{"report_id":"12708a0a-454e-4033-804f-57d809f58ad3","version":0,"status":"done","tags":[],"date":"2026-09-28T13:29:37Z","url":{"schema":"http","addr":"www.goo.su/hbXzr/","fqdn":"www.goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"185.43.4.171","port":0,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/","fqdn":"wordpress-215141-0.cloudclusters.net","domain":"cloudclusters.net","tld":"net"},"title":"leboncoin-p","dom":{"size":7079,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"244181f7d301e1569a1745d47332c4d9","sha1":"ac38f6ee263c1886063337cc07db2bb35ab24747","sha256":"b4d184651c1946bc09b383c5123fc912ff2f78f07f2213fee4592122d4fb4c8c","sha512":"04573539dc045c5b731abc4d0363804be438f675df6f0e2f60a743c8334629bf8512d1ad429e61b8c5b20dd64336af6efd6807f5032a33c1fb7e16fd0fb13747","ssdeep":"192:GC9ko2Bfsw5Y24PRx2yOfnmdTPKbXlml9FMj:snkhSXlmla","tlshash":"cae12e9796e318067507c4a86ff64b473298c903c14ec96a7bdc628ccfc69e5da9378c","dom_hash":"domhash579aebef806e0115449ca18c360d86a6","first_seen":"2026-06-17T20:06:26.341219Z","last_seen":"2026-09-28T13:30:08.481729Z","times_seen":22,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.goo.su/hbXzr/","fqdn":"www.goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"185.43.4.171","port":0,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-02T13:29:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.goo.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.goo.su","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"hb-bidder.skcrtxr.com","ip":{"addr":"158.160.196.30","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":251644,"first_seen":"2023-10-16T10:23:02Z","last_seen":"2026-09-22T08:25:12.68184Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":518,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.skcrtxr.com","ip":{"addr":"151.236.102.200","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":365796,"first_seen":"2022-04-18T12:16:45Z","last_seen":"2026-09-24T10:44:28.676943Z","alert_count":0,"request_count":2,"received_data":7211,"sent_data":1078,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ck.silvermob.com","ip":{"addr":"212.95.41.186","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2015-08-25","domain_rank":416424,"first_seen":"2025-03-13T10:51:02.742077Z","last_seen":"2026-09-16T19:52:57.457552Z","alert_count":0,"request_count":1,"received_data":854,"sent_data":593,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-27T23:17:57.5349Z","alert_count":0,"request_count":2,"received_data":261972,"sent_data":977,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}]},{"fqdn":"static.kimberlite.io","ip":{"addr":"212.8.232.117","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-16","domain_rank":3822236,"first_seen":"2025-08-02T01:45:57.64153Z","last_seen":"2026-09-13T22:45:47.621831Z","alert_count":0,"request_count":2,"received_data":59084,"sent_data":905,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn1.moe.video","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-05-06","domain_rank":488400,"first_seen":"2022-05-06T11:57:48Z","last_seen":"2026-09-19T17:36:55.896834Z","alert_count":0,"request_count":2,"received_data":368549,"sent_data":944,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp.q-bid.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-03-13","domain_rank":0,"first_seen":"2025-11-23T13:51:24.988475Z","last_seen":"2026-09-19T17:36:54.138939Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1213,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssp-asr.digitalcaramel.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-09-17","domain_rank":0,"first_seen":"2025-07-14T09:44:15.902535Z","last_seen":"2026-09-15T16:40:51.870579Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":520,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cm.pxltag.com","ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-25","domain_rank":0,"first_seen":"2025-11-18T10:18:49.548967Z","last_seen":"2026-09-19T17:36:54.079805Z","alert_count":0,"request_count":2,"received_data":837,"sent_data":1240,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"095rii.moe.video","ip":{"addr":"45.92.176.182","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2015-05-06","domain_rank":0,"first_seen":"2026-05-20T08:46:56.819953Z","last_seen":"2026-09-23T00:58:16.281625Z","alert_count":0,"request_count":1,"received_data":483,"sent_data":659,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"sp.linkssp.ru","ip":{"addr":"31.184.215.7","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2024-09-18","domain_rank":431263,"first_seen":"2025-05-28T20:33:39.660871Z","last_seen":"2026-09-26T17:26:00.736243Z","alert_count":0,"request_count":1,"received_data":541,"sent_data":624,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.ohmy.bid","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-06-09","domain_rank":283479,"first_seen":"2023-05-23T09:17:10Z","last_seen":"2026-09-21T22:34:35.367942Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1645,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.adspector.io","ip":{"addr":"213.171.19.202","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2026-09-24T10:51:43.645888Z","alert_count":0,"request_count":1,"received_data":507,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.dvgroup.com","ip":{"addr":"5.35.3.132","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-12","domain_rank":429256,"first_seen":"2024-09-03T12:22:07Z","last_seen":"2026-09-20T17:58:42.200058Z","alert_count":0,"request_count":2,"received_data":676,"sent_data":1139,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yandex.ru","ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-09-24T08:54:01.855143Z","alert_count":0,"request_count":5,"received_data":11726,"sent_data":40358,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-c.skcrtxr.com","ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":1421921,"first_seen":"2025-07-30T23:15:47.657918Z","last_seen":"2026-09-21T16:55:04.347094Z","alert_count":0,"request_count":3,"received_data":747511,"sent_data":1504,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"match.new-programmatic.com","ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":172258,"first_seen":"2020-02-18T20:50:06Z","last_seen":"2026-09-19T17:36:54.52304Z","alert_count":0,"request_count":1,"received_data":254,"sent_data":576,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.bidvol.com","ip":{"addr":"194.85.16.54","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"domain_registered":"2019-09-24","domain_rank":199701,"first_seen":"2020-02-22T12:37:29Z","last_seen":"2026-09-17T05:56:56.241385Z","alert_count":0,"request_count":1,"received_data":676,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.adlook.online","ip":{"addr":"77.223.121.90","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2023-08-04","domain_rank":0,"first_seen":"2026-06-17T09:01:51.67436Z","last_seen":"2026-09-21T07:48:08.164522Z","alert_count":0,"request_count":2,"received_data":758,"sent_data":1089,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"otclick-adv.ru","ip":{"addr":"139.45.228.133","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"domain_registered":"2011-01-17","domain_rank":27130,"first_seen":"2015-09-17T11:20:30Z","last_seen":"2026-09-19T06:29:34.615522Z","alert_count":0,"request_count":3,"received_data":1647,"sent_data":1732,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-27T22:46:09.539328Z","alert_count":0,"request_count":2,"received_data":883460,"sent_data":955,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.adspend.space","ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-02-11","domain_rank":345453,"first_seen":"2022-10-20T06:12:42Z","last_seen":"2026-09-17T14:58:56.538975Z","alert_count":0,"request_count":2,"received_data":1141,"sent_data":1176,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"klkmdsync.site","ip":{"addr":"199.68.197.20","port":443,"asn":1426,"as":"LIGHTWAVENET","country":"United States","country_code":"US"},"domain_registered":"2026-07-31","domain_rank":0,"first_seen":"2026-08-05T09:54:15.186499Z","last_seen":"2026-09-19T17:36:54.459715Z","alert_count":0,"request_count":1,"received_data":442,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn-v.skcrtxr.com","ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-12","domain_rank":827781,"first_seen":"2025-03-06T05:51:25.781558Z","last_seen":"2026-09-20T17:58:43.661038Z","alert_count":0,"request_count":1,"received_data":3427,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sqmodq.moe.video","ip":{"addr":"155.212.215.69","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2015-05-06","domain_rank":0,"first_seen":"2026-05-14T13:31:12.854477Z","last_seen":"2026-09-20T21:54:48.07534Z","alert_count":0,"request_count":1,"received_data":483,"sent_data":719,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"st.top100.ru","ip":{"addr":"151.236.122.216","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"domain_registered":"1999-09-30","domain_rank":291148,"first_seen":"2014-03-27T16:20:51Z","last_seen":"2026-09-22T19:43:14.258264Z","alert_count":0,"request_count":2,"received_data":155296,"sent_data":904,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ads.tds.bid","ip":{"addr":"89.219.34.76","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"domain_registered":"2022-07-21","domain_rank":0,"first_seen":"2026-04-29T08:23:12.412099Z","last_seen":"2026-09-21T22:34:36.83701Z","alert_count":0,"request_count":1,"received_data":324,"sent_data":566,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.lotus-dsp.ru","ip":{"addr":"213.171.19.207","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2023-12-05","domain_rank":395207,"first_seen":"2023-12-09T00:32:38Z","last_seen":"2026-09-19T17:36:52.366065Z","alert_count":0,"request_count":1,"received_data":565,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kimberlite.io","ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-16","domain_rank":17539,"first_seen":"2017-09-14T05:18:59Z","last_seen":"2026-09-22T18:28:51.96434Z","alert_count":0,"request_count":6,"received_data":8974,"sent_data":3391,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tms.gpmdata.ru","ip":{"addr":"62.105.142.42","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2021-03-12","domain_rank":572397,"first_seen":"2024-09-23T08:23:01Z","last_seen":"2026-09-16T17:40:07.648481Z","alert_count":0,"request_count":1,"received_data":790,"sent_data":689,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"csync.skcrtxr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-04-12","domain_rank":0,"first_seen":"2025-10-14T18:19:49.979598Z","last_seen":"2026-09-25T02:35:53.007458Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sync.upravel.com","ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2017-03-25","domain_rank":187521,"first_seen":"2017-05-29T09:13:46Z","last_seen":"2026-09-19T17:36:54.895104Z","alert_count":0,"request_count":9,"received_data":7548,"sent_data":6026,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"catsnetwork.ru","ip":{"addr":"194.186.91.197","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"domain_registered":"2020-02-18","domain_rank":54005,"first_seen":"2020-03-11T05:53:05Z","last_seen":"2026-09-16T15:51:23.65214Z","alert_count":0,"request_count":1,"received_data":761,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.programmatica.com","ip":{"addr":"77.246.157.45","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2016-10-12","domain_rank":256275,"first_seen":"2022-12-17T01:18:07Z","last_seen":"2026-09-26T09:59:15.477614Z","alert_count":0,"request_count":2,"received_data":1060,"sent_data":1151,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssp.al-adtech.com","ip":{"addr":"45.139.25.118","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2024-01-16","domain_rank":164448,"first_seen":"2024-01-30T10:38:38Z","last_seen":"2026-09-27T09:21:08.903756Z","alert_count":0,"request_count":3,"received_data":1086,"sent_data":1597,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.digitalcaramel.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-09-17","domain_rank":595427,"first_seen":"2025-04-11T03:55:33.858896Z","last_seen":"2026-09-13T22:45:47.732863Z","alert_count":0,"request_count":1,"received_data":39139,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sync.techdsp.ru","ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2024-10-09","domain_rank":660524,"first_seen":"2024-11-01T12:08:52Z","last_seen":"2026-09-19T17:36:53.80946Z","alert_count":0,"request_count":1,"received_data":1050,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"goo.su","ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2019-06-14","domain_rank":25926,"first_seen":"2017-05-12T19:35:59Z","last_seen":"2026-09-19T06:49:15.692562Z","alert_count":0,"request_count":4,"received_data":116685,"sent_data":3301,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}]},{"fqdn":"sync.adsp.io","ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2026-01-23T12:22:25.077202Z","last_seen":"2026-09-26T10:12:37.375539Z","alert_count":0,"request_count":6,"received_data":2045,"sent_data":3363,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pbs.alfasense.com","ip":{"addr":"172.67.185.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-29","domain_rank":258268,"first_seen":"2019-04-04T15:19:31Z","last_seen":"2026-09-19T17:36:52.283732Z","alert_count":0,"request_count":1,"received_data":1020,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"match.qtarget.tech","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-12-26","domain_rank":701462,"first_seen":"2023-01-28T17:26:52Z","last_seen":"2026-09-20T17:58:43.252193Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":568,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r.ussp.io","ip":{"addr":"213.171.19.134","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2021-02-19","domain_rank":0,"first_seen":"2026-02-02T19:20:36.602762Z","last_seen":"2026-09-19T17:36:54.596063Z","alert_count":0,"request_count":1,"received_data":880,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtb.moe.video","ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2015-05-06","domain_rank":556724,"first_seen":"2022-12-09T12:23:40Z","last_seen":"2026-09-15T17:48:03.079558Z","alert_count":0,"request_count":13,"received_data":2015,"sent_data":7570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":2,"received_data":42150,"sent_data":1160,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.ussp.io","ip":{"addr":"213.171.19.197","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"domain_registered":"2021-02-19","domain_rank":0,"first_seen":"2026-02-02T12:21:39.854981Z","last_seen":"2026-09-26T20:05:57.731979Z","alert_count":0,"request_count":1,"received_data":597,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ads.digitalcaramel.com","ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2017-09-17","domain_rank":589179,"first_seen":"2019-02-17T17:30:06Z","last_seen":"2026-09-19T01:13:39.220372Z","alert_count":0,"request_count":1,"received_data":175309,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1026--fcc2c245-e2bd-4abd-8b0f-e4fe53067a32.stbid.ru","ip":{"addr":"185.115.93.201","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":427,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Angie:1.11.2","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"wordpress-215141-0.cloudclusters.net","ip":{"addr":"69.30.235.156","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"domain_registered":"2018-11-30","domain_rank":0,"first_seen":"2026-09-28T13:28:52.199515Z","last_seen":"2026-09-28T13:28:52.199515Z","alert_count":0,"request_count":4,"received_data":31983,"sent_data":2533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-09-21T16:31:28.28991Z","alert_count":0,"request_count":11,"received_data":2628956,"sent_data":5298,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":2,"received_data":13307,"sent_data":1015,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ia.box","ip":{"addr":"5.9.56.