd7xOblEoSAoM2YipVhGX:W4tygELU4DkNy+gEg67Gul0lEoSA8R8","tlshash":"56b30203577cab5bd6c77f75f5a0fa38e329122ce419824e266482ab79be7c00745bc0","first_seen":"2026-06-17T15:58:44.446773Z","last_seen":"2026-06-17T15:58:44.446773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.201Z","timestamp":1781711898201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 07:45:50 GMT\r\nexpires: Fri, 11 Jun 2027 07:45:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 547948\r\nlast-modified: Mon, 15 Sep 2025 16:35:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5432,"size_decoded":6244,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5432, version 1.0","md5":"367d2aa05bf0382d8bc48614fbaf8740","sha1":"57566ddfd1dede1f5f0ee67ac376859248d31976","sha256":"ccfd87f69ef00d811da3d06488cec4e79ec99d289cfbcbe4be42031cecae775a","sha512":"23848f39655b1ce3b64c14ce382a66ec18d1c7abf33694fd0e5a504208127872b15ddb13707932a060a2f43bb0eff96f7a253fc0146357ec86cb7a559aee2ac4","ssdeep":"96:0o7L0c+v8JPgykZh1SsLiYMT8fWHdvm9coBtYuIYySmrPaoVG/KgElAWaV:z4khgf8cJMTmWNEBtYuIJfqN9/","tlshash":"88b16c93b89b3caddc32057eaf9b8366042ae6d78f6174ce4b09a1b640c78214e16566","first_seen":"2024-12-05T13:29:29.813365Z","last_seen":"2026-06-19T19:57:48.903984Z","times_seen":7354,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/js/main.js","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.043Z","timestamp":1781711898043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/js/main.js HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a1ec842-1092\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O771MzgrMG%2F7scy0gmIhDP%2FDkCxBGtra9hVnqho2mw%2B%2B%2B3nRbKJIjJLkOQhvqS3cLsyN5EST3BOp2sy3%2Fz8JST1pshaOfvFi6wqot3BvOKXW3ZFvUEJXwPhWvfrP4zZTm3JTKazleg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d34142c8bf56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4242,"size_decoded":2490,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"736b02e91264d88d9020398f6c279a62","sha1":"e9af8ec83b1f21253deb21bc45b2ea25d9429634","sha256":"d54269e31dd0b13702620cf888678cef68883258686077f1fdd078769f05a7ea","sha512":"d90a4109e37e3fba2f06e4f1a2af2e0ffcf213aadfa0f46d81e135a6dcd9bb052c42f7726d59bc620b15158c354f0aaca276b1c943cff15915a6882a6f2d5919","ssdeep":"96:XNxGO/gVeiO9YBGTzAxV0TGkZW+qS4O50J:XND/gV3O9YBAETqjB4OY","tlshash":"3291b6f9a1f53cb901b384f9526b53d87878940ab48ec294366c85982fc2e55cfb34dc","first_seen":"2026-06-17T15:58:44.450199Z","last_seen":"2026-06-17T15:58:44.450199Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.193Z","timestamp":1781711898193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:16:30 GMT\r\nexpires: Fri, 11 Jun 2027 02:16:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 567708\r\nlast-modified: Mon, 15 Sep 2025 16:34:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7824,"size_decoded":8636,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-06-19T19:08:24.088355Z","times_seen":27976,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.197Z","timestamp":1781711898197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Jun 2026 06:02:49 GMT\r\nexpires: Wed, 16 Jun 2027 06:02:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 122129\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-06-19T20:47:32.564355Z","times_seen":260384,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/favicon.ico","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.388Z","timestamp":1781711898388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Wed, 17 Jun 2026 15:58:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mbn9zlLNSPVp3Atqzvqj9XpuZ04PXVE77cTqTH%2FNgV9kMMIlzR2qNKHAgkuhShjjboPzC4SsSwzCSPMG3smdiwB%2B8T0dN63HuDphjw8ePdTsTNKE%2BgXqc4Nxifd4gAcMS4R%2B0TxpdQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d3414618ee56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":734,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-06-19T19:40:38.924571Z","times_seen":84755,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/assets/images/gamestick-m15/1.jpg","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.400Z","timestamp":1781711898400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/assets/images/gamestick-m15/1.jpg HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\npriority: u=4,i\r\netag: \"6a1ec842-17f3a\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oD%2FmUEJOYf89v9Y%2B8i11Ml9xZZq8EIoK2B5lyuoOUr4R2CaxOxr1pRLDheFGL0QM0RM881c0xf9qKhpoYPpksAj47AcWqYBfU9%2FqOIZLGpVspnDNmiXNOyRWT6MZU%2FhH88W%2F%2FEv89A%3D%3D\"}]}\r\ncontent-length: 98106\r\ncf-ray: a0d3414508e056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98106,"size_decoded":98846,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"e178940253ac3fc1978eb8f6a5a6a7db","sha1":"2ba402edf2a18d56d646932c6f2719c0ec47258d","sha256":"80045ba8e4b1a1ae5559d25585426e9b7413ea721d5c2fa092236d768e4ed681","sha512":"b89a29c1fe33665e1a878f3ce0cc7ad5789d466639a5f2f7dd38dc4d11581b7611c6d673413955da20ecbf3bb58eb830694f60bb804ff11d579a6d7260d14d35","ssdeep":"1536:2MrqzU9J06sV5vsd81owNymlw8LqUKKUhYpiXXg3kfbNGZmphy+b6xPl+:2xY9JBIk8GwNLlwtKRpiXXgAgZmphyRW","tlshash":"78a3128c82d65a2fd3a1283edb98c7db017f1667c572f8e51a20a531e78e4f2673845c","first_seen":"2026-06-17T15:58:44.455407Z","last_seen":"2026-06-17T15:58:44.455407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/assets/images/gamepad-rgb/1.png","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.419Z","timestamp":1781711898419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/assets/images/gamepad-rgb/1.png HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\npriority: u=4,i\r\netag: \"6a1ec842-456c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7C84T4JBjkx5SmkPP1NgnMXmy2H3BGHdc3Qnaw%2FHrj6PCIegvBbgxeQwRRd%2Flgz1nmgX1KJ9ceYe%2FbSSfdePfA6LiK6Pf1jaSaU5NUwFyNk0mquz5iSONLEAgErVK0diEPEWAVw%2FA%3D%3D\"}]}\r\ncontent-length: 17772\r\ncf-ray: a0d3414528e256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17772,"size_decoded":18506,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"1462271b057ced6e63bee3b32f730832","sha1":"d4618906e14ae81b2454e177d41e116ad64bba8e","sha256":"14289317bcc55995a59bbb867764038d862785918863703aca27f71e80d12f6b","sha512":"b47362140ecafa882664a5f7cbfb7b900c12e18eddcf211d554e4a81c237d5f325ff61802ed5ba65bb6adaee112cdd56cbb99d30a90ba5e3dea60e044d11f8f3","ssdeep":"384:m9hOcZlmg1SiBzZ8QN9cHKp7wWreg9RY/vfFIfnTkCujeQer68WTEsF+kG:mrl9RzWcRpRCIRO1WnTcCK+L","tlshash":"4f82c02253406735e3f13fb1e8992b647814ac1ad29b8507921fd1e1fb827fe00765db","first_seen":"2026-06-17T15:58:44.457515Z","last_seen":"2026-06-17T15:58:44.457515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.034Z","timestamp":1781711898034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 17 Jun 2026 15:58:18 GMT\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":1243,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f4b874a96c6e11344f7b1939c38f87e2","sha1":"15879e821b5dda4854585c17a9bf43d5c8eaf8b5","sha256":"7e933b9d624b6b5f720d276780008035bcf7ba564403d931532059e9041e8bd1","sha512":"0b3488b90e5a4f635cd59b2c2d5bcb018b5bd377e0e00cd095d33fbb81d0f84f62429485639ecba7d0e2bfeebffc6544ae19ff7e02221a257f7e7cad1edacbe5","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpE:lgKQcXr3lVwa3RzJ/apsn","tlshash":"3cc19cd1087be114ab871cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-20T07:37:39.957294Z","last_seen":"2026-06-19T04:26:46.150987Z","times_seen":1077,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.189Z","timestamp":1781711898189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ictpartnerslowss.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 03:05:19 GMT\r\nexpires: Fri, 11 Jun 2027 03:05:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 564779\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-19T20:47:32.587897Z","times_seen":248397,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/assets/images/teclado-5en1/1.png","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.421Z","timestamp":1781711898421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/assets/images/teclado-5en1/1.png HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\npriority: u=4,i\r\netag: \"6a1ec842-11d96\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ylrc34SPn4TjY5VDt9u6AmYD4Dn88SWHzTtnhsSMlRrsOoky7gCHkkGWNCJ8t5d%2FhOq2uVW2t%2FoWDLlaDvttAGYMKkBqeAsN87JxgrZmOaopSxNFkV16yk8zi7kyQxG4i6Prd7AMYA%3D%3D\"}]}\r\ncontent-length: 73110\r\ncf-ray: a0d3414528e356b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73110,"size_decoded":73841,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"98261f80da7040fc14fc310251ace566","sha1":"767e997cfa971e70558c8a7a421554fff25705db","sha256":"698b87f7085dfb2b8b633283066084768b9a1ccfed03c476a845495fd83f9247","sha512":"6a11c37e3e061b951a5409baaba535caf2b4f738f4a64475fa19f599f2a26805b28a499727b8751a581d3df2a8ec642370d0054283478b48449cd30b7f421857","ssdeep":"1536:17BF/9oRbS2ER4Q4RCukTgV/1ikBFvvooDl3esKVUBhzb2+Mo6ORYHZ1T:ZH6RbSAw1ThYF3ooQs9hbP9mHnT","tlshash":"25630213f9985e25e8e23cf667e85303735eb7d3501a287fcb54ac40029dd90e6199cb","first_seen":"2026-06-17T15:58:44.461284Z","last_seen":"2026-06-17T15:58:44.461284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/assets/images/teclado-4en1/1.png","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.423Z","timestamp":1781711898423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/assets/images/teclado-4en1/1.png HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\npriority: u=4,i\r\netag: \"6a1ec842-8228\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOK5QgwZB3ILns1BFO%2B%2Fvi79phFegSyzXxlmnfibC8ZJ%2B4ro8cF70cXYgdCiuo85euLzpsgmH9SKeswJKnLMTVHpoWXJJPQDJqUAzNTnc1aLb0HFkyyGu9WMUhLq%2B5bO9hlZL0B%2Brg%3D%3D\"}]}\r\ncontent-length: 33320\r\ncf-ray: a0d3414528e456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33320,"size_decoded":34056,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f2125b77abe13cf934882197e3f1bdf3","sha1":"50803c174f4e14fd07bd1be4a81d20eea17372ad","sha256":"37b200f2f9101a6aa600126d54078e661f9fccff7907cf08022582cedd9c0a78","sha512":"7d3f209e74a231d9b4abeb1ee962244e611f71c738939b62c21fe2d69878002006957ff9383827dddeb1037d571de0a1565d5987b509f5e7c8858c6ae601552e","ssdeep":"768:9yMrE1PF/PUkuz1+uPkFXv0diT0w884MRfMStyMVqE9v9P:CPt/A1IviA0gHfDpVqE9v9","tlshash":"7ee2e111cb4dbc4be1ea257897b15fa36b943ebf2d6b7d6d34160b4671d84001b0788c","first_seen":"2026-06-17T15:58:44.46322Z","last_seen":"2026-06-17T15:58:44.46322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ictpartnerslowss.com/lander/wh-ru/js/products.js","fqdn":"ictpartnerslowss.com","domain":"ictpartnerslowss.com","tld":"com"},"ip":{"addr":"104.21.49.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name","date":"2026-06-17T15:58:18.041Z","timestamp":1781711898041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ictpartnerslowss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 07:08:41 GMT","end":"Mon, 31 Aug 2026 08:07:13 GMT"},"fingerprint":{"sha1":"8D:97:FD:A6:E4:BD:25:E3:09:4D:F1:1E:DC:A8:8C:16:B0:4E:22:1F","sha256":"3D:72:95:CA:74:F3:13:3F:5E:41:5D:F0:94:99:AB:4F:FF:77:FB:A5:67:EA:17:45:4C:23:A4:1B:92:D9:B1:5D"}}},"request":{"raw":"GET /lander/wh-ru/js/products.js HTTP/1.1\r\nHost: ictpartnerslowss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ictpartnerslowss.com/DNPPnGQB?fbclid={fbclid}\u0026utm_campaign={{campaign.name}}\u0026utm_source={{site_source_name}}\u0026utm_placement={{placement}}\u0026campaign_id={{campaign.id}}\u0026adset_id={{adset.id}}\u0026ad_id={{ad.id}}\u0026adset_name={{adset.name}}\u0026pixel=1181316967453376\u0026ad_name={{ad.name\r\nCookie: e3b0c4_66=huoga71rvfeve; _token=huoga71rvfeve.1781798297.1.1f3e5741424d4d60a27d53a7dd3a942c; _subid=18uumd0.42.s2b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 15:58:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Jun 2026 12:10:42 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a1ec842-33c1\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BCoW%2FEDalV12Xds%2FxfU1WcCIc%2B%2Fej1ZswsgtVvQSWQZqYmwz7Bz8GmJqjOPzJBLToqbi76bZxK1e40%2FRAwg8lBZuBQMdCrEPhQ1TGuSj5VGvhjwQ%2FPRchUvJl7FkRUUjOEsaBR28g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d34142c8be56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13249,"size_decoded":4619,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"53e35fdd821c03a539dae246d9062a98","sha1":"5c13f472e853e4dff13b641aa8dfc864971cc3c2","sha256":"513c6ac9d19b4961a16080384bacbf48bd42bfff04352890235fd2994fe1d695","sha512":"5fa30a20a64eba29078e5bce036d0e2b9de168963f7b183c7fc57206623e7231c4b3702e149f220a4356436af95550f6635db1ea72ec918eaa23cff5f006d480","ssdeep":"384:AOdUc45GaeQgOHVIVLdNBc3kpO6qOUr0xoOjyvL6:pz4KQXItWOUmQL6","tlshash":"a652ee71865b599b1100b00bea0d7a4d346a40bfbf6b7336356c185e3fea11dc27db2a","first_seen":"2026-06-17T15:58:44.465238Z","last_seen":"2026-06-17T15:58:44.465238Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"ictpartnerslowss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}