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-04-26","domain_rank":0,"first_seen":"2026-02-08T05:50:16.764804Z","last_seen":"2026-09-20T17:58:41.839582Z","alert_count":0,"request_count":2,"received_data":1211,"sent_data":1170,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adserver.gear-hub.ru","ip":{"addr":"46.243.210.75","port":443,"asn":0,"as":"","country":"Sweden","country_code":"SE"},"domain_registered":"2025-08-02","domain_rank":0,"first_seen":"2026-08-05T15:11:36.505842Z","last_seen":"2026-09-19T17:36:53.9873Z","alert_count":0,"request_count":1,"received_data":611,"sent_data":621,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.goo.su","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-06-14","domain_rank":0,"first_seen":"2019-08-19T07:32:40Z","last_seen":"2026-08-06T15:38:02.777293Z","alert_count":2,"request_count":1,"received_data":0,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bid.adx.com.ru","ip":{"addr":"83.222.96.198","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-19","domain_rank":269473,"first_seen":"2022-11-09T10:33:24Z","last_seen":"2026-09-18T10:29:57.449569Z","alert_count":0,"request_count":1,"received_data":179,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"d4b930e4b40f357b0810e54825bb9d22","sha1":"eabc9350a4dcd6ff2a76cf2458895980e8b8e2d7","sha256":"83a3d8128633c28b4f2a0f487abc90914048040236e69ccccf65aa79a1af3b55","sha512":"10f89827900f5b175e89e3ddc61b6b64d75a9cac97ca649c205bba83cfce525fa617a80d8022c683ab3d3285e1f04d1d5c97730d0d01962747ce83f2e5fa134b","ssdeep":"","tlshash":"c3c04cf83dd9540582566425b6c5b800e2a57929406ddc53566cba3475365d13829449","size":143,"data":"","first_seen":"2025-03-09T17:07:32.490921Z","last_seen":"2026-09-28T13:30:08.548001Z","times_seen":1466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"090f28d51290ed91dca9fae9013561fb","sha1":"13d585b8bf443804f70902400d6b5753c200d11a","sha256":"3dadf471d556cd1cacd79fe6f2bc9e7dece71d13ba64eb55247149281cedfe64","sha512":"6416621f151cddcd8558a9e04847239f0059a6302091ff1bf88f1cc6253c8c0979fb0d92d2fe58ac8a8c9c49fd3a01d52822e67b6370907df93e1abdee7f54aa","ssdeep":"","tlshash":"73e0125ffb6034f1469360315c59052917721153c758485c3f0c202d2ffc12a0597398","size":343,"data":"","first_seen":"2025-03-20T20:07:09.49385Z","last_seen":"2026-09-28T13:30:08.548689Z","times_seen":1413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/4a9ffa05444f67ad.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c23afa24336f7581f7b04ff9263362f","sha1":"c0fd82e1c412213b4974bcd8564aae4fdafe0ea1","sha256":"c29a95d8a093096c8eb2bd21d3eece8a627614b08b45e5256209781f48f1654f","sha512":"543f24fe538226287987e574beb26a69aeaa870f5c86080621ddf28898f9523f9991bccbcdf0e331d50d6d36a1a96feca7dc462b36cc4896ccea11b906014899","ssdeep":"96:RPwE8Oe2b4XfjWP5VlX821dFeFYGYoP1vECxGSaXRJufXbwTv1J0a2qVB:RPt8N2XP5PMrYVqs82R4Wv1JzLX","tlshash":"eba1e7fd324172ba97c601d084bf9512f67d1e11980ab461f14894112cb6fa721efefe","size":4763,"data":"","first_seen":"2026-09-28T08:51:21.794542Z","last_seen":"2026-09-29T00:03:44.679802Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"47b69801f612b83f0dfc164dcf5ca102","sha1":"6173a6041d5ed85a6d460dff647b125469e242d1","sha256":"27914599abd212de5ae84c5d332f4af70f8b100e610ae672b84de6f4e0c3a2fb","sha512":"e44d7815b5461db94b16938e48d8fba642d0aa4e223415d635af247af19dde6b4a7208ffca518879366af617cccb5f3496ac81c1a9eaff074fe6881d3eb7a072","ssdeep":"","tlshash":"14d022242fb33030c9270ccd6276471020a2101db87dd09ab5ade8245f08fd28b57b58","size":241,"data":"","first_seen":"2026-06-18T13:34:32.231577Z","last_seen":"2026-09-28T13:30:08.549218Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"af78c0410524f2e13b67ec89ec4788f8","sha1":"45978a3de4b5343a57fc8648c5e7699bb9fcb2b7","sha256":"de21937fad8b4d3619e87ae8d54643c7de8e0acaf870f10631f895c46b9e3b1e","sha512":"c9d5637be607bce4b398c807ea22b8aa5fcd21521ba2924c3d09c13bb8b9c556bdbf1e8afe09f747682f10015ab6c198f96631c554750f959bcfad4191935d62","ssdeep":"","tlshash":"53e0c0db74160c71619f8ab623b5a12c7153260d78095822fdfd88242f5868748166dc","size":420,"data":"","first_seen":"2025-02-21T04:45:02.122843Z","last_seen":"2026-09-28T13:30:08.549828Z","times_seen":1479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0eaa312c6884ef5f8a21a0ecf300b49","sha1":"11e5e4574ac8c1ced03dde10e12e2c56d936ed17","sha256":"2fd36d4ea04bc5fd73dec2336bbcff253b66d359bdd5af31565d3ba78593318c","sha512":"56d0164b4e2882de90b2815fffc2c468843832736e7e2ef239cfd072a28073fc2184aa1188e6a2060f62c12e821e57f5e15f5ca8356bef301d5845182ecae363","ssdeep":"","tlshash":"70900233f0c18c7e4021b04411693508b543011c8290102066010830953704b95040c4","size":50,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-09-28T23:43:09.653416Z","times_seen":25999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3ca3602130d054e8ae0ba3fdc7440fc","sha1":"2e710c4fa85917cab8ca5a0a2c889a88b2f26a7f","sha256":"bf2eb902f9b73404ffd541f44b5752652801d95e1971d5cfa8b377cf190bf5aa","sha512":"d21ae864eb9748e5b693b71f117b032155e839a03e210d86c8b46491e0a88491749c9bdb5b5a87c93680e8cbb400186a540e09412f3c33d78ba0eb3d19cc0e62","ssdeep":"","tlshash":"43c0126fbba038f28693602158280926267211434b98886c3f0c202d2bec12a06ab298","size":181,"data":"","first_seen":"2026-06-18T13:34:32.268533Z","last_seen":"2026-09-28T13:30:08.550949Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"49246304a2f4672b1635e8a3d21b073f","sha1":"32bbdc0cf534a90e5772e4d25a4643dbcdbd9da9","sha256":"3126e946a07ac96f2dd2fd315e708ff0c1e1555910868664556cf6bd09c03528","sha512":"7968d0a4ebec63a47e548697c1e790bc95516f5c77ef80377390c8ade4a7e3c5fe5f7dc98f9a9c4cbe8047e8d7200dde8325e4cd508207b1f2e726c119745e75","ssdeep":"","tlshash":"63c0121f7b6034b1469360105818041516712143475c489c3f0c602d2bec11a0597698","size":181,"data":"","first_seen":"2026-06-18T13:34:32.274987Z","last_seen":"2026-09-28T13:30:08.551641Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7208574dd23751a5efe2ac324ecbcf5a","sha1":"9a7bc52f95011f28b13861627b75e003e1df9bd3","sha256":"e64fa3f13c8357be701f755724eff281405272f99f99288d6bbd70a5beba87de","sha512":"84606283738777479ac610bc64337ea2fac6b0762d5f97a2418f6047b919fb10aae6a767ffd3a71ce85b8f80a33579801df2163f1ebe2075e6d60e30cb700056","ssdeep":"","tlshash":"d6f0aba5389c1421c37711656beb600d7416683f0c0abe25f90dc8422f6d9ad086ba5c","size":466,"data":"","first_seen":"2026-06-18T13:34:32.27902Z","last_seen":"2026-09-28T13:30:08.552161Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"11ca71cabfafc75d224fc8c1a3f9489b","sha1":"ad890c7be6fcc1aea6cd0c287c408e22a93a9ab5","sha256":"06365db2e6811407ab1fc1afafc625646cba576dcbd27860efb9e5d553390571","sha512":"11d59e548a149181914010f47bd4d697d8fd2c075c5bd3d23f0fee9e6b836a4717f36c977acf4b6b4dbb3c9fdc2e584c3e51b77dbb8f9774b51263374294f6d3","ssdeep":"","tlshash":"c4f0780b19a3343457e250bd677fea0d62aaa4070590d8007cad80897f50e6b8a3aacc","size":616,"data":"","first_seen":"2026-06-11T15:18:04.717766Z","last_seen":"2026-09-28T13:30:08.552912Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d0db54b839d2d0e768803cede67ed01","sha1":"6229b84a6d404b7cc4245b556e9fd73ff93abaa0","sha256":"bb8327284a547037eb17c591cd750b18a3be5a9c0dc9247e825e6d80061dbef2","sha512":"9d41364a50a23bc57b045d0d8e4c0742b8da1522d4ea726c41c0883f936844573dd64df9b1639f97692bd1dd6b545f7952786eb853961ba5247b8844d646a651","ssdeep":"","tlshash":"e6f09eb18403a4b9840748b37468a5556865b0a32d513596705e273a6fc5ba1702eab8","size":508,"data":"","first_seen":"2026-06-11T15:18:04.715675Z","last_seen":"2026-09-28T13:30:08.554071Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"73e24c9e9f8712b4d5226c934988a19f","sha1":"d7093adbaef0b9da5c1a9b03748400e41aedae3b","sha256":"9896bd6e25f8c5c29691412169db69633b59dbffd2ddf5d17f2c48b5405854e6","sha512":"5caf7fe667796480fa1afd1171eafb9d5168ce0a64d44c4e4636655285ba80b0919002bf92480ad25556770a05e48e7e644fdc98546a97a4875ae5ce87da7686","ssdeep":"","tlshash":"a711479b2de320345293a0e9972f91187037400b4804f8363e8cd28a6f65bad4e75a9c","size":855,"data":"","first_seen":"2026-06-11T15:18:04.718697Z","last_seen":"2026-09-28T13:30:08.554711Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@2.x.x/dist/alpine.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b901f5538c64bb8a5791b6138c38b20","sha1":"b477f26628009012b202d875d52ab4f2e5c8a221","sha256":"df214f6d418dbc7a53a5e5ad9939e8f2dd624bdf2ed72596cf248e5d4112c720","sha512":"237601d0c8a603f128589625e6cafcad8ee0b137c05c3e69a412e06e1a7dd4d7b59bf6472b1e3cf53f64ea8a0da368b334fd2f89e6746b26b6d26d010f989839","ssdeep":"768:p49sDJg4my4lc8xhYjiq3O6oMpk3T5KFvVi9/bLPwCC5haN:pltKcDk3Te9i9/bL9CrA","tlshash":"95c2fb98b299b03147e6a2f350f64045b3392598780a5094f338edeb2525ccd69e7fbb","size":26971,"data":"","first_seen":"2026-05-30T15:59:09.42412Z","last_seen":"2026-09-28T13:30:08.536829Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.top100.ru/top100/3.22.0/mgc.js","fqdn":"st.top100.ru","domain":"top100.ru","tld":"ru"},"ip":{"addr":"151.236.122.216","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb56d07f3dee58e41e03369b573d062","sha1":"10027224ccc41467b4cab5b5b115e5f5b14c5c21","sha256":"526e6cb9225855a6a69c24abbdd46c44a1d458727775812b013de559e16c21de","sha512":"e19ea8fff9df228a5ae00b0b56a274be218ca9c6d1c21e7ebef3461f30aaed087ef17d49a683993cbbd6f434d717e1c041fd857d9c7fbe579eae00c05e2557a7","ssdeep":"96:rGxcccHJ2mYX2TZ7+J2vrhhTKGJ2vrGsJ2vrwA:rGxe625+EhhTKGEGsET","tlshash":"1991c04cf9b1b06647b7a4f1022f140ae37ea55ce4ac6568a2c4e4f06cf540e9627f7c","size":4518,"data":"","first_seen":"2026-09-28T13:30:08.515925Z","last_seen":"2026-09-28T21:48:05.657943Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kimberlite.io/js/botd.js","fqdn":"static.kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"212.8.232.117","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"3679a81019df994ace208dcb56cac409","sha1":"5f6e67dc7cde0ac9ae9ca86864f0adcdf0cba54c","sha256":"bdb8b3b0ffef3a4c89ce8a6fa2bd1049813b5559cbc1906363c95f85bd9b8f56","sha512":"20a7dbafa48d450bd5ab7be8b3bf595ed9b099ccb9a3b65b9d9444e534ab979b3f9283f8b31f3482e795191343e6891f0f633991c43af80e74bbc553c1f6eb4b","ssdeep":"384:UKIq+8EXBz8EQ7QR9+8nkHW34uX6G3PAAstt0:VIqWXBzp+88ZG3P5stt0","tlshash":"9fc2629a7ce630354a2b3039172f9104b674951b291dd9a0ba2e03907f9583ad3fefdd","size":27519,"data":"","first_seen":"2026-02-18T23:30:37.284223Z","last_seen":"2026-09-28T16:35:59.880695Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5e373bbe348b3c7dd5203b97bc74a83","sha1":"15242a18cac095d1862c303d1719a6e15da1c53a","sha256":"0c184333b5827be4a2e2eb43e34e955977f6bff532152ee58c68c28a970b477d","sha512":"dca1f1d9095bd7ca5c0294224d5716f3e45bb4a16c105e4e8786a342aa8030983e561db94635f9697e2f0c6c095e7382953b94864a8c453ab43ee9aacc87e014","ssdeep":"6144:EBavrxWqtzxnsc+YnII0HrNYJlmgBZhN78zDfDdeLBKkN3F0w0wI3khcziOKDOw4:yEcUK0nIv3v+C1","tlshash":"a394b59db1e2b0a143e765a4803f5a0bf23b6955780d9090e721e9e1bc7899f9133f3d","size":430174,"data":"","first_seen":"2026-09-28T13:30:08.555378Z","last_seen":"2026-09-28T13:30:08.555378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c70d73445208d44b6c4c28d9609e7af","sha1":"19320c5372579190dd24e946c0194398cb5ab7ef","sha256":"e6f133fa9800096ea8a16cf7462d55af640f3b99cb05ae26246a5c32c2137d58","sha512":"fc242b241dca0de5abcacaafb8930f212fb65fd06f248fddb3be0ca97dcbbb8fee6f2437cd71eb44c893ea144c83cfcb0dd1b495e904fafa6a2e2e6cddf5b98a","ssdeep":"","tlshash":"1221eb1c1f799464802390bf17bb93982262b14b3a44e9483acdd1484f9c7adc9b2fdc","size":1248,"data":"","first_seen":"2026-02-04T03:01:34.002864Z","last_seen":"2026-09-28T13:30:08.556651Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.top100.ru/top100/top100.js","fqdn":"st.top100.ru","domain":"top100.ru","tld":"ru"},"ip":{"addr":"151.236.122.216","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"75427bcd725bf69a719cf64a693ee837","sha1":"bc53496aab7bee3d251e3ea0e32d696c43166b74","sha256":"220db6c00a3bb33ea6a89ea9c80ee6f48603989c0a38b09b39b257a110b18520","sha512":"bc2fbbcefbe67d64ad4fd8fe484aefde8470bfd93c084a5510ec4304c13fc9e544fc346f986f39f2d2a04906889b5fc09b49c6ec921d249487d434dea199e50c","ssdeep":"3072:EGSs+7dZBTQp8TLR03+WlEn5hAEynPGFdVJtP381upX9YW/w/xHJ/AbXHm:EGSz7dZBTQp8TLR03+WlEn5hAEynPGFc","tlshash":"96e3758cf5a2f06543a3a0e1462f110af33e692cb44a556cf699d8e26cf494e9137f7c","size":150112,"data":"","first_seen":"2026-09-28T13:30:08.508635Z","last_seen":"2026-09-28T21:48:05.640797Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/frontend/js/redirect.js?id=399eaf833ac5f607b305c4ace0c25eb5","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"399eaf833ac5f607b305c4ace0c25eb5","sha1":"07a18a0a451b4dde777bac1e148bb8062ca05f05","sha256":"9ac92dd22b771410a6944726d1ed1fd7a7faaf239c2d80eab0bc1233e6ce95d2","sha512":"986f60e07a6b6084b72807785804f77f4aa04b727951edd0d3a394d2a493eb95f5c774ad93d25b9b80c3abe0a3a63df6940472577ae4889ded92565f8d4da38d","ssdeep":"1536:Sqeo1GzGM+7TWaxsZGSJRgO1vVakaGSUUMOE6MLBvhTut5TEm3/f3CfxYgPDK:SrfgOjaAv/TutVtAYgrK","tlshash":"ba8309ddb2cab06347a770ba407f550bf236199d684d8400f115e8e9bc78a4a923bf7d","size":87787,"data":"","first_seen":"2025-02-06T20:23:39.270815Z","last_seen":"2026-09-28T13:30:08.532335Z","times_seen":1444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/5c450e2798995b5f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"199e72c8fd9d2e6136e58e56dbac12f2","sha1":"e416b94a536b56a5518bf1251a9b2d4d3c77ee1f","sha256":"4d7b9f175cbd14af54508a698584375cca219f430507ee85f8616f103957cceb","sha512":"d8ee50481a211d201cc8cabfd8774d45038a00e87c4dd15f8f37f917bb5a6f20e3f1f6aaaf244f38efbef18ca57c6d69ad27d102290daad5874d44cc11794d63","ssdeep":"12288:FA4oH2D50i8cujJjgMY9nmFJ/jlaWtmt9kTliBtidagcBt5UWnhBPnzBa:C4oH2t0i8cujJjgMYFmFJ/jlaWtmt9k3","tlshash":"fde4e88af5e1b07142e7a0f9803f150ff23a7a15550980a4f62ae8e57eb858e5137f3d","size":716708,"data":"","first_seen":"2026-09-28T08:51:21.769483Z","last_seen":"2026-09-29T00:03:44.777598Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/integration/mail.adman.vpaid.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d18b1332b42c3023d7cfe6e8a7b9df3","sha1":"bfe8937334334ed9e7db3071af3c8c2a7aecc991","sha256":"2a4a3e0dc384d6935914c37eded9c9283dbd41ad308a6cdf513b00c00b75f084","sha512":"91b9e8e960ef4669a886590b6a40845fb0b7fadf830964004d11006155b332652eb5168c39bf9349a5a4e6e077113939c9e8e5baf6f7547bcc08ed7690e75eae","ssdeep":"96:FFPDiJW6HOVUgJ8WZW4ACzisCcTa/BxZt5Gir3YDQr3HKW6HM3s24XiWXNNa33WL:/PDiJW6HOVUgJ8WZWehdTa/BjGK3YDQA","tlshash":"32b10325324658aa5ec0419ea8270749a61063e82a1d842cfdbdfceb94ccc0e7d7c7bd","size":5538,"data":"","first_seen":"2026-07-03T22:51:02.738426Z","last_seen":"2026-09-28T16:35:59.865166Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/b1e2874bbe2d033a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eca467590c977848effafa9c5f0b35b","sha1":"d5bde57768574d6cebf4fdc50b5dbfbf145edd12","sha256":"cc17e78fb4e5bd94cd182619d76967e2fba152b06d710bf364af1219bfa2f743","sha512":"4f9478a958067ac130e576f13623e6d1c3e8fc9b6a365b7acb848f4f0e8688f40bd938694ee6714c91b05e4b11542dce9671866255924af351727f05f0ee1b46","ssdeep":"192:kjF4De2ABy72SyAEQ4m2Bx7y1MpjRo6xMrkxC+xfZGK+WRAOz:kjmp2yCzaGx7y1GjverkxKEAO","tlshash":"8242c9c9faa1b47142ea50e6407f0a0ab32db50e1419d418b65cd9d26ff8c4f6136b3d","size":12817,"data":"","first_seen":"2026-09-28T09:40:38.826225Z","last_seen":"2026-09-28T15:08:42.224901Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/","fqdn":"wordpress-215141-0.cloudclusters.net","domain":"cloudclusters.net","tld":"net"},"ip":{"addr":"69.30.235.156","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf18e5aebf1c19629aefe2478c1fcbfb","sha1":"51a187006c4ac36767e4db7c08a035b3bd8fde9a","sha256":"95e932fc9311df57d4327738ac8498d270f6e51481e16163c7b10cfc1dc0e75a","sha512":"1aad587a568bd4e0d0af39e2ee0de8eafcc2aa937d8c21d63c16783011169be25c9541055a9a16bfc8f99684facca3c81e6489cc0696deba1849cb675a5c94a2","ssdeep":"","tlshash":"1de02bcbb88f1c431847250b0b47711874754be70008d40dfd4f83050f6c32dab5319a","size":321,"data":"","first_seen":"2026-06-17T20:06:26.34817Z","last_seen":"2026-09-28T13:30:08.557348Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"82a5cbacbf71ae5c01a675b4dd5de950","sha1":"ffbeb95c58b859148f2a6619c4b28632f73ccc86","sha256":"4250aff1ae2934fb2afc96009b369f7badd9eaad743b78682884f751d1b63e99","sha512":"8faa76dc51df88154f761680990f03ce98ef43b2f0dc44601d21b340ef68e4b2987db8f4d20b054c8a8dc23823f6be342604c76051246ba8747f4a783e042d4d","ssdeep":"","tlshash":"57e0121ffb6034b1469360305c59041917722153c75c489c3f0c602d2ffc11a0597798","size":368,"data":"","first_seen":"2025-03-20T20:07:09.495724Z","last_seen":"2026-09-28T13:30:08.566434Z","times_seen":1417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TRGNQBDL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e703a561640dc0c45948838a4526816","sha1":"b370a5d64df714c4ac219cd6cfd4d55bf66f3643","sha256":"5fb4127ac5a9c09ed1fca6ad4b5f67db8e90a27f2399f164d0039744afe2268c","sha512":"bab3a700976eb3bb1e64a60f2179ba45f08edfbb4828a8f80a93b54918471b8bab28dbd2cb6e08df3130753b32b515f29c558f3bce7fc5d5224c084cd98dc094","ssdeep":"6144:awp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLC9/Sd9:NvKE63sV794","tlshash":"fa7408ccb7d6b42283a3b574503f018bb27a6992b84cc898f286edd42d7465a4177f7c","size":354076,"data":"","first_seen":"2026-09-28T13:30:08.532911Z","last_seen":"2026-09-28T13:30:08.532911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/ujs?ymss=digitalcaramel","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"47e665e0f388e2637ce2cc7b8dbd40eb","sha1":"bba4792370576e09b84b9e5386df014122004b5b","sha256":"a31e3d5f6d0829304f412e1997b3f5f9171ee20bbdd816af35ea729b5535ebad","sha512":"92ce404f2c77df4f13740ccdeb69bf35488c5fd230dfc076d00f2d156af0731496b1b304558e9225e3cf216ccb80da969976271fa4da4eb388600a309ba0669d","ssdeep":"192:5ZhQ2ciF+UAt0PktAX7y1Gt9X+7OyrbApSFIBT0d/q5ZFY:5c2ciIUp9XmtgpSyBYx6K","tlshash":"68d1069372a8903900b10077d19e2f0169338f71d4db9da6d53de900b995f4aaf9bbec","size":6218,"data":"","first_seen":"2026-09-28T13:30:08.540584Z","last_seen":"2026-09-28T13:30:08.540584Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/bb070c4c4b5de49d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"67f86b964c15ea7a6a8ccf22a7326898","sha1":"d2592b879b4772be35f285bd6fdcfde399896c52","sha256":"281adce0ea5ddefe4399a2110f1e1755fc392768365ae87cd237ec80eab64ac6","sha512":"3813e0f034354d9ab73f713ed5724c26a905cb086410fa4c7fcce1a6cc4a4245370bbc57e8c4bd06a267aed5d605452007c0889c1b81e5f67aca56796b67ccc4","ssdeep":"768:+S8S2XuKTeA/l0+jtC+MWtP//I/pgFZmrm0ZrdzS8Hkhq8zWndPfjCaunAbCGRC9:1ay05V3cHTKE+nAvKCw","tlshash":"d803b58db1d1f0a146a7a0b0813f210ff27b6895a82d9440f765e4e17cba99f6073f6d","size":38375,"data":"","first_seen":"2026-09-28T08:51:21.803093Z","last_seen":"2026-09-29T00:03:44.504831Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/p/cr.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"126ed5d5e16cfb30b9b489236fafe046","sha1":"ce37977b753547e53be3af2a967595630edfe3b0","sha256":"b85c940cbba43ed9b029f7d98c67b5f17dd340b1058bb598c5499b7e6760b328","sha512":"3f5337c2a6597f3f007d5750d70916ee9d256824bb9d22d495fdcae213bbc269341c76a86a2879e585cb0c8673a514ff219aa5c66433f6ae35df3af6c71adcba","ssdeep":"6144:rYopTfsU72CkTkb1SVqwZ92udpXQlUQrrqEgLhA/lySk3Kth1mSYSVJbKzfM6PL0:sopTfFkTkb1SVpZ92UQrrqEgLhA/lySZ","tlshash":"34743cd533d3b826879591ba60374209f33659d92c08412cf57ce8e67be1d8522bbfb8","size":362241,"data":"","first_seen":"2026-09-28T13:30:08.541736Z","last_seen":"2026-09-28T13:30:08.541736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/adsdk.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e00e6777805146b1d5824bb70f34321c","sha1":"93a1115a4f61c5f5a3c9c308f1e6595d4d06c4f3","sha256":"0f83c5893abb07b8e5099f36427bd77057c7d035ca3ec9661fe905299e535c71","sha512":"792c498ad34c27d881d0fd87c027b422bce5be764ba2a159cd8a99c9f9cee3ab48bef3dd632a7407703e722d89cb8c55e6ed6484fb8e36a3a3855532858b726e","ssdeep":"1536:fblxT3V5hDS+A/pS7c3C6basPupI8il5CefDfg6mVXlfnnfYJsB:fblxjhDS+Oc4jbasb9ffvJS","tlshash":"a7a3f6cdb9c2f06143a36ca4403f191bf23b6aa9581c9094e251dbe07cb596e8377f6d","size":106208,"data":"","first_seen":"2026-09-28T13:30:08.567213Z","last_seen":"2026-09-28T13:30:08.567213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"313819f3cad849a7b8fe8fe3cef65d1d","sha1":"e71721392d9902c5c1e5ea52691d4a1da62042a9","sha256":"0e86b99e7b40b7cb242653dc8da6a32c59d03fbe5cd2ef66a050d45882c24ab4","sha512":"9f99f9f8ca9d085a36bfc4f24cef51be42d43bf542598ec0f0c857410a621be5e593541c8bacfda7cb3c573ed1ad96342f5116cd36135e4d357f6969581fb067","ssdeep":"","tlshash":"4ab092ec3ce8ac01925720267ac53844f0a8b82a113edc56523cea306a229e23c2818c","size":127,"data":"","first_seen":"2025-03-09T17:07:32.503242Z","last_seen":"2026-09-28T13:30:08.568404Z","times_seen":1456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.digitalcaramel.com/caramel.js?ts=1790602135846","fqdn":"ads.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4208e8c895920ee636734c5a070a7c1","sha1":"49b7b9765815a4c971404219de2bff676e0b9b3f","sha256":"dca75c9c2797dbefbcf2c191560197ad2d860788055a1aa54460d3de61e0c5da","sha512":"345519ac1ab243d2854d9de24844286aa742ed39a1ca3f29fbfcf3ee799171792eb639035d21cafefd7cea164d977aed997be76d47565a1cb80503c4d837e6e7","ssdeep":"1536:BUQRHz2RWww8cNUMv06TCOEhbi6lCtDole7ASIRPULAB4xzbAeXT6S:qM/UMbTCOE6OlGa8ZGS","tlshash":"0404fa89ffa1b03142e760ad516b470ab33a7609b8054478b55dc8d62b7cd4fa223fbd","size":174710,"data":"","first_seen":"2026-09-25T00:39:36.241984Z","last_seen":"2026-09-28T16:35:59.830526Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"fcdeb85904a8d266211e9941d32dc8e2","sha1":"c1008d2d8a2f4e5c45fab1f0c655de4ccef8668c","sha256":"85c33b50ac2d329dc9c34ea0210534d79f8ed6634953dbad62cbfc117a57b94e","sha512":"cbd5f815421433b4f1e14ba07418b151168634342765a055cee0ebebb030eedee26cf2936d274348acb0ead372950d81d3c531b756dec2f3e94c71992b14aebb","ssdeep":"","tlshash":"d3e06ffb29d81a0e02132020b28b781ae2a1b837101dcc32730cba301b932b0fc260c0","size":381,"data":"","first_seen":"2025-03-09T17:07:32.49952Z","last_seen":"2026-09-28T13:30:08.569078Z","times_seen":1456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kimberlite.io/js/thumbmark.umd.js","fqdn":"static.kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"212.8.232.117","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"06e70954d59c5759049a8158a0dd99d0","sha1":"a7a18d96fd0b10f88e8c025e6842cd272151c93a","sha256":"54a39580526bca72122afde8131057b589c7b56ba96217438c4a41016ed759c8","sha512":"68803d6d0fd05406d5b12c97f3c691262ec8a141645418525bc651b66f5df03207bbb84ab38d6d12526b55107c78108c5bcb5ae5d43b151ed0714d21a130894d","ssdeep":"768:ltUPn7X6wGbxLuFZbKEhFOkmqXnNIEZaM+/8oMRwKVu17HNlk24V7TK2hfM2TrZ:y4GOAaqy462hH","tlshash":"16d24cb97264702702762a96a03a5006d535a734395bc050f22e8d477a9be8f63bbf6c","size":30519,"data":"","first_seen":"2026-02-17T22:28:09.858399Z","last_seen":"2026-09-28T13:30:08.508119Z","times_seen":752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9cd6544b8dc4f757176bf4e31fed96e","sha1":"08ac6f97cad74deb1f978a0b6946a5c97426d186","sha256":"a4faac1a735a728140d0da9e30e2ff51f118ec97b7685c8043211f15e5629d70","sha512":"19a91eef59946be059de9a3f315f559fe9ec448fe0a2a2d51c8ce590a7cbbcdfe05612dbc1cb84fbece442c070ac3c0f719ed9fe11ffcd1b723d44269cb31e77","ssdeep":"3072:ukil8K7U3zI0/jYy1N0PYAjuzhT4PwQa3fnU56WHru+ATFba/Ydr5Ye9FnNqRnd8:ukil8K7ozp7Yy1NYYAjuzhT4Pwa56Qu5","tlshash":"f7e3f8cd72e2f1a543d768b5403f6a0ff23b6915641c9050f612eae26c749ae8273f2d","size":149673,"data":"","first_seen":"2026-09-28T13:30:08.569718Z","last_seen":"2026-09-28T13:30:08.569718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ee0048b256984f84d7072e634a76a57","sha1":"45a9115015d743e17f969838a5f98ed0b2bbb85f","sha256":"dee2f014d3c79c1447a33e876a148acdb8bc16ac79b02f110c964e82bf7f1875","sha512":"f94130e58a937e434b0aaa81f9581d28c24ce32934eec8321c083a4988f03c86f880a6ae1c0b872ad36063c9d6801c9a3390b12074998e57b4484f5db44e3e83","ssdeep":"","tlshash":"dec00273f0c18c7e4031b17421f9350cba43011fc2905020764108709a3708ba5044c4","size":190,"data":"","first_seen":"2025-03-20T20:07:09.49779Z","last_seen":"2026-09-28T13:30:08.570874Z","times_seen":1416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/common-engine.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8b4e50e8a93f53f3da1e6c2c81071a8","sha1":"fbde8d60b7329a133685bc7c0abfc2bc5bf23e6c","sha256":"2f7cc76aa24ab3156c5f295061735ae333e4045ce80522cd645850e980723b34","sha512":"0f78743dc2d24c14fdcb302f733c0621acf319bdb7162e10fd0032e517971141d169a459a870da898a0ce4172ce31224a78ec20ca54e3f69abbb2491eb8194e9","ssdeep":"12288:SeFojtE5KMM4H1zX4G9szIlUa7+tV+hDHdEERk4iDDhfr+xPRgj8J1JX16ob0+tW:SMojtE5KQH1UqlUa7+tV4D9EERk4wDh5","tlshash":"d2b429aaba6230b3025e616e903f260577327a51710cd424719ee0ed67bed8d1367fbc","size":534921,"data":"","first_seen":"2026-09-20T19:28:13.550721Z","last_seen":"2026-09-28T16:35:59.852626Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/320cdcfab0944496.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fccd97ebac02b69505e7a6efa28efbe8","sha1":"dc86f1ab20d881cd7bf84437971b50e7597fea08","sha256":"064230ee9d192eee399d49f7b44ddc8bfe93fd1e719057de6d69fa7dcb72d1e5","sha512":"8d931d3e2d0673f057f0320bbb16f52b20ca3d1d8ec9bd0daca3871b8100fb3d6700e2c1366232373a2d9e56a40a79228e43552eb07c25c4341294393bade1e1","ssdeep":"1536:p21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:XN1dfXIQkN+nF/JH9zf6","tlshash":"905475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","size":305380,"data":"","first_seen":"2026-09-28T08:51:21.782186Z","last_seen":"2026-09-29T00:03:44.567823Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/roxot-wrapper/js/roxot-manager.js?pid=19e08d82-9ec3-4dda-b15f-01ab2c95e167","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.102.200","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b945aafd61b94793ff4de14d99240ef","sha1":"6a028684225d503b01b40121b1e57a5d51aa1d99","sha256":"88475ecb81be446916a876a4e892fe9944f9e8cf466eaf283a6e9bc437fc66ac","sha512":"aabf3c7fd583ae0a5e2e82a230cdda14e325f9f79daadb64ae8dd259ed7270a3ab01f7367bacc8141744802b8b531ddd8d8308c58b3a0776051193a3f0874fe7","ssdeep":"96:qtpUVq6kCz+rud9BAxXSz5CpYG5SLSFByzBAxXu5Nh:qtNOAxi1CWvmAAxeZ","tlshash":"03d1707eb12c3078cac0d4ca4648ba3496fb31b30505c442367d54bcebee6bb5789ba5","size":6349,"data":"","first_seen":"2026-09-28T13:30:08.501613Z","last_seen":"2026-09-28T13:30:08.501613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbdbe8d2df2e35c10b3e74c4db234642","sha1":"0b97786e6d44be29eee2b66b284a19367efe8492","sha256":"6f51ca58fa7ace48c9208200af7dfe54b050f33ce1de67595558d73a47bef057","sha512":"689c535b09d2d4b2f4a990966fb4c1fe49233c4d80d53bb377e0db30f4550dba2d71fb622f91f7da79e07b052955c80105c8c4177f12233cc3c509d3e21357f7","ssdeep":"192:OKtzpZx3LtRxJKEJ0jgrjtEBol6nRPlqfYoxcP6iYox7S7L4M8OAXY:OKRXRyEJ08ruoUnR9qwgcug7S7sMXAXY","tlshash":"e412a9f432a1b8d411fb69d1086f1577017e7e06b80e295f872299d2ad244ce60f6fee","size":9291,"data":"","first_seen":"2026-09-23T08:35:42.861568Z","last_seen":"2026-09-29T00:03:44.687221Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2da940479dd1331d4761b4f6483c35aa","sha1":"f68170113f89301d8b4d914c5f8cfe7f847a9e55","sha256":"89b6a185ee2ce3a6cfb65aa4705ecf096434aaa2d8dcb55fbaff3cd7744d0604","sha512":"d0769783af7f21cfc03bc8cdb4c8bb2b9a0ec2a6136bcf1915b0f53acea5855b63216591fc8610460a231ad37c9a8eeae253bcb5244cb01b127eb275dd6175ef","ssdeep":"1536:1BD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0O:35SGX7g8BYlyp2z2BWoy5XiN","tlshash":"7e34c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","size":249149,"data":"","first_seen":"2026-09-23T08:35:42.799207Z","last_seen":"2026-09-29T00:03:44.568838Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-64YFP720ET\u0026cx=c\u0026gtm=4e69o0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05301dc3c895c152af131b0e3a3953b1","sha1":"04cf5c9eeadccfeb1675a7af1b91be89c5df9855","sha256":"d90c5c3023314adf80e01fadc86d234a7db15a9d7b13d42575178e7a08dadd42","sha512":"4bdf6c524fe1045edeb22ff16d92ee4f49b33d352372bf31fcdeba2a228ce3411b37619b6e408ac5d022bfd0c958c344794f4903272de8486a766a32d4cc1dd0","ssdeep":"6144:Pewp4YH7Bzn5ceZqhLRIzECIcW3sVbEbzE8U3SLoJfjXSyoGLxs5Mo/9:pH7Bz5iCzA3sVNJ7PtxK","tlshash":"10b4f7cd73ca742293a6f178903f01cba57b29a2b45cc89af289dce42d3455a5163f7c","size":528150,"data":"","first_seen":"2026-09-28T13:30:08.523934Z","last_seen":"2026-09-28T13:30:08.523934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/2294524205a7325e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c15008e98dfdeddd322eef86c6cc995","sha1":"c41480396951265d0fff68eb8b26df2d57abddb4","sha256":"03c074cad5aaf919998c0bd9820cb9799e09eb451a907f4bb81acbc9fa3fd976","sha512":"f2c23b45bb4aa5cf7b1e1a56bcdd8e8514b1dca57bd105ff9d34c04ae4ab1d972c9cf37b6cf5d96ef5f5a1458341e6bb1be56c53125c26737fbd120d78fd34b1","ssdeep":"3072:PKo5jYLuWgoQt0Qy1bCiTCZW3hUGWiWB8a2ro3N55BcZavMdw37IuchqMJVioJAN:PKo5fWgoQt0Qy1bCiTCZW3hUGWiWB8P8","tlshash":"c4e3d78db2e1b47142d7a0f5503f6a0ef33a6459a4098494b72de9e16fb898e4137f3c","size":155190,"data":"","first_seen":"2026-09-28T08:51:21.806566Z","last_seen":"2026-09-29T00:03:44.680604Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"43a3330d11a33df3e3e1f5da4ef0164f","sha1":"b1d4f8a626c68611fa8354a97cdd6659e9d2ce8b","sha256":"2be41664df13053f61198e95a397f05e106e7673dad83858951b4ffd11a75b97","sha512":"889977e36874f6307e39ae66ea1505d62338964a496827bee9ad5733de43104a2cbcfd73fa16ba3211428fd5ac226ab33f7b33d6102e911c424749b5bb39feff","ssdeep":"","tlshash":"7bd08c9a1cdaa5008043703d4a0e0210b463d543598d5fa0782c02202f1113d4aa03cc","size":278,"data":"","first_seen":"2025-09-16T11:35:25.959422Z","last_seen":"2026-09-28T16:35:59.894593Z","times_seen":2092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"03f53602b7620f3c77b55e565b0a3ffb","sha1":"03d2b03b93984f1561a6243698030b9db6b84934","sha256":"6fb6c89e77916f564555f36791b05fb59e20edb2379752e48eabea80008331ce","sha512":"41694f344509efb0753e913c0a47be65e5d59fcc4a730efe7fb7d22ac657365765322893a8ce74e18a8d9be18feb7b76d4481b25888a9b2ce601497f4788ab5c","ssdeep":"","tlshash":"84e023052d405028974434632a7f9708f2132031e3a5e44170cec490fb65da34c017d1","size":436,"data":"","first_seen":"2024-12-06T20:56:14.326299Z","last_seen":"2026-09-28T16:35:59.913481Z","times_seen":2143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","size":49523,"data":"","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-09-28T22:43:31.483956Z","times_seen":2428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-09-28T13:30:08.573295Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/rp-core-engine.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a14d66c1ba93a157245006c1320c1f79","sha1":"a92fd1d445813e3e0d8ce80747c9a36c35d543f6","sha256":"502fe3410cd2bf4734d54cb7941fd6ae453bc328cb92289f443a273fb5ae012b","sha512":"7e770e5543401d57dfd9d746cd3c6cd570840cb9c4ebdb4a2145bfba4d5c6094d5c1cf05654b262b8ffeed7c939f5b88a9862f38ca70efeba7770a197483361d","ssdeep":"384:Bu2RU1/Vi1YiyqsiegvgCy/x9hRG1pW7iPVYEiAH:Bu2RUzKYtqs9goF/xfRGXyEiE","tlshash":"b1a20ae9b1daf15a4793a8a4c43f6017f1363e213d1d4020e2aac0d27979e4f6637d7a","size":21314,"data":"","first_seen":"2026-09-15T15:00:29.660372Z","last_seen":"2026-09-28T16:35:59.827957Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2a18943ab7a5eb4dccf94ce4a7ba65d","sha1":"4e9649c9ded068ebab5450fc01e8e219a4fab87e","sha256":"31135c3c3439a66a081057a00d9a1276bc3fb98a031a07149995e8a6d855be62","sha512":"f434a793629e7744c30298af6a96ef4627755529c21a8a01f580c723772fd961ebafe6e3c1dcdd2fe1fd7a092c1fd0ceb419f9a9f2415ba4f75a0874998599ca","ssdeep":"3072:QCeuNLCB20XEoQWjZ5DAQ47GK8Y9KnRTp0oe2hPP5/vLugzdxRveg2lSZfW7HuBP:Ku5C1XEoVZRAQ47GK8Y9KnRTpLe2hPhz","tlshash":"aa043bccb2d6706243a761b5407f560bb23a6a89740c8420f169d8e97cb8e4e537bf7d","size":190091,"data":"","first_seen":"2026-09-25T00:39:36.123835Z","last_seen":"2026-09-28T13:30:08.546402Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Not supported in this browser","filename":"https://cdn1.moe.video/p/cr.js","line_number":17,"column_number":1990}]},"http":[{"url":{"schema":"https","addr":"kimberlite.io/rtb/bid/hb/adfox","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.221Z","timestamp":1790602145221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"POST /rtb/bid/hb/adfox HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1519\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: sm=MQBqumuY; u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1519,"data":"{\"places\":[{\"id\":\"Caramel_bfnkV7OrJN\",\"placementId\":\"49-Nt1Ts\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_qRmT4IAofp\",\"placementId\":\"49-Kz9Ob\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_vrgnkme8UL\",\"placementId\":\"49-Uf3Cn\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_94smfsDngE\",\"placementId\":\"49-Ss4Rj\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_1aFaleYblb\",\"placementId\":\"49-Oj3Xh\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Uq02oypJe4\",\"placementId\":\"49-Jz9Oa\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_LoS4zUhx1g\",\"placementId\":\"49-Dd6Ei\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Q617qtAxKC\",\"placementId\":\"49-Dr0Ig\",\"sizes\":[[300,250],[300,100],[300,50],[250,250],[200,200]],\"solta_stable\":\"\",\"targetRef\":\"https://goo.su/hbXzr/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":973}}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:05 GMT\r\nContent-Length: 11\r\nConnection: keep-alive\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://goo.su\r\nserver-timing: app;srv=s4a;dur=0.0006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":250,"mime_type":"text/xml","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-09-28T19:13:07.886092Z","times_seen":8206,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":66,"send":0,"wait":67,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/vast/6716655db13381b469b0cdb6?domain=goo.su\u0026placementtype=5","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.118","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.687Z","timestamp":1790602147687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"GET /api/vast/6716655db13381b469b0cdb6?domain=goo.su\u0026placementtype=5 HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://goo.su\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":209,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ck.silvermob.com/sync?pid=625\u0026r=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D67%26b%3D[USER_ID]","fqdn":"ck.silvermob.com","domain":"silvermob.com","tld":"com"},"ip":{"addr":"212.95.41.186","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.835Z","timestamp":1790602147835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ck.silvermob.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 12:35:36 GMT","end":"Tue, 08 Dec 2026 12:35:35 GMT"},"fingerprint":{"sha1":"85:AD:71:3D:66:48:A9:5B:66:15:C1:33:FB:9B:16:56:1B:49:65:C3","sha256":"25:48:1E:55:22:A4:19:AA:7A:FE:96:A7:81:C7:EF:2C:2E:9F:C2:5C:90:35:D6:C5:1C:EF:4D:6A:D6:BB:30:C8"}}},"request":{"raw":"GET /sync?pid=625\u0026r=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D67%26b%3D[USER_ID] HTTP/1.1\r\nHost: ck.silvermob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:08 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 81\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-CH: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform, Sec-CH-UA-Mobile\r\nSet-Cookie: sm_uid=sm_0pe-xKPD4M9a; Domain=ck.silvermob.com; Expires=Tue, 28 Sep 2027 13:29:08 GMT; Path=/; SameSite=None; Secure\nsm_uidp=sm_0pe-xKPD4M9a; Expires=Tue, 28 Sep 2027 13:29:08 GMT; Path=/; SameSite=None; Secure; Partitioned\r\nx-sm-trace: sync-img-r\r\nLocation: https://rtb.moe.video/cs?d=67\u0026b=sm_0pe-xKPD4M9a\u0026sd=1\u0026sv=625\r\nVary: Accept\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Cookie\r\n\r\n","headers":null,"cookies":[{"name":"sm_uid","value":"sm_0pe-xKPD4M9a","quoted":false,"path":"/","domain":"ck.silvermob.com","expires":"2027-09-28T13:29:08Z","raw_expires":"Tue, 28 Sep 2027 13:29:08 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"sm_uid=sm_0pe-xKPD4M9a; Domain=ck.silvermob.com; Expires=Tue, 28 Sep 2027 13:29:08 GMT; Path=/; SameSite=None; Secure"},{"name":"sm_uidp","value":"sm_0pe-xKPD4M9a","quoted":false,"path":"/","expires":"2027-09-28T13:29:08Z","raw_expires":"Tue, 28 Sep 2027 13:29:08 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":true,"raw":"sm_uidp=sm_0pe-xKPD4M9a; Expires=Tue, 28 Sep 2027 13:29:08 GMT; Path=/; SameSite=None; Secure; Partitioned"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":147,"dns":0,"connect":31,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=10\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.913Z","timestamp":1790602147913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=10\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":132,"dns":0,"connect":54,"send":0,"wait":37,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wordpress-215141-0.cloudclusters.net/favicon.ico","fqdn":"wordpress-215141-0.cloudclusters.net","domain":"cloudclusters.net","tld":"net"},"ip":{"addr":"69.30.235.156","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/","date":"2026-09-28T13:29:10.667Z","timestamp":1790602150667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudclusters.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:50:81:B7:BB:22:38:4F:4B:9B:ED:80:17:7B:0D:10:5D:12:14:E0","sha256":"39:2C:99:47:7A:17:2B:DC:AA:CF:16:E3:7F:72:85:54:36:11:31:A4:D1:72:5D:DF:C6:B9:F9:40:AC:84:B8:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wordpress-215141-0.cloudclusters.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/\r\nCookie: PHPSESSID=6j2v9qrkg1l7viufee78e655ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Mon, 28 Sep 2026 13:29:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 298\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":500,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a02db7fc9073ae6821f0bcf8b50f32bc","sha1":"0c33eac4c4e9d5bed50ffa66f9c2510148ba257c","sha256":"8ecc32cf9ff75b3a7abc9d9630550fe0127700cdce9e97c4bd57c8829be2baec","sha512":"2f0ffae61a29f10bd1920b4b1e151cfb64585691cba4645ebe23bfe28d7ab89d7c4eee03257e90abf44f18633ebf0975bccf80c9165531675fecabcc463ec58b","ssdeep":"","tlshash":"0ee0e7ee505373430c0220703cc121c1234c12f6603dc1ec2d83d047525453ddd8b6cc","first_seen":"2026-09-28T13:30:08.484661Z","last_seen":"2026-09-28T13:30:08.484661Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.405Z","timestamp":1790602145405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\ntiming-allow-origin: *\r\nexpires: Tue, 28 Sep 2027 18:58:06 GMT\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=31556952\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-nginx-request-id: 8f6adea5ca4e0156\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 0\r\nx-request-id: dcf6d2731bd7e4c0\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26004,"size_decoded":26903,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-09-28T23:42:50.785619Z","times_seen":30904,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://095rii.moe.video/?v=v1.50.60\u0026p=12332\u0026i=1\u0026s=10\u0026r=aHR0cHM6Ly9nb28uc3UvaGJYenIv\u0026u=0373180a78a11b17570c\u0026l=en","fqdn":"095rii.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"45.92.176.182","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.015Z","timestamp":1790602147015,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /?v=v1.50.60\u0026p=12332\u0026i=1\u0026s=10\u0026r=aHR0cHM6Ly9nb28uc3UvaGJYenIv\u0026u=0373180a78a11b17570c\u0026l=en HTTP/1.1\r\nHost: 095rii.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://goo.su\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nPk8qF9u+pZlMKXvcgIHmQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: JjWOQlzXnVkyIDeXldznbaDliXc=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\nV: v1.37.57\r\nSet-Cookie: uid=4485bcbc44746aba6ba3; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:07 GMT; Secure; SameSite=None\ncid=0373180a78a11b17570c; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:07 GMT; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"4485bcbc44746aba6ba3","quoted":false,"path":"/","domain":"moe.video","expires":"2027-09-19T13:29:07Z","raw_expires":"Sun, 19 Sep 2027 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=4485bcbc44746aba6ba3; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:07 GMT; Secure; SameSite=None"},{"name":"cid","value":"0373180a78a11b17570c","quoted":false,"path":"/","domain":"moe.video","expires":"2027-09-19T13:29:07Z","raw_expires":"Sun, 19 Sep 2027 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"cid=0373180a78a11b17570c; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:07 GMT; Secure; SameSite=None"}],"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":0,"dns":178,"connect":232,"send":0,"wait":56,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tms.gpmdata.ru/?dmpkit_cid=81460eb5-647b-4d9b-a3e3-7863f294c3da\u0026dmpkit_evid=4a608d62-b43e-464c-ba40-a2d2ff300693\u0026dsp_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\u0026ru=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dgpmdata","fqdn":"tms.gpmdata.ru","domain":"gpmdata.ru","tld":"ru"},"ip":{"addr":"62.105.142.42","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.719Z","timestamp":1790602147719,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gpmdata.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Jul 2026 22:32:06 GMT","end":"Mon, 12 Oct 2026 22:32:05 GMT"},"fingerprint":{"sha1":"DC:2A:20:E2:D4:F4:69:1C:CC:38:80:1E:7A:41:8E:DA:46:2B:96:24","sha256":"1D:6A:35:E0:CD:FA:03:85:D6:F5:74:E4:02:64:DE:0C:AB:5D:34:CE:C9:BA:88:EB:CB:6F:15:EE:E5:D8:8D:7E"}}},"request":{"raw":"GET /?dmpkit_cid=81460eb5-647b-4d9b-a3e3-7863f294c3da\u0026dmpkit_evid=4a608d62-b43e-464c-ba40-a2d2ff300693\u0026dsp_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\u0026ru=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dgpmdata HTTP/1.1\r\nHost: tms.gpmdata.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 0\r\nLocation: https://sync.upravel.com/image?source=gpmdata\r\nPragma: no-cache\r\nSet-Cookie: dmpuid=AaDoNHgpdmirfepmeidcgQ; Path=/; Domain=gpmdata.ru; Expires=Thu, 27 Sep 2029 13:29:07 GMT; Max-Age=94608000; Secure; SameSite=None\r\nX-Trace-Id: 2ebe097ccb26c31095d9137f1dea0a80\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: HEAD, GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Accept,Cache-Control,Content-Type,DNT,If-None-Match,Last-Modified,If-Modified-Since,Keep-Alive,Origin,User-Agent,Vary,X-Mx-ReqToken,X-Requested-With,x-dmpkit-onbehalf-of\r\nAccess-Control-Expose-Headers: Location\r\n\r\n","headers":null,"cookies":[{"name":"dmpuid","value":"AaDoNHgpdmirfepmeidcgQ","quoted":false,"path":"/","domain":"gpmdata.ru","expires":"2029-09-27T13:29:07Z","raw_expires":"Thu, 27 Sep 2029 13:29:07 GMT","max_age":94608000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"dmpuid=AaDoNHgpdmirfepmeidcgQ; Path=/; Domain=gpmdata.ru; Expires=Thu, 27 Sep 2029 13:29:07 GMT; Max-Age=94608000; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":3,"connect":63,"send":0,"wait":64,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.linkssp.ru/cm?key=af2153fbaa913034dfb5e17a6bd035af\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D38%26b%3D%7Buid%7D","fqdn":"sp.linkssp.ru","domain":"linkssp.ru","tld":"ru"},"ip":{"addr":"31.184.215.7","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.814Z","timestamp":1790602147814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sp.linkssp.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 19:27:32 GMT","end":"Wed, 02 Dec 2026 19:27:31 GMT"},"fingerprint":{"sha1":"00:C1:CD:69:F9:22:3D:F8:2C:EC:13:CD:38:58:E5:71:27:07:7A:3B","sha256":"06:81:8F:19:D2:11:E8:80:F1:CA:3D:BC:D2:82:05:7E:12:2E:AE:48:EF:AB:BA:11:D9:CC:63:A3:01:C5:6F:0B"}}},"request":{"raw":"GET /cm?key=af2153fbaa913034dfb5e17a6bd035af\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D38%26b%3D%7Buid%7D HTTP/1.1\r\nHost: sp.linkssp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nBidder: bid-02 1.425.204a776\r\nLocation: https://rtb.moe.video/cs?d=38\u0026b=9b1a4e60-e88a-4958-945c-98c1a689177e\r\nSet-Cookie: uid=9b1a4e60-e88a-4958-945c-98c1a689177e.6aba6ba3.ff515b93962726d1; domain=.linkssp.ru; path=/; expires=Wed, 28-Oct-2026 13:29:07 GMT; SameSite=None; Secure;\nscm=77.5056; domain=.linkssp.ru; path=/; expires=Wed, 28-Oct-2026 13:29:07 GMT; SameSite=None; Secure;\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"9b1a4e60-e88a-4958-945c-98c1a689177e.6aba6ba3.ff515b93962726d1","quoted":false,"path":"/","domain":".linkssp.ru","expires":"2026-10-28T13:29:07Z","raw_expires":"Wed, 28-Oct-2026 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=9b1a4e60-e88a-4958-945c-98c1a689177e.6aba6ba3.ff515b93962726d1; domain=.linkssp.ru; path=/; expires=Wed, 28-Oct-2026 13:29:07 GMT; SameSite=None; Secure;"},{"name":"scm","value":"77.5056","quoted":false,"path":"/","domain":".linkssp.ru","expires":"2026-10-28T13:29:07Z","raw_expires":"Wed, 28-Oct-2026 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"scm=77.5056; domain=.linkssp.ru; path=/; expires=Wed, 28-Oct-2026 13:29:07 GMT; SameSite=None; Secure;"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":16,"dns":0,"connect":45,"send":0,"wait":44,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=adlook\u0026redirect_url=https%3A%2F%2Fsync.adlook.online%2Fmatch%2Fohmybid%3Fid%3D%7Buid%7D","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.327Z","timestamp":1790602148327,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cm?ssp=adlook\u0026redirect_url=https%3A%2F%2Fsync.adlook.online%2Fmatch%2Fohmybid%3Fid%3D%7Buid%7D HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.digitalcaramel.com/configs/goo.su.json","fqdn":"cdn.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.033Z","timestamp":1790602136033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.digitalcaramel.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 05:50:25 GMT","end":"Fri, 18 Dec 2026 05:50:24 GMT"},"fingerprint":{"sha1":"B9:E5:8B:1F:33:31:49:3C:4D:EF:DB:CC:F5:3A:67:76:FA:DF:43:92","sha256":"53:03:5F:C0:78:0E:9C:0F:C1:D3:3A:59:ED:6D:60:42:A5:AB:95:3E:E8:A3:7F:98:67:84:2D:1F:56:E6:46:E9"}}},"request":{"raw":"GET /configs/goo.su.json HTTP/1.1\r\nHost: cdn.digitalcaramel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 24 Jul 2026 10:22:32 GMT\r\netag: W/\"6a633ce8-9682\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Origin, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-geo-country: NO\r\ncache-control: no-cache\r\nis-cdn: yes\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nfrom-edge: true\r\ncache: HIT\r\nx-cached-since: 2026-09-26T10:27:31+00:00\r\nx-node: m9p-up-gc52\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38530,"size_decoded":6901,"mime_type":"application/json","magic":"JSON text data","md5":"f92dc8bb08d6c9f4e640247461216089","sha1":"17a91a82ca19245a7dabe321de8422f2018a75f3","sha256":"e84c20f648ab10b78293ec363bcca30411cfede0e05a104629b11c2d0d819ab2","sha512":"836a84c17fc8afc1026e0dc027cd48d55ea3e4128349b70521efab9a20f22f95d70799e8eaf630d6abe13bc2ae61c151b4d826b71ef0e328994d63e51694b67e","ssdeep":"768:6Y8FcX0agIexFf+0agpZY7FR0agb9hFd0agbUFP90agTv6FvoFgFyedFHFgbJFom:tmK1f0U","tlshash":"1903115a6628cbbcc78d464415627f3a1a7f1ed3ff4fa4a066cc6c1692fc8f84625207","first_seen":"2026-08-24T11:02:20.386696Z","last_seen":"2026-09-28T13:30:08.487571Z","times_seen":4,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":2,"connect":60,"send":0,"wait":60,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.bidvol.com/rtb/pl999","fqdn":"ssp.bidvol.com","domain":"bidvol.com","tld":"com"},"ip":{"addr":"194.85.16.54","port":443,"asn":8985,"as":"Join-stock company Internet ExchangeMSK-IX","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.186Z","timestamp":1790602145186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssp.bidvol.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 06:06:55 GMT","end":"Wed, 25 Nov 2026 06:06:54 GMT"},"fingerprint":{"sha1":"4B:A1:08:0E:7D:E7:30:32:3D:15:3A:C9:70:A6:BE:2E:EC:8F:45:B2","sha256":"DA:E3:E7:EF:78:3E:99:70:42:4D:2D:84:43:3F:6E:D5:93:20:15:4D:26:CA:95:BE:F0:1B:48:5E:0B:54:49:93"}}},"request":{"raw":"POST /rtb/pl999 HTTP/1.1\r\nHost: ssp.bidvol.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1351\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1351,"data":"{\"places\":[{\"id\":\"Caramel_bfnkV7OrJN\",\"placementId\":\"51689\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_qRmT4IAofp\",\"placementId\":\"51690\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_vrgnkme8UL\",\"placementId\":\"51691\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_94smfsDngE\",\"placementId\":\"51692\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_1aFaleYblb\",\"placementId\":\"51693\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Uq02oypJe4\",\"placementId\":\"51695\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_LoS4zUhx1g\",\"placementId\":\"51696\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Q617qtAxKC\",\"placementId\":\"51697\",\"sizes\":[[300,250],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":973}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 11\r\nx-request-id: beab8b7e-16be-409b-8577-e0e7a202cb09\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nset-cookie: bvuid=v8et1vxewn; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None\nbvuid2=v8et1vxewn; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"bvuid","value":"v8et1vxewn","quoted":false,"path":"/","domain":".bidvol.com","expires":"2038-01-19T03:14:07Z","raw_expires":"Tue, 19 Jan 2038 03:14:07 GMT","max_age":2147483647,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bvuid=v8et1vxewn; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None"},{"name":"bvuid2","value":"v8et1vxewn","quoted":false,"path":"/","domain":".bidvol.com","expires":"2038-01-19T03:14:07Z","raw_expires":"Tue, 19 Jan 2038 03:14:07 GMT","max_age":2147483647,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"bvuid2=v8et1vxewn; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":676,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-09-28T19:13:07.886092Z","times_seen":8206,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":3,"connect":60,"send":0,"wait":59,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open%20Sans:400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.710Z","timestamp":1790602135710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Open%20Sans:400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 28 Sep 2026 13:28:55 GMT\r\ndate: Mon, 28 Sep 2026 13:28:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":2263,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7e0a00a3f6ab7ec04a66dfa361b7e9cc","sha1":"99de190ea3c393de80111d132e58abc20f988664","sha256":"64c18f81af81ab6b2ebc8598ed900f7023e0e8788bedd348ab41a92d76f80655","sha512":"6ed19e94e0438c18bf2c2ced27f712d94ecc74391b5239d12e2f300bee21cd9879377577e3cb86f385fafb469e93351e671af17d8bfd3e2231c0202909406a90","ssdeep":"96:ZOEba9JOEbaWDFZ8OEbajkOEbaFYOEbahOEbaNy+aZjzBrWOEbazubqGIFuV4UOM:a9KkjzFXCNqJCbqGIwV4jRlYx","tlshash":"9bd11f9000175050ab471ce627cebf34ee1fa2616040d07aabfd478aeddbda5637931d","first_seen":"2025-09-17T04:21:06.438819Z","last_seen":"2026-09-28T23:14:59.040352Z","times_seen":13357,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.techdsp.ru/sync?src=mvn\u0026uid=4485bcbc44746aba6ba3","fqdn":"sync.techdsp.ru","domain":"techdsp.ru","tld":"ru"},"ip":{"addr":"37.48.253.136","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.807Z","timestamp":1790602147807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.techdsp.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 25 Feb 2026 12:59:24 GMT","end":"Mon, 29 Mar 2027 12:59:23 GMT"},"fingerprint":{"sha1":"52:50:40:14:EE:AD:56:9D:08:33:14:BA:A9:BE:8D:34:C5:C9:02:39","sha256":"FE:F4:F7:16:29:49:2C:E0:17:7A:F4:59:17:34:50:29:0F:7D:31:27:96:CC:0A:53:F2:59:7C:C2:D2:77:CB:5E"}}},"request":{"raw":"GET /sync?src=mvn\u0026uid=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: sync.techdsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 28 Sep 2026 13:29:10 GMT\r\ncontent-length: 0\r\nlocation: https://dmg.digitaltarget.ru/1/7686/i/i?a=4110\u0026e=kACOT9q_SsG32_zAdiIhGg\u0026i=7896868858622285464\u0026redirect=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D0914828%26id%3DkACOT9q_SsG32_zAdiIhGg%26dest%3Dhttps%253A%252F%252Fcr-frontend.weborama-tech.ru%252Fcr%253Fkey%253Dmoedsp%2526url%253Dhttps%25253A%25252F%25252Fsync.techdsp.ru%25252Fsync%25253Fsrc%25253Dwr%252526uid%25253D%25257BWEBO_CID%25257D\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 600\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\npragma: no-cache\r\nreferrer-policy: no-referrer\r\nset-cookie: uid=kACOT9q_SsG32_zAdiIhGg; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"kACOT9q_SsG32_zAdiIhGg","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"uid=kACOT9q_SsG32_zAdiIhGg; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":5,"connect":47,"send":0,"wait":47,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ia.box/match/mvssp_match?eid=4485bcbc44746aba6ba3","fqdn":"ia.box","domain":"ia.box","tld":"box"},"ip":{"addr":"5.9.56.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.831Z","timestamp":1790602147831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ia.box","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 05:26:32 GMT","end":"Tue, 08 Dec 2026 05:26:31 GMT"},"fingerprint":{"sha1":"17:2C:B1:BC:16:67:1F:E3:A9:04:75:D7:11:58:FA:1A:B0:32:31:AB","sha256":"26:37:18:20:82:33:B5:B6:CF:8B:BC:C2:01:46:2A:7C:DD:01:2A:C3:68:B2:53:37:F5:6A:56:7A:2E:31:D9:01"}}},"request":{"raw":"GET /match/mvssp_match?eid=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: ia.box\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.29.2\r\nDate: Mon, 28 Sep 2026 13:29:08 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: http://ia.box/match/mvssp_match?eid=4485bcbc44746aba6ba3\u0026tid=dat6n90fubp6r7tr0190\u0026rid=B77zcthEbDBHTMPuP7L5NCV5gX\r\nSet-Cookie: rid=B77zcthEbDBHTMPuP7L5NCV5gX; expires=Thu, 29 Oct 2026 13:29:08 GMT; domain=ia.box; path=/; HttpOnly; secure; SameSite=None\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":[{"name":"rid","value":"B77zcthEbDBHTMPuP7L5NCV5gX","quoted":false,"path":"/","domain":"ia.box","expires":"2026-10-29T13:29:08Z","raw_expires":"Thu, 29 Oct 2026 13:29:08 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"rid=B77zcthEbDBHTMPuP7L5NCV5gX; expires=Thu, 29 Oct 2026 13:29:08 GMT; domain=ia.box; path=/; HttpOnly; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.29.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":110,"dns":0,"connect":34,"send":0,"wait":34,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adserver.gear-hub.ru/sync?p=e590706fd4aa5c8395d69ec3fea3b859d7756bf07ced149c93ad9a430d568f00\u0026eid=4485bcbc44746aba6ba3","fqdn":"adserver.gear-hub.ru","domain":"gear-hub.ru","tld":"ru"},"ip":{"addr":"46.243.210.75","port":443,"asn":0,"as":"","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.834Z","timestamp":1790602147834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adserver.gear-hub.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 10:11:19 GMT","end":"Sun, 27 Dec 2026 10:11:18 GMT"},"fingerprint":{"sha1":"9C:81:DB:0E:AC:48:D2:8C:B6:7D:2F:2D:D7:60:3F:14:15:87:99:C2","sha256":"96:89:BA:9B:0B:79:4E:DF:9B:0C:59:34:68:98:A8:5D:E9:D5:06:C9:66:54:9B:E5:DC:EE:34:83:C6:E5:61:66"}}},"request":{"raw":"GET /sync?p=e590706fd4aa5c8395d69ec3fea3b859d7756bf07ced149c93ad9a430d568f00\u0026eid=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: adserver.gear-hub.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\nlocation: https://rtb.moe.video/cs?d=61\u0026b=K9OfXzeHstsLa2gRWyCDpA\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: yduid=K9OfXzeHstsLa2gRWyCDpA; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\nvia: 2.0 Caddy, 1.1 Caddy\r\nx-content-type-options: nosniff\r\ncontent-length: 81\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"yduid","value":"K9OfXzeHstsLa2gRWyCDpA","quoted":false,"path":"/","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"yduid=K9OfXzeHstsLa2gRWyCDpA; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":135,"dns":0,"connect":49,"send":0,"wait":54,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=26\u0026b=VSWGrO4QG5lxNPj","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.856Z","timestamp":1790602147856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=26\u0026b=VSWGrO4QG5lxNPj HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":164,"dns":0,"connect":54,"send":0,"wait":51,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.skcrtxr.com/user-sync-api/sync","fqdn":"csync.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.757Z","timestamp":1790602147757,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /user-sync-api/sync HTTP/1.1\r\nHost: csync.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/moevideo_nord/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.808Z","timestamp":1790602147808,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /moevideo_nord/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155; user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://rtb.moe.video/cs?d=28\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":54,"send":0,"wait":104,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.714Z","timestamp":1790602135714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:28:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33206\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220032-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1991139\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4R%2B2y3cftPckIwrUpq6eO7yAAWZlJG1puF5Iufw9gWNAD6nKdVbRT7kODs79H6hTA03SkRJ5%2BuujLga5HWBTrKlPIValhOdAgeTM0gmys5hWA2a9hjK9f3fZqg%2Bi53sZ%2B1E%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a42318145aed5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232803,"size_decoded":34310,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-09-28T23:10:29.659724Z","times_seen":27979,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":14,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kimberlite.io/js/botd.js","fqdn":"static.kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"212.8.232.117","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.798Z","timestamp":1790602136798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /js/botd.js HTTP/1.1\r\nHost: static.kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kimberlite.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 17:27:09 GMT\r\netag: W/\"6995f66d-6b7f\"\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: Authorization,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27519,"size_decoded":8401,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3679a81019df994ace208dcb56cac409","sha1":"5f6e67dc7cde0ac9ae9ca86864f0adcdf0cba54c","sha256":"bdb8b3b0ffef3a4c89ce8a6fa2bd1049813b5559cbc1906363c95f85bd9b8f56","sha512":"20a7dbafa48d450bd5ab7be8b3bf595ed9b099ccb9a3b65b9d9444e534ab979b3f9283f8b31f3482e795191343e6891f0f633991c43af80e74bbc553c1f6eb4b","ssdeep":"384:UKIq+8EXBz8EQ7QR9+8nkHW34uX6G3PAAstt0:VIqWXBzp+88ZG3P5stt0","tlshash":"9fc2629a7ce630354a2b3039172f9104b674951b291dd9a0ba2e03907f9583ad3fefdd","first_seen":"2026-02-18T23:30:37.284223Z","last_seen":"2026-09-28T16:35:59.880695Z","times_seen":774,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":2,"connect":62,"send":0,"wait":99,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/integration/mail.adman.vpaid.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.488Z","timestamp":1790602147488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.moe.video","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 08:13:46 GMT","end":"Tue, 10 Nov 2026 08:13:45 GMT"},"fingerprint":{"sha1":"21:99:67:8A:A4:28:04:7D:FE:58:13:D6:B2:C3:7F:07:6A:E6:07:E4","sha256":"5B:3E:2C:AA:FB:70:63:1D:69:D4:43:E2:67:39:1A:42:F4:87:C2:E8:71:7A:85:A7:77:FD:A0:5C:60:13:52:75"}}},"request":{"raw":"GET /integration/mail.adman.vpaid.js HTTP/1.1\r\nHost: cdn1.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Monday, 28-Sep-2026 13:00:16 GMT\r\nexpires: Mon, 28 Sep 2026 13:59:07 GMT\r\ncache-control: max-age=1800\r\ncache: HIT\r\nx-cached-since: 2026-09-28T13:00:16+00:00\r\nx-node: m9p-up-gc54\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5538,"size_decoded":2472,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (5538), with no line terminators","md5":"2d18b1332b42c3023d7cfe6e8a7b9df3","sha1":"bfe8937334334ed9e7db3071af3c8c2a7aecc991","sha256":"2a4a3e0dc384d6935914c37eded9c9283dbd41ad308a6cdf513b00c00b75f084","sha512":"91b9e8e960ef4669a886590b6a40845fb0b7fadf830964004d11006155b332652eb5168c39bf9349a5a4e6e077113939c9e8e5baf6f7547bcc08ed7690e75eae","ssdeep":"96:FFPDiJW6HOVUgJ8WZW4ACzisCcTa/BxZt5Gir3YDQr3HKW6HM3s24XiWXNNa33WL:/PDiJW6HOVUgJ8WZWehdTa/BjGK3YDQA","tlshash":"32b10325324658aa5ec0419ea8270749a61063e82a1d842cfdbdfceb94ccc0e7d7c7bd","first_seen":"2026-07-03T22:51:02.738426Z","last_seen":"2026-09-28T16:35:59.865166Z","times_seen":158,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=22","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"213.171.19.202","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.803Z","timestamp":1790602147803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 04:17:28 GMT","end":"Fri, 30 Oct 2026 04:17:27 GMT"},"fingerprint":{"sha1":"EB:92:24:BC:00:22:74:CA:FB:B1:AC:E2:69:EE:FB:99:61:F8:17:70","sha256":"10:3D:45:95:1F:8E:66:CF:68:8C:47:B2:8C:FB:31:83:13:1A:61:E9:36:51:9D:1C:4E:C4:46:19:CD:D8:98:2A"}}},"request":{"raw":"GET /sync?ssp=22 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.24.0\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\nset-cookie: preadspector=1; Expires=Wed, 28 Oct 2026 16:29:07 GMT; Domain=.adspector.io; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"preadspector","value":"1","quoted":false,"path":"/","domain":".adspector.io","expires":"2026-10-28T16:29:07Z","raw_expires":"Wed, 28 Oct 2026 16:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"preadspector=1; Expires=Wed, 28 Oct 2026 16:29:07 GMT; Domain=.adspector.io; SameSite=None; Secure; Path=/"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":507,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":1,"connect":46,"send":0,"wait":88,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/img/favicons/apple-touch-icon.png","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:04.869Z","timestamp":1790602144869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.goo.su","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 11 Dec 2025 10:48:38 GMT","end":"Tue, 12 Jan 2027 10:48:37 GMT"},"fingerprint":{"sha1":"82:23:C9:6D:49:3E:29:B7:9C:36:14:B9:ED:0A:9E:A3:65:76:C3:28","sha256":"F1:CA:E0:D3:1C:F2:4E:10:20:7C:D4:A4:34:EB:7B:2B:3E:3C:8C:FA:D9:C7:CA:35:CD:07:AF:07:82:79:4F:56"}}},"request":{"raw":"GET /img/favicons/apple-touch-icon.png HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/hbXzr/\r\nCookie: __ddg8_=fHcWAIQAab2h6XfY; __ddg10_=1790602144; __ddg9_=91.90.42.154; __ddg1_=MSKzL279oKdTtqzpDTkX; block_ads=1; XSRF-TOKEN=LG7xcmUa65wL95by9tbZEiUZaqgUP7DLwr1VW3jR; goosu_session=jakJC1Yh5ltD470y5cCe5CthFnq8ASl1jdWIJO3s; adtech_uid=ee2b2d9b-7047-48a3-90d7-5b479f18b790%3Agoo.su; top100_id=t1.6673155.1939344963.1790602136276; t3_sid_6673155=s1.1920423623.1790602136277.1790602141284.1.4.1.0...1; _ga_64YFP720ET=GS2.1.s1790602136$o1$g0$t1790602136$j60$l0$h0; _ga=GA1.1.1936950156.1790602136; _sltm=677f02102c589b155509dba10fb7cda4~0; _sltb=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lbcJLGAIXsqQnHje; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT\n__ddg10_=1790602145; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT\n__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT\r\ndate: Mon, 21 Sep 2026 15:09:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10926\r\nlast-modified: Wed, 30 Jul 2025 12:50:59 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nddg-cache-status: HIT,HIT\r\netag: \"688a1533-2aae\"\r\nexpires: Sat, 26 Sep 2026 19:37:52 GMT\r\nage: 598758\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"lbcJLGAIXsqQnHje","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:05Z","raw_expires":"Mon, 28-Sep-2026 13:49:05 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=lbcJLGAIXsqQnHje; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT"},{"name":"__ddg10_","value":"1790602145","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:05Z","raw_expires":"Mon, 28-Sep-2026 13:49:05 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1790602145; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT"},{"name":"__ddg9_","value":"91.90.42.154","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:05Z","raw_expires":"Mon, 28-Sep-2026 13:49:05 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":10926,"size_decoded":11536,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"dc1648f034a8879145ce2db071bdc305","sha1":"28dfdc4f3f97f00e54528685427a83974cb04a81","sha256":"7c51dc3139a5a8a07e00884f6558ed62511359803bcb4123668b8e0ccab896c7","sha512":"48c659196c00e9464bd764d50c670ad0b5b663fec53b0506ad70413cd0c5521a792350510a53ef6bc24bcddcc6ca3606b7126533eb19baf7d3980c9605852d38","ssdeep":"192:W5V2ejIAELnyaW5IvcbdNTeUjWkou4G/ryGMKMMedq//JDKb+pwxnHESxqL9:WtfueIidNTeuWkj46FMMee/JDWxG","tlshash":"0032bfaf00f58ca4ea3681ae2c13414c54121f8744db2feb18d7d89856caf1479f123d","first_seen":"2023-04-06T08:25:23Z","last_seen":"2026-09-28T13:30:08.497582Z","times_seen":1240,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/sync/moevideo","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.781Z","timestamp":1790602147781,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /rtb/sync/moevideo HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: sm=MQBqumuY; da=2OZrzwAAAAE; f=; n=1; u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: da=EBfx7wAAAAHY5mvPAAAAAQ; path=/rtb; max-age=604800; samesite=none; httponly; secure\nn=2; max-age=30; samesite=none; httponly; secure\r\nlocation: https://ad.adriver.ru/cgi-bin/rle.cgi?sid=1\u0026ad=608223\u0026bt=21\u0026pid=2551979\u0026bid=10076040\u0026bn=10076040\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s6a;dur=0.0006\r\n\r\n","headers":null,"cookies":[{"name":"da","value":"EBfx7wAAAAHY5mvPAAAAAQ","quoted":false,"path":"/rtb","max_age":604800,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"da=EBfx7wAAAAHY5mvPAAAAAQ; path=/rtb; max-age=604800; samesite=none; httponly; secure"},{"name":"n","value":"2","quoted":false,"max_age":30,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"n=2; max-age=30; samesite=none; httponly; secure"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/MoeVideo?id=4485bcbc44746aba6ba3","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"5.35.3.132","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.816Z","timestamp":1790602147816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dvgroup.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 11:32:46 GMT","end":"Fri, 11 Dec 2026 11:32:45 GMT"},"fingerprint":{"sha1":"6E:13:23:D1:06:DC:C6:10:D1:95:71:41:EE:43:90:26:38:DE:BE:4D","sha256":"E7:1E:19:72:83:B4:14:D8:95:C4:BD:4F:36:73:1B:07:9F:7C:02:98:72:8E:B1:ED:16:DA:47:03:0B:33:2D:AD"}}},"request":{"raw":"GET /match/MoeVideo?id=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-length: 0\r\nlocation: https://sync.dvgroup.com/match/MoeVideo?id=4485bcbc44746aba6ba3\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":26,"dns":0,"connect":47,"send":0,"wait":47,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/ujs?ymss=digitalcaramel","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.301Z","timestamp":1790602136301,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /rtb/ujs?ymss=digitalcaramel HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:28:56 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure\r\nlocation: /rtb/ujs?ymss=digitalcaramel\u0026rc=1\r\nserver-timing: app;srv=s4a;dur=0.0002\r\n\r\n","headers":null,"cookies":[{"name":"u","value":"arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs","quoted":false,"path":"/","max_age":7776000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":2,"connect":62,"send":0,"wait":67,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/2294524205a7325e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.430Z","timestamp":1790602145430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306891/2294524205a7325e.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 31620\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Wed, 27 Sep 2056 19:38:48 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\ncache-control: public, max-age=946708560\r\nlast-modified: Fri, 25 Sep 2026 15:48:17 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"58a623bd456a84e7192860c9ebe902c6\"\r\nx-strm-log-split: 2\r\nx-request-id: 450bd2a3c9438add\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155190,"size_decoded":32515,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"9c15008e98dfdeddd322eef86c6cc995","sha1":"c41480396951265d0fff68eb8b26df2d57abddb4","sha256":"03c074cad5aaf919998c0bd9820cb9799e09eb451a907f4bb81acbc9fa3fd976","sha512":"f2c23b45bb4aa5cf7b1e1a56bcdd8e8514b1dca57bd105ff9d34c04ae4ab1d972c9cf37b6cf5d96ef5f5a1458341e6bb1be56c53125c26737fbd120d78fd34b1","ssdeep":"3072:PKo5jYLuWgoQt0Qy1bCiTCZW3hUGWiWB8a2ro3N55BcZavMdw37IuchqMJVioJAN:PKo5fWgoQt0Qy1bCiTCZW3hUGWiWB8P8","tlshash":"c4e3d78db2e1b47142d7a0f5503f6a0ef33a6459a4098494b72de9e16fb898e4137f3c","first_seen":"2026-09-28T08:51:21.806566Z","last_seen":"2026-09-29T00:03:44.680604Z","times_seen":30,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adlook.online/match/adspectorsync?id=MzJkZmIzNDRhNTcxNzEw","fqdn":"sync.adlook.online","domain":"adlook.online","tld":"online"},"ip":{"addr":"77.223.121.90","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.037Z","timestamp":1790602148037,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/adspectorsync?id=MzJkZmIzNDRhNTcxNzEw HTTP/1.1\r\nHost: sync.adlook.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adlook.online/match/adspectorsync?id=MzJkZmIzNDRhNTcxNzEw\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/gpmdata/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.613Z","timestamp":1790602147613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /gpmdata/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155; user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://tms.gpmdata.ru/?dmpkit_cid=81460eb5-647b-4d9b-a3e3-7863f294c3da\u0026dmpkit_evid=4a608d62-b43e-464c-ba40-a2d2ff300693\u0026dsp_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\u0026ru=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dgpmdata\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=38\u0026b=9b1a4e60-e88a-4958-945c-98c1a689177e","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.040Z","timestamp":1790602148040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=38\u0026b=9b1a4e60-e88a-4958-945c-98c1a689177e HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/hbXzr/","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T13:28:54.703Z","timestamp":1790602134703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.goo.su","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 11 Dec 2025 10:48:38 GMT","end":"Tue, 12 Jan 2027 10:48:37 GMT"},"fingerprint":{"sha1":"82:23:C9:6D:49:3E:29:B7:9C:36:14:B9:ED:0A:9E:A3:65:76:C3:28","sha256":"F1:CA:E0:D3:1C:F2:4E:10:20:7C:D4:A4:34:EB:7B:2B:3E:3C:8C:FA:D9:C7:CA:35:CD:07:AF:07:82:79:4F:56"}}},"request":{"raw":"GET /hbXzr/ HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=McNtuYAzoJSc5Uhm; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:48:55 GMT\n__ddg10_=1790602135; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:48:55 GMT\n__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:48:55 GMT\n__ddg1_=MSKzL279oKdTtqzpDTkX; Domain=.goo.su; HttpOnly; Path=/; Expires=Tue, 28-Sep-2027 13:28:55 GMT\nblock_ads=1; expires=Mon, 28 Sep 2026 13:29:55 GMT; Max-Age=60; path=/; secure; httponly; samesite=lax\nXSRF-TOKEN=LG7xcmUa65wL95by9tbZEiUZaqgUP7DLwr1VW3jR; expires=Tue, 29 Sep 2026 08:08:55 GMT; Max-Age=67200; path=/; secure; samesite=lax\ngoosu_session=jakJC1Yh5ltD470y5cCe5CthFnq8ASl1jdWIJO3s; expires=Tue, 29 Sep 2026 08:08:55 GMT; Max-Age=67200; path=/; httponly; samesite=lax\r\ndate: Mon, 28 Sep 2026 13:28:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.29\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"McNtuYAzoJSc5Uhm","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:48:55Z","raw_expires":"Mon, 28-Sep-2026 13:48:55 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=McNtuYAzoJSc5Uhm; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:48:55 GMT"},{"name":"__ddg10_","value":"1790602135","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:48:55Z","raw_expires":"Mon, 28-Sep-2026 13:48:55 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1790602135; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:48:55 GMT"},{"name":"__ddg9_","value":"91.90.42.154","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:48:55Z","raw_expires":"Mon, 28-Sep-2026 13:48:55 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:48:55 GMT"},{"name":"__ddg1_","value":"MSKzL279oKdTtqzpDTkX","quoted":false,"path":"/","domain":".goo.su","expires":"2027-09-28T13:28:55Z","raw_expires":"Tue, 28-Sep-2027 13:28:55 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=MSKzL279oKdTtqzpDTkX; Domain=.goo.su; HttpOnly; Path=/; Expires=Tue, 28-Sep-2027 13:28:55 GMT"},{"name":"block_ads","value":"1","quoted":false,"path":"/","expires":"2026-09-28T13:29:55Z","raw_expires":"Mon, 28 Sep 2026 13:29:55 GMT","max_age":60,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"block_ads=1; expires=Mon, 28 Sep 2026 13:29:55 GMT; Max-Age=60; path=/; secure; httponly; samesite=lax"},{"name":"XSRF-TOKEN","value":"LG7xcmUa65wL95by9tbZEiUZaqgUP7DLwr1VW3jR","quoted":false,"path":"/","expires":"2026-09-29T08:08:55Z","raw_expires":"Tue, 29 Sep 2026 08:08:55 GMT","max_age":67200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=LG7xcmUa65wL95by9tbZEiUZaqgUP7DLwr1VW3jR; expires=Tue, 29 Sep 2026 08:08:55 GMT; Max-Age=67200; path=/; secure; samesite=lax"},{"name":"goosu_session","value":"jakJC1Yh5ltD470y5cCe5CthFnq8ASl1jdWIJO3s","quoted":false,"path":"/","expires":"2026-09-29T08:08:55Z","raw_expires":"Tue, 29 Sep 2026 08:08:55 GMT","max_age":67200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"goosu_session=jakJC1Yh5ltD470y5cCe5CthFnq8ASl1jdWIJO3s; expires=Tue, 29 Sep 2026 08:08:55 GMT; Max-Age=67200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]}],"data":{"size":13492,"size_decoded":4955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"1d8c8756e7dc157e0f8ec7fc95423575","sha1":"3fb78bbc73060d8568f37641346f6c1e51d4316a","sha256":"d15f248b6cb61eba5a0f23172e682c041f2755709e92e47aa553fce8a28a80d7","sha512":"5f2296ae1e8f993961e4947f155721df277ed9671e56ce04c2ab0f62583c92c7f0986ce9cf0ff36aa264836d34ee44955f6c21cf55516d883e0fd90b7e533e75","ssdeep":"384:LnuhAy4cFhmOmjROmvTOmt0xmrmGmXmP8AmOgGmOimmOmZc2brvqdLYsonoFbZoJ:LnuhAyvFhmOmjROmvTOmt0xmrmGmXmPW","tlshash":"3f5283ebbdb2242d4193406db5bc980a1f62940bfb45cc91b7cc46592fcaed6cc53ac8","first_seen":"2026-09-28T13:30:08.499274Z","last_seen":"2026-09-28T13:30:08.499274Z","times_seen":1,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":21,"connect":78,"send":0,"wait":414,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/bb070c4c4b5de49d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.168Z","timestamp":1790602145168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306891/bb070c4c4b5de49d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11092\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 25 Sep 2026 15:48:18 GMT\r\netag: \"5ceb87cee87347f53008b01b2eee8b7f\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Wed, 27 Sep 2056 19:38:48 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 0\r\nx-request-id: a7b3cf3f06f8c5bc\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38375,"size_decoded":11987,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38333)","md5":"67f86b964c15ea7a6a8ccf22a7326898","sha1":"d2592b879b4772be35f285bd6fdcfde399896c52","sha256":"281adce0ea5ddefe4399a2110f1e1755fc392768365ae87cd237ec80eab64ac6","sha512":"3813e0f034354d9ab73f713ed5724c26a905cb086410fa4c7fcce1a6cc4a4245370bbc57e8c4bd06a267aed5d605452007c0889c1b81e5f67aca56796b67ccc4","ssdeep":"768:+S8S2XuKTeA/l0+jtC+MWtP//I/pgFZmrm0ZrdzS8Hkhq8zWndPfjCaunAbCGRC9:1ay05V3cHTKE+nAvKCw","tlshash":"d803b58db1d1f0a146a7a0b0813f210ff27b6895a82d9440f765e4e17cba99f6073f6d","first_seen":"2026-09-28T08:51:21.803093Z","last_seen":"2026-09-29T00:03:44.504831Z","times_seen":30,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_ins?id=%24%7BUSER_ID%7D\u0026chk=1","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.947Z","timestamp":1790602147947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_ins?id=%24%7BUSER_ID%7D\u0026chk=1 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nset-cookie: pid=M2YyNzNhYWQzYjY1MTliNw; expires=Tue, 28 Mar 2028 13:29:07 GMT; domain=.adsp.io; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"M2YyNzNhYWQzYjY1MTliNw","quoted":false,"path":"/","domain":".adsp.io","expires":"2028-03-28T13:29:07Z","raw_expires":"Tue, 28 Mar 2028 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=M2YyNzNhYWQzYjY1MTliNw; expires=Tue, 28 Mar 2028 13:29:07 GMT; domain=.adsp.io; path=/; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":375,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-09-28T22:06:41.731091Z","times_seen":43220,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/roxot-wrapper/js/roxot-manager.js?pid=19e08d82-9ec3-4dda-b15f-01ab2c95e167","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.102.200","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.297Z","timestamp":1790602136297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 00:55:23 GMT","end":"Sun, 11 Oct 2026 00:55:22 GMT"},"fingerprint":{"sha1":"98:EF:3B:71:24:08:A4:ED:08:03:3E:4D:18:F2:FF:23:B2:67:BF:B0","sha256":"A8:B1:58:DC:E8:FE:F3:F7:97:DB:C2:A8:18:A9:77:2A:F1:E7:1C:A3:B5:2E:0B:BD:A1:D1:CD:FF:1E:F9:D9:20"}}},"request":{"raw":"GET /roxot-wrapper/js/roxot-manager.js?pid=19e08d82-9ec3-4dda-b15f-01ab2c95e167 HTTP/1.1\r\nHost: cdn.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: ff38acbea6874ddcbb9559aa68e54416\r\nx-cdn-edge-id: 2010\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6349,"size_decoded":2189,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5265)","md5":"0b945aafd61b94793ff4de14d99240ef","sha1":"6a028684225d503b01b40121b1e57a5d51aa1d99","sha256":"88475ecb81be446916a876a4e892fe9944f9e8cf466eaf283a6e9bc437fc66ac","sha512":"aabf3c7fd583ae0a5e2e82a230cdda14e325f9f79daadb64ae8dd259ed7270a3ab01f7367bacc8141744802b8b531ddd8d8308c58b3a0776051193a3f0874fe7","ssdeep":"96:qtpUVq6kCz+rud9BAxXSz5CpYG5SLSFByzBAxXu5Nh:qtNOAxi1CWvmAAxeZ","tlshash":"03d1707eb12c3078cac0d4ca4648ba3496fb31b30505c442367d54bcebee6bb5789ba5","first_seen":"2026-09-28T13:30:08.501613Z","last_seen":"2026-09-28T13:30:08.501613Z","times_seen":1,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":2,"connect":59,"send":0,"wait":64,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/moevideossp?id=4485bcbc44746aba6ba3\u0026chk=1","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.946Z","timestamp":1790602147946,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/moevideossp?id=4485bcbc44746aba6ba3\u0026chk=1 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adlook.online/match/adspectorsync?id=MzJkZmIzNDRhNTcxNzEw\r\nset-cookie: pid=MzJkZmIzNDRhNTcxNzEw; expires=Tue, 28 Mar 2028 13:29:07 GMT; domain=.adsp.io; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"MzJkZmIzNDRhNTcxNzEw","quoted":false,"path":"/","domain":".adsp.io","expires":"2028-03-28T13:29:07Z","raw_expires":"Tue, 28 Mar 2028 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=MzJkZmIzNDRhNTcxNzEw; expires=Tue, 28 Mar 2028 13:29:07 GMT; domain=.adsp.io; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ia.box/match/mvssp_match?eid=4485bcbc44746aba6ba3\u0026tid=dat6n90fubp6r7tr0190\u0026rid=B77zcthEbDBHTMPuP7L5NCV5gX","fqdn":"ia.box","domain":"ia.box","tld":"box"},"ip":{"addr":"5.9.56.235","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.078Z","timestamp":1790602148078,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ia.box","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 05:26:32 GMT","end":"Tue, 08 Dec 2026 05:26:31 GMT"},"fingerprint":{"sha1":"17:2C:B1:BC:16:67:1F:E3:A9:04:75:D7:11:58:FA:1A:B0:32:31:AB","sha256":"26:37:18:20:82:33:B5:B6:CF:8B:BC:C2:01:46:2A:7C:DD:01:2A:C3:68:B2:53:37:F5:6A:56:7A:2E:31:D9:01"}}},"request":{"raw":"GET /match/mvssp_match?eid=4485bcbc44746aba6ba3\u0026tid=dat6n90fubp6r7tr0190\u0026rid=B77zcthEbDBHTMPuP7L5NCV5gX HTTP/1.1\r\nHost: ia.box\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://goo.su/\r\nConnection: keep-alive\r\nCookie: rid=B77zcthEbDBHTMPuP7L5NCV5gX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.29.2\r\nDate: Mon, 28 Sep 2026 13:29:08 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://ads.betweendigital.com/match?bidder_id=444\u0026external_user_id=B77zcthEbDBHTMPuP7L5NCV5gX\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.29.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.skcrtxr.com/user-sync-api/sync","fqdn":"csync.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.720Z","timestamp":1790602136720,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /user-sync-api/sync HTTP/1.1\r\nHost: csync.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.alfasense.com/yandex/auction","fqdn":"pbs.alfasense.com","domain":"alfasense.com","tld":"com"},"ip":{"addr":"172.67.185.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.182Z","timestamp":1790602145182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alfasense.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 23:42:02 GMT","end":"Sat, 28 Nov 2026 00:41:49 GMT"},"fingerprint":{"sha1":"F3:F5:D8:70:B7:60:45:45:55:97:9A:88:60:53:65:6D:D7:F6:72:EA","sha256":"B7:88:FF:E1:3F:38:45:1D:EA:DB:C8:CE:6D:59:B8:45:D0:1A:15:46:E6:C9:71:BA:DD:77:FA:4D:A0:99:4E:94"}}},"request":{"raw":"POST /yandex/auction HTTP/1.1\r\nHost: pbs.alfasense.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1351\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1351,"data":"{\"places\":[{\"id\":\"Caramel_bfnkV7OrJN\",\"placementId\":\"66174\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_qRmT4IAofp\",\"placementId\":\"66176\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_vrgnkme8UL\",\"placementId\":\"66178\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_94smfsDngE\",\"placementId\":\"66180\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_1aFaleYblb\",\"placementId\":\"66182\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Uq02oypJe4\",\"placementId\":\"66184\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_LoS4zUhx1g\",\"placementId\":\"66186\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Q617qtAxKC\",\"placementId\":\"66194\",\"sizes\":[[300,250],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":973}}}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, X-Correlation-Id, X-Request-Id\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-max-age: 86400\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: adx_uid=0f82ea30-6814-4fd6-9805-505dec7eaa64; Path=/; Domain=alfasense.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\nx-correlation-id: a58e6d2597925159\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCgM1LW7zeZGBmJLp11qxFtuoM1HNz%2BsWltn6X31hKjZqGjPlLJfpbGIqiCDpXK9xJ4VJN4%2F6xsNqjOfsthy4oQPH3HdIOORXmQt113pzwFjHDP2JvdpdMfv1W49ukhEW2rlOQ%3D%3D\"}]}\r\ncf-ray: a423184f7e9b0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":[{"name":"adx_uid","value":"0f82ea30-6814-4fd6-9805-505dec7eaa64","quoted":false,"path":"/","domain":"alfasense.com","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"adx_uid=0f82ea30-6814-4fd6-9805-505dec7eaa64; Path=/; Domain=alfasense.com; Max-Age=31536000; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":1020,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-09-28T19:13:07.886092Z","times_seen":8206,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":4,"connect":11,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/rtb/hb/bid","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.133","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.213Z","timestamp":1790602145213,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"POST /core/rtb/hb/bid HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1351\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1351,"data":"{\"places\":[{\"id\":\"Caramel_bfnkV7OrJN\",\"placementId\":\"10624\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_qRmT4IAofp\",\"placementId\":\"10625\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_vrgnkme8UL\",\"placementId\":\"10626\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_94smfsDngE\",\"placementId\":\"10627\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_1aFaleYblb\",\"placementId\":\"10628\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Uq02oypJe4\",\"placementId\":\"10629\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_LoS4zUhx1g\",\"placementId\":\"10630\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Q617qtAxKC\",\"placementId\":\"10631\",\"sizes\":[[300,250],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":973}}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:05 GMT\r\nContent-Type: application/json\r\nContent-Length: 11\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nAccess-Control-Allow-Origin: https://goo.su\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: idntfy=VSWGrO4QG5lxNPj; expires=Tue, 28-Sep-2027 13:29:05 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure\nidntfy=VSWGrO4QG5lxNPj; expires=Tue, 28-Sep-2027 13:29:05 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VSWGrO4QG5lxNPj","quoted":false,"path":"/c/","domain":"otclick-adv.ru","expires":"2027-09-28T13:29:05Z","raw_expires":"Tue, 28-Sep-2027 13:29:05 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VSWGrO4QG5lxNPj; expires=Tue, 28-Sep-2027 13:29:05 GMT; domain=otclick-adv.ru; path=/c/; SameSite=None; Secure"},{"name":"idntfy","value":"VSWGrO4QG5lxNPj","quoted":false,"path":"/core/","domain":"otclick-adv.ru","expires":"2027-09-28T13:29:05Z","raw_expires":"Tue, 28-Sep-2027 13:29:05 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VSWGrO4QG5lxNPj; expires=Tue, 28-Sep-2027 13:29:05 GMT; domain=otclick-adv.ru; path=/core/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":726,"mime_type":"application/json","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-09-28T19:13:07.886092Z","times_seen":8206,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":18,"connect":38,"send":0,"wait":52,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/code.xml?pid=8623\u0026vr=1\u0026rid=1393973\u0026ll=goo.su","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.133","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.454Z","timestamp":1790602147454,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/code.xml?pid=8623\u0026vr=1\u0026rid=1393973\u0026ll=goo.su HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: idntfy=VSWGrO4QG5lxNPj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Type: text/xml; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nAccess-Control-Allow-Origin: https://goo.su\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":512,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/sync/myvideo","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.118","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.797Z","timestamp":1790602147797,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"GET /api/sync/myvideo HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://rtb.moe.video/cs?d=14\u0026b=8bb8e51b-ba04-4c7d-8258-9dd11baffbfc\r\nSet-Cookie: afp_cookie=gAAAAABqumujBJ1_pHH6tsZ_jBF6vfNknKXYxbDGgY8pPV12Ezln0UHCIZNWIajtL7SuPUysYoyVcXNfJvjOO4jbSmQSkVtVqrUM0eiy6SWBiHpCDDbRFUOKM6F4C1tQ0Scexi1OwmQR6JfqIGAmrGoM-jLEijEcbyfeBqgUWRNodS-QXBVfcKrs-xgHZRwsk5fVztWvWbJ_78iOKnTlgRvJq1Bk9ompFg==$; expires=Wed, 28 Oct 2026 13:29:07 GMT; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":[{"name":"afp_cookie","value":"gAAAAABqumujBJ1_pHH6tsZ_jBF6vfNknKXYxbDGgY8pPV12Ezln0UHCIZNWIajtL7SuPUysYoyVcXNfJvjOO4jbSmQSkVtVqrUM0eiy6SWBiHpCDDbRFUOKM6F4C1tQ0Scexi1OwmQR6JfqIGAmrGoM-jLEijEcbyfeBqgUWRNodS-QXBVfcKrs-xgHZRwsk5fVztWvWbJ_78iOKnTlgRvJq1Bk9ompFg==$","quoted":false,"path":"/","expires":"2026-10-28T13:29:07Z","raw_expires":"Wed, 28 Oct 2026 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"afp_cookie=gAAAAABqumujBJ1_pHH6tsZ_jBF6vfNknKXYxbDGgY8pPV12Ezln0UHCIZNWIajtL7SuPUysYoyVcXNfJvjOO4jbSmQSkVtVqrUM0eiy6SWBiHpCDDbRFUOKM6F4C1tQ0Scexi1OwmQR6JfqIGAmrGoM-jLEijEcbyfeBqgUWRNodS-QXBVfcKrs-xgHZRwsk5fVztWvWbJ_78iOKnTlgRvJq1Bk9ompFg==$; expires=Wed, 28 Oct 2026 13:29:07 GMT; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.qtarget.tech/userbind?src=moevideo\u0026id=4485bcbc44746aba6ba3","fqdn":"match.qtarget.tech","domain":"qtarget.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.798Z","timestamp":1790602147798,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /userbind?src=moevideo\u0026id=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: match.qtarget.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=60\u0026b=000c5181-7232-4f43-8f19-d262dfab2510","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.100Z","timestamp":1790602148100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=60\u0026b=000c5181-7232-4f43-8f19-d262dfab2510 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp.al-adtech.com/api/adfox/bids","fqdn":"ssp.al-adtech.com","domain":"al-adtech.com","tld":"com"},"ip":{"addr":"45.139.25.118","port":443,"asn":34959,"as":"Kviktel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.209Z","timestamp":1790602145209,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.al-adtech.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Sep 2026 09:11:36 GMT","end":"Mon, 21 Dec 2026 09:11:35 GMT"},"fingerprint":{"sha1":"5B:10:95:7E:AC:D5:93:8C:E9:8D:1A:3A:EC:BE:FE:D2:A5:4E:09:3F","sha256":"9A:33:DD:BB:63:C8:94:97:6E:8F:9E:AC:C9:20:DE:77:B5:1B:DF:7C:CF:AE:59:E8:90:52:C9:79:A2:D3:AF:81"}}},"request":{"raw":"POST /api/adfox/bids HTTP/1.1\r\nHost: ssp.al-adtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1503\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1503,"data":"{\"places\":[{\"id\":\"Caramel_bfnkV7OrJN\",\"placementId\":\"67dad9254e6965fa7b31391e\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_qRmT4IAofp\",\"placementId\":\"67dad9264e6965fa7b313937\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_vrgnkme8UL\",\"placementId\":\"67dad9284e6965fa7b313950\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_94smfsDngE\",\"placementId\":\"67dad92a4e6965fa7b313969\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_1aFaleYblb\",\"placementId\":\"67dad92c4e6965fa7b313982\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Uq02oypJe4\",\"placementId\":\"67dad92d4e6965fa7b31399b\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_LoS4zUhx1g\",\"placementId\":\"67dad92f4e6965fa7b3139b4\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Q617qtAxKC\",\"placementId\":\"67dad9314e6965fa7b3139cd\",\"sizes\":[[300,250],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":973}}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 13:29:05 GMT\r\nContent-Type: application/json\r\nContent-Length: 11\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://goo.su\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":264,"mime_type":"application/json","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-09-28T19:13:07.886092Z","times_seen":8206,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":2,"connect":65,"send":0,"wait":78,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.418Z","timestamp":1790602145418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs_render-edc4844f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 45126\r\ncache-control: public, max-age=946708560\r\nlast-modified: Tue, 22 Sep 2026 17:38:01 GMT\r\ncontent-encoding: br\r\nexpires: Wed, 27 Sep 2056 20:03:01 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"b1c5c7d824d71dde55cecf38bce29d4f\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-strm-log-split: 6\r\nx-request-id: 4c3c660b23f4b383\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249149,"size_decoded":46021,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65499)","md5":"2da940479dd1331d4761b4f6483c35aa","sha1":"f68170113f89301d8b4d914c5f8cfe7f847a9e55","sha256":"89b6a185ee2ce3a6cfb65aa4705ecf096434aaa2d8dcb55fbaff3cd7744d0604","sha512":"d0769783af7f21cfc03bc8cdb4c8bb2b9a0ec2a6136bcf1915b0f53acea5855b63216591fc8610460a231ad37c9a8eeae253bcb5244cb01b127eb275dd6175ef","ssdeep":"1536:1BD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0O:35SGX7g8BYlyp2z2BWoy5XiN","tlshash":"7e34c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","first_seen":"2026-09-23T08:35:42.799207Z","last_seen":"2026-09-29T00:03:44.568838Z","times_seen":292,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adlook.online/match/adspectorsync?id=MzJkZmIzNDRhNTcxNzEw\u0026chk=1","fqdn":"sync.adlook.online","domain":"adlook.online","tld":"online"},"ip":{"addr":"77.223.121.90","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.273Z","timestamp":1790602148273,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/adspectorsync?id=MzJkZmIzNDRhNTcxNzEw\u0026chk=1 HTTP/1.1\r\nHost: sync.adlook.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nlocation: https://match.ohmy.bid/cm?ssp=adlook\u0026redirect_url=https%3A%2F%2Fsync.adlook.online%2Fmatch%2Fohmybid%3Fid%3D%7Buid%7D\r\nset-cookie: pid=MWM2MWRhNTdhY2NhN2IxNA; expires=Tue, 28 Mar 2028 13:29:08 GMT; domain=.adlook.online; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"MWM2MWRhNTdhY2NhN2IxNA","quoted":false,"path":"/","domain":".adlook.online","expires":"2028-03-28T13:29:08Z","raw_expires":"Tue, 28 Mar 2028 13:29:08 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=MWM2MWRhNTdhY2NhN2IxNA; expires=Tue, 28 Mar 2028 13:29:08 GMT; domain=.adlook.online; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.012Z","timestamp":1790602147012,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /pbd/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://sync.upravel.com/pbd/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly9nb28uc3UvIl19fQ==\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: session_tptc=1790602147155;SameSite=None;Secure; Max-Age=180; Domain=.upravel.com; Path=/; Version=1\nsession_tptc-legacy=1790602147155; Max-Age=180; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"session_tptc","value":"1790602147155","quoted":false,"path":"/","domain":".upravel.com","max_age":180,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"session_tptc=1790602147155;SameSite=None;Secure; Max-Age=180; Domain=.upravel.com; Path=/; Version=1"},{"name":"session_tptc-legacy","value":"1790602147155","quoted":false,"path":"/","domain":".upravel.com","max_age":180,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"session_tptc-legacy=1790602147155; Max-Age=180; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":2,"connect":54,"send":0,"wait":61,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/moevideossp?id=4485bcbc44746aba6ba3","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.830Z","timestamp":1790602147830,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/moevideossp?id=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adsp.io/match/moevideossp?id=4485bcbc44746aba6ba3\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=51\u0026b=SqAVzhko6","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.261Z","timestamp":1790602148261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=51\u0026b=SqAVzhko6 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=68\u0026b=039c32d2-a6a1-453a-8bcb-567da0c57dfe","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.311Z","timestamp":1790602148311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=68\u0026b=039c32d2-a6a1-453a-8bcb-567da0c57dfe HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=3010437164\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A05.790%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A12%2C%22top%22%3A0%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqn\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=1\u0026bids=W3siYmlkZGVyTmFtZSI6ImFsZmFzZW5zZSIsImNhbXBhaWduX2lkIjoxMzY2MDc1LCJyZXNwb25zZV90aW1lIjoyNTEsImVycm9yIjp7ImNvZGUiOjF9LCJwbGFjZW1lbnRfaWQiOiI2NjE3NCJ9LHsiYmlkZGVyTmFtZSI6ImJ1enpvb2xhIiwiY2FtcGFpZ25faWQiOjEzOTQxMTksInJlc3BvbnNlX3RpbWUiOjMzLCJlcnJvciI6eyJjb2RlIjo0fSwicGxhY2VtZW50X2lkIjoiMTI4OTk1OSJ9LHsiYmlkZGVyTmFtZSI6ImdldGludGVudCIsImNhbXBhaWduX2lkIjoxMzY2MDc4LCJyZXNwb25zZV90aW1lIjozNCwiZXJyb3IiOnsiY29kZSI6NH0sInBsYWNlbWVudF9pZCI6IjY2XzMwMHgzMDBfYWxmYWRhcnQifSx7ImJpZGRlck5hbWUiOiJiaWR2b2wiLCJjYW1wYWlnbl9pZCI6MTQ0NTcyNywicmVzcG9uc2VfdGltZSI6MjYzLCJlcnJvciI6eyJjb2RlIjoxfSwicGxhY2VtZW50X2lkIjoiNTE2ODkifSx7ImJpZGRlck5hbWUiOiJvdG0iLCJjYW1wYWlnbl9pZCI6MTUzNjE0MywicmVzcG9uc2VfdGltZSI6NDUsImVycm9yIjp7ImNvZGUiOjR9LCJwbGFjZW1lbnRfaWQiOiI5ODMyOCJ9LHsiYmlkZGVyTmFtZSI6ImJldHdlZW5kaWdpdGFsIiwiY2FtcGFpZ25faWQiOjEzNjYwNzQsInJlc3BvbnNlX3RpbWUiOjUzLCJlcnJvciI6eyJjb2RlIjo0fSwicGxhY2VtZW50X2lkIjoiNDgzNTUyMiJ9LHsiYmlkZGVyTmFtZSI6ImFzdHJhbGFiIiwiY2FtcGFpZ25faWQiOjIzNDI5NjMsInJlc3BvbnNlX3RpbWUiOjI4MywiZXJyb3IiOnsiY29kZSI6MX0sInBsYWNlbWVudF9pZCI6IjY3ZGFkOTI1NGU2OTY1ZmE3YjMxMzkxZSJ9LHsiYmlkZGVyTmFtZSI6InJveG90IiwiY2FtcGFpZ25faWQiOjMwMDYwNDgsInJlc3BvbnNlX3RpbWUiOjIxNCwiZXJyb3IiOnsiY29kZSI6MX0sInBsYWNlbWVudF9pZCI6IjU1MzkyNjAwLWQ0MWYtNDczYi05YTA4LTFiYTMwZTM1NjcxOCJ9LHsiYmlkZGVyTmFtZSI6Im90Y2xpY2siLCJjYW1wYWlnbl9pZCI6MzE0NzIxNywicmVzcG9uc2VfdGltZSI6MjM0LCJlcnJvciI6eyJjb2RlIjoxfSwicGxhY2VtZW50X2lkIjoiMTA2MjQifSx7ImJpZGRlck5hbWUiOiJzYXBlIiwiY2FtcGFpZ25faWQiOjE2NzI2OTksInJlc3BvbnNlX3RpbWUiOjE0MCwiZXJyb3IiOnsiY29kZSI6NH0sInBsYWNlbWVudF9pZCI6IjkzNTI4MyJ9LHsiYmlkZGVyTmFtZSI6InNvbHRhIiwiY2FtcGFpZ25faWQiOjI0NjgyNjEsInJlc3BvbnNlX3RpbWUiOjMwNCwiZXJyb3IiOnsiY29kZSI6MX0sInBsYWNlbWVudF9pZCI6IjQ5LU50MVRzIn0seyJiaWRkZXJOYW1lIjoidW1nIiwiY2FtcGFpZ25faWQiOjMxMzY2ODAsInJlc3BvbnNlX3RpbWUiOjI5MCwiZXJyb3IiOnsiY29kZSI6MX0sInBsYWNlbWVudF9pZCI6IjEzMTU4In0seyJiaWRkZXJOYW1lIjoibXl0YXJnZXQiLCJjYW1wYWlnbl9pZCI6MTM2NjA3MiwicmVzcG9uc2VfdGltZSI6MjA4LCJlcnJvciI6eyJjb2RlIjo0fSwicGxhY2VtZW50X2lkIjoiMTc5NzQ1NyJ9LHsiYmlkZGVyTmFtZSI6Im1lZGlhc25pcGVyIiwiY2FtcGFpZ25faWQiOjIzMDI3ODcsInJlc3BvbnNlX3RpbWUiOjIwOSwiZXJyb3IiOnsiY29kZSI6NH0sInBsYWNlbWVudF9pZCI6IjI3NzIwIn0seyJiaWRkZXJOYW1lIjoiYWRyaXZlciIsImNhbXBhaWduX2lkIjoxMzY2MDc2LCJyZXNwb25zZV90aW1lIjoyMDksImVycm9yIjp7ImNvZGUiOjR9LCJwbGFjZW1lbnRfaWQiOiI1Nzpnb28uc3VfMzAweDMwMF9kZXNrIn0seyJiaWRkZXJOYW1lIjoiaHlicmlkIiwiY2FtcGFpZ25faWQiOjE4Nzk3NjMsInJlc3BvbnNlX3RpbWUiOjIxMCwiZXJyb3IiOnsiY29kZSI6NH0sInBsYWNlbWVudF9pZCI6IjY3ZGJkMjhlN2JjNzJmZWJkOGE4ZDliNSJ9LHsiYmlkZGVyTmFtZSI6ImRpZ2l0YWxjYXJhbWVsIiwiY2FtcGFpZ25faWQiOjM0MzMyNTYsInJlc3BvbnNlX3RpbWUiOjYyNCwiZXJyb3IiOnsiY29kZSI6M30sInBsYWNlbWVudF9pZCI6ImQ1Z2NvYjNkaTBmczczY2ZjNXAwI2Q1Z2VkcHJkaTBmczczY2ZjNXFnIn1d\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.814Z","timestamp":1790602145814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=3010437164\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A05.790%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A12%2C%22top%22%3A0%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqn\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=1\u0026bids=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\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: pu=5647879041790602144; pi=OIc2RvspHyNvfPYCWYF0v54FciJ1CKoQMMxu+t7a1G5zqJCklKk89INv7QeyyTYTGc120SaVucSYL6p3eH8U+1s0Vs4=; i=8nakhEzH3NABQAxYyV5IR2jcwlwJkQ0OBdUIYtowcpv0NitGaIO2VDt4JbPAq+cK3WVvT3CD/vUKG0ywaxf7nO2sFiM=; yandexuid=1492042901790602144; yashr=9212708401790602144; bh=YKDX6dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-adfox-request-id: 18124401678169673855\r\naccess-control-allow-origin: https://goo.su\r\ncontent-encoding: gzip\r\nx-yt-trace-id: 0-1-0-0\r\nx-yandex-req-id: 1790602145831059-4506807590460046248-balancer-l7leveler-kubr-yp-sas-155-BAL\r\ntiming-allow-origin: *\r\nx-ads-degradation: 0.000000\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-credentials: true\r\nexpires: Mon, 04 Dec 1999 21:29:02 GMT\r\np3p: policyref=/w3c/w3c.p3p, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\ncontent-type: application/json\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\nx-ads-loadaverage: 0.117647\r\nx-yt-request-id: 85f7feca-4486803a-602e49c5-b7b7296e\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":171,"size_decoded":1485,"mime_type":"application/json","magic":"JSON text data","md5":"a953bc38f0484fc47cad99f9c108f9ef","sha1":"387f8025bcc57773f87a542f150d29b2af019981","sha256":"dceed813dbea1c384c88ea7e6a586ec6f572de079f7067139c838c2b235a998a","sha512":"8cf9e0138807cd98dc3d15b3b0bb08415967e0ad7c84e27bf93c8dc579fcbbdc88814f803c5f47c5ffb9bf1e63479ad619f4ebde5a51731036283388accb90c3","ssdeep":"","tlshash":"f7c08c09aa0a7ab34cc9ce1a0658e850dbd8b444c0080e8920ced0cd0f4f2efea46828","first_seen":"2026-09-28T13:30:08.5032Z","last_seen":"2026-09-28T13:30:08.5032Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/rp-core-engine.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.509Z","timestamp":1790602136509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 00:55:23 GMT","end":"Sun, 11 Oct 2026 00:55:22 GMT"},"fingerprint":{"sha1":"98:EF:3B:71:24:08:A4:ED:08:03:3E:4D:18:F2:FF:23:B2:67:BF:B0","sha256":"A8:B1:58:DC:E8:FE:F3:F7:97:DB:C2:A8:18:A9:77:2A:F1:E7:1C:A3:B5:2E:0B:BD:A1:D1:CD:FF:1E:F9:D9:20"}}},"request":{"raw":"GET /wrapper/js/rp-core-engine.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn-c.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=259200\r\netag: W/\"a14d66c1ba93a157245006c1320c1f79\"\r\nlast-modified: Thu, 17 Sep 2026 09:06:13 GMT\r\nx-amz-request-id: 88349a821fd33d35\r\ncontent-encoding: gzip\r\nx-cdn-request-id: 0d7076c0ed2359e27e759d771f476bd8\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21314,"size_decoded":7004,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21314), with no line terminators","md5":"a14d66c1ba93a157245006c1320c1f79","sha1":"a92fd1d445813e3e0d8ce80747c9a36c35d543f6","sha256":"502fe3410cd2bf4734d54cb7941fd6ae453bc328cb92289f443a273fb5ae012b","sha512":"7e770e5543401d57dfd9d746cd3c6cd570840cb9c4ebdb4a2145bfba4d5c6094d5c1cf05654b262b8ffeed7c939f5b88a9862f38ca70efeba7770a197483361d","ssdeep":"384:Bu2RU1/Vi1YiyqsiegvgCy/x9hRG1pW7iPVYEiAH:Bu2RUzKYtqs9goF/xfRGXyEiE","tlshash":"b1a20ae9b1daf15a4793a8a4c43f6017f1363e213d1d4020e2aac0d27979e4f6637d7a","first_seen":"2026-09-15T15:00:29.660372Z","last_seen":"2026-09-28T16:35:59.827957Z","times_seen":41,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kimberlite.io/js/thumbmark.umd.js","fqdn":"static.kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"212.8.232.117","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.797Z","timestamp":1790602136797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /js/thumbmark.umd.js HTTP/1.1\r\nHost: static.kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kimberlite.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Feb 2026 17:27:09 GMT\r\netag: W/\"6995f66d-7737\"\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE, PATCH\r\naccess-control-allow-headers: Authorization,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30519,"size_decoded":13085,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30407)","md5":"06e70954d59c5759049a8158a0dd99d0","sha1":"a7a18d96fd0b10f88e8c025e6842cd272151c93a","sha256":"54a39580526bca72122afde8131057b589c7b56ba96217438c4a41016ed759c8","sha512":"68803d6d0fd05406d5b12c97f3c691262ec8a141645418525bc651b66f5df03207bbb84ab38d6d12526b55107c78108c5bcb5ae5d43b151ed0714d21a130894d","ssdeep":"768:ltUPn7X6wGbxLuFZbKEhFOkmqXnNIEZaM+/8oMRwKVu17HNlk24V7TK2hfM2TrZ:y4GOAaqy462hH","tlshash":"16d24cb97264702702762a96a03a5006d535a734395bc050f22e8d477a9be8f63bbf6c","first_seen":"2026-02-17T22:28:09.858399Z","last_seen":"2026-09-28T13:30:08.508119Z","times_seen":752,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":4,"connect":57,"send":0,"wait":57,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=22\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.058Z","timestamp":1790602148058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=22\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.top100.ru/top100/top100.js","fqdn":"st.top100.ru","domain":"top100.ru","tld":"ru"},"ip":{"addr":"151.236.122.216","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.869Z","timestamp":1790602135869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.top100.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 08 Apr 2026 07:30:02 GMT","end":"Sat, 24 Oct 2026 07:30:02 GMT"},"fingerprint":{"sha1":"7C:C9:B5:84:55:54:5C:9D:41:EF:E9:99:63:4E:15:25:62:AF:AE:D3","sha256":"BE:39:53:E9:C8:08:8C:A1:6F:38:99:A3:D7:AE:D7:D4:67:3C:32:FA:2D:12:B3:17:BB:97:92:F6:44:F9:FF:D0"}}},"request":{"raw":"GET /top100/top100.js HTTP/1.1\r\nHost: st.top100.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"75427bcd725bf69a719cf64a693ee837\"\r\nlast-modified: Mon, 28 Sep 2026 12:30:38 GMT\r\ncontent-encoding: br\r\nx-cdn-request-id: a13e026ef04555440227d9dba031dc3a\r\nx-cdn-edge-id: 2018\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150112,"size_decoded":40800,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"75427bcd725bf69a719cf64a693ee837","sha1":"bc53496aab7bee3d251e3ea0e32d696c43166b74","sha256":"220db6c00a3bb33ea6a89ea9c80ee6f48603989c0a38b09b39b257a110b18520","sha512":"bc2fbbcefbe67d64ad4fd8fe484aefde8470bfd93c084a5510ec4304c13fc9e544fc346f986f39f2d2a04906889b5fc09b49c6ec921d249487d434dea199e50c","ssdeep":"3072:EGSs+7dZBTQp8TLR03+WlEn5hAEynPGFdVJtP381upX9YW/w/xHJ/AbXHm:EGSz7dZBTQp8TLR03+WlEn5hAEynPGFc","tlshash":"96e3758cf5a2f06543a3a0e1462f110af33e692cb44a556cf699d8e26cf494e9137f7c","first_seen":"2026-09-28T13:30:08.508635Z","last_seen":"2026-09-28T21:48:05.640797Z","times_seen":5,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":44,"connect":58,"send":0,"wait":58,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.ussp.io/yandex","fqdn":"r.ussp.io","domain":"ussp.io","tld":"io"},"ip":{"addr":"213.171.19.134","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.224Z","timestamp":1790602145224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ussp.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 04:18:07 GMT","end":"Sun, 20 Dec 2026 04:18:06 GMT"},"fingerprint":{"sha1":"69:93:E2:A3:CB:C1:5C:E2:7D:5F:20:1D:F2:34:F4:93:4B:1D:D8:06","sha256":"EC:58:A1:55:04:10:DB:91:6F:E8:81:96:CF:66:91:D8:5C:F3:7C:F7:7E:99:B9:D4:A6:1C:8F:D4:82:65:14:5E"}}},"request":{"raw":"POST /yandex HTTP/1.1\r\nHost: r.ussp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1351\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1351,"data":"{\"places\":[{\"id\":\"Caramel_bfnkV7OrJN\",\"placementId\":\"13158\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_qRmT4IAofp\",\"placementId\":\"13159\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_vrgnkme8UL\",\"placementId\":\"13160\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_94smfsDngE\",\"placementId\":\"13161\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_1aFaleYblb\",\"placementId\":\"13162\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Uq02oypJe4\",\"placementId\":\"13163\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_LoS4zUhx1g\",\"placementId\":\"13164\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Q617qtAxKC\",\"placementId\":\"13165\",\"sizes\":[[300,250],[300,100],[300,50],[250,250],[200,200]],\"targetRef\":\"https://goo.su/hbXzr/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":973}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 32\r\ncontent-encoding: gzip\r\nset-cookie: utid=xUKwX03C2EJ2_XDlkulxcFbQyEA_lYFpokX6dC2cgsXWykzgURqcQHQ_6iDDTuXG; Expires=Thu, 25 Sep 2036 16:29:05 GMT; Domain=.ussp.io; SameSite=None; Secure; Path=/\nutid=xUKwX03C2EJ2_XDlkulxcFbQyEA_lYFpokX6dC2cgsXWykzgURqcQHQ_6iDDTuXG; Expires=Thu, 25 Sep 2036 16:29:05 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\nx-served-by: prod-adserver23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"utid","value":"xUKwX03C2EJ2_XDlkulxcFbQyEA_lYFpokX6dC2cgsXWykzgURqcQHQ_6iDDTuXG","quoted":false,"path":"/","domain":".ussp.io","expires":"2036-09-25T16:29:05Z","raw_expires":"Thu, 25 Sep 2036 16:29:05 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"utid=xUKwX03C2EJ2_XDlkulxcFbQyEA_lYFpokX6dC2cgsXWykzgURqcQHQ_6iDDTuXG; Expires=Thu, 25 Sep 2036 16:29:05 GMT; Domain=.ussp.io; SameSite=None; Secure; Path=/"},{"name":"utid","value":"xUKwX03C2EJ2_XDlkulxcFbQyEA_lYFpokX6dC2cgsXWykzgURqcQHQ_6iDDTuXG","quoted":false,"path":"/","domain":".utraff.com","expires":"2036-09-25T16:29:05Z","raw_expires":"Thu, 25 Sep 2036 16:29:05 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"utid=xUKwX03C2EJ2_XDlkulxcFbQyEA_lYFpokX6dC2cgsXWykzgURqcQHQ_6iDDTuXG; Expires=Thu, 25 Sep 2036 16:29:05 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":900,"mime_type":"application/json","magic":"JSON text data","md5":"6d0523ed4c4d5f8bba734ac344c2f8da","sha1":"03c4cc6604396d430d3574d67ef4d3b201d38fc1","sha256":"7b5f5ee7f72d94f9694569fd0b2c064e317c41949575486100562d8ea0610787","sha512":"a11b0d61124538623e1c1f26d9743f674b51f5b523dfb9826d7403e562e492aeef8ec201060e452d8af6d28dbba895d091c11ff4a5e78e0e9d3cea23eb6d4935","ssdeep":"","tlshash":"d460000c003f300000c0300000000000c00000c000f0c000c00c0003030c00c0000000","first_seen":"2023-04-15T15:40:13Z","last_seen":"2026-09-28T13:30:08.512852Z","times_seen":1035,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":8,"connect":46,"send":0,"wait":88,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:06.944Z","timestamp":1790602146944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:31 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\nage: 596195\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18640,"size_decoded":19453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18640, version 1.0","md5":"289ab8c3689e58c84c061039efc15d3a","sha1":"9432c99c4915ea17dea97eec0bbd0f2fa6ff0943","sha256":"0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a","sha512":"4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787","ssdeep":"384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6","tlshash":"9182d1454a3d7753f235a6425daef8cac2b5d42d56978c103be2541a3dff28e33109d8","first_seen":"2025-09-17T00:02:10.421759Z","last_seen":"2026-09-28T23:14:59.047643Z","times_seen":47099,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.skcrtxr.com/user-sync-api/sync","fqdn":"csync.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.585Z","timestamp":1790602136585,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /user-sync-api/sync HTTP/1.1\r\nHost: csync.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/ut?v=1\u0026u=GA1.1.1936950156.1790602136%2C%2C%2C%2C%2C%2C677f02102c589b155509dba10fb7cda4%2C","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:58.397Z","timestamp":1790602138397,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /rtb/ut?v=1\u0026u=GA1.1.1936950156.1790602136%2C%2C%2C%2C%2C%2C677f02102c589b155509dba10fb7cda4%2C HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: sm=MQBqumuY; u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:28:58 GMT\r\nConnection: keep-alive\r\ncache-control: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://goo.su\r\nset-cookie: u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure\r\nserver-timing: app;srv=s11a;dur=0.0002\r\n\r\n","headers":null,"cookies":[{"name":"u","value":"arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs","quoted":false,"path":"/","max_age":7776000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":366,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.goo.su/hbXzr/","fqdn":"www.goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T13:28:54.487Z","timestamp":1790602134487,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /hbXzr/ HTTP/1.1\r\nHost: www.goo.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.goo.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"www.goo.su","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/5c450e2798995b5f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.420Z","timestamp":1790602145420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306891/5c450e2798995b5f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 138341\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"a59da025606ff95da153fa9b0f7bc551\"\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nexpires: Wed, 27 Sep 2056 19:38:48 GMT\r\nlast-modified: Fri, 25 Sep 2026 15:48:17 GMT\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 7\r\nx-request-id: 31ade086a2492c9c\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":716708,"size_decoded":139237,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"199e72c8fd9d2e6136e58e56dbac12f2","sha1":"e416b94a536b56a5518bf1251a9b2d4d3c77ee1f","sha256":"4d7b9f175cbd14af54508a698584375cca219f430507ee85f8616f103957cceb","sha512":"d8ee50481a211d201cc8cabfd8774d45038a00e87c4dd15f8f37f917bb5a6f20e3f1f6aaaf244f38efbef18ca57c6d69ad27d102290daad5874d44cc11794d63","ssdeep":"12288:FA4oH2D50i8cujJjgMY9nmFJ/jlaWtmt9kTliBtidagcBt5UWnhBPnzBa:C4oH2t0i8cujJjgMYFmFJ/jlaWtmt9k3","tlshash":"fde4e88af5e1b07142e7a0f9803f150ff23a7a15550980a4f62ae8e57eb858e5137f3d","first_seen":"2026-09-28T08:51:21.769483Z","last_seen":"2026-09-29T00:03:44.777598Z","times_seen":30,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.ussp.io/sync?ssp=2529","fqdn":"a.ussp.io","domain":"ussp.io","tld":"io"},"ip":{"addr":"213.171.19.197","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.362Z","timestamp":1790602145362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ussp.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 04:18:07 GMT","end":"Sun, 20 Dec 2026 04:18:06 GMT"},"fingerprint":{"sha1":"69:93:E2:A3:CB:C1:5C:E2:7D:5F:20:1D:F2:34:F4:93:4B:1D:D8:06","sha256":"EC:58:A1:55:04:10:DB:91:6F:E8:81:96:CF:66:91:D8:5C:F3:7C:F7:7E:99:B9:D4:A6:1C:8F:D4:82:65:14:5E"}}},"request":{"raw":"GET /sync?ssp=2529 HTTP/1.1\r\nHost: a.ussp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.24.0\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\nset-cookie: preutid=1; Expires=Wed, 28 Oct 2026 16:29:05 GMT; Domain=.ussp.io; SameSite=None; Secure; Path=/\npreutid=1; Expires=Wed, 28 Oct 2026 16:29:05 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"preutid","value":"1","quoted":false,"path":"/","domain":".ussp.io","expires":"2026-10-28T16:29:05Z","raw_expires":"Wed, 28 Oct 2026 16:29:05 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"preutid=1; Expires=Wed, 28 Oct 2026 16:29:05 GMT; Domain=.ussp.io; SameSite=None; Secure; Path=/"},{"name":"preutid","value":"1","quoted":false,"path":"/","domain":".utraff.com","expires":"2026-10-28T16:29:05Z","raw_expires":"Wed, 28 Oct 2026 16:29:05 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"preutid=1; Expires=Wed, 28 Oct 2026 16:29:05 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":597,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":3,"connect":27,"send":0,"wait":27,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/4a9ffa05444f67ad.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.403Z","timestamp":1790602145403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306891/4a9ffa05444f67ad.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1973\r\nexpires: Wed, 27 Sep 2056 19:08:47 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=946708560\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nlast-modified: Fri, 25 Sep 2026 15:48:17 GMT\r\ntiming-allow-origin: *\r\netag: \"7f2005609ea7803f1b80b00e853bd0df\"\r\nx-strm-log-split: 8\r\nx-request-id: b8b9fda89a4785ca\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4763,"size_decoded":2867,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4724)","md5":"2c23afa24336f7581f7b04ff9263362f","sha1":"c0fd82e1c412213b4974bcd8564aae4fdafe0ea1","sha256":"c29a95d8a093096c8eb2bd21d3eece8a627614b08b45e5256209781f48f1654f","sha512":"543f24fe538226287987e574beb26a69aeaa870f5c86080621ddf28898f9523f9991bccbcdf0e331d50d6d36a1a96feca7dc462b36cc4896ccea11b906014899","ssdeep":"96:RPwE8Oe2b4XfjWP5VlX821dFeFYGYoP1vECxGSaXRJufXbwTv1J0a2qVB:RPt8N2XP5PMrYVqs82R4Wv1JzLX","tlshash":"eba1e7fd324172ba97c601d084bf9512f67d1e11980ab461f14894112cb6fa721efefe","first_seen":"2026-09-28T08:51:21.794542Z","last_seen":"2026-09-29T00:03:44.679802Z","times_seen":30,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.adx.com.ru/moevideo-vast-midprice-bid?vpaid=true\u0026referer=goo.su","fqdn":"bid.adx.com.ru","domain":"adx.com.ru","tld":"com.ru"},"ip":{"addr":"83.222.96.198","port":443,"asn":42632,"as":"MnogoByte LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.505Z","timestamp":1790602147505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adx.com.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 22 Jul 2026 13:37:05 GMT","end":"Sat, 06 Feb 2027 13:37:05 GMT"},"fingerprint":{"sha1":"6D:2A:9E:16:2F:C3:93:A2:74:D7:2B:E5:44:7A:77:F6:4B:04:AA:93","sha256":"A9:CF:1C:C2:28:31:C7:AE:6A:44:F7:D6:3C:E7:AC:33:8F:5A:AE:BB:34:F2:E2:D4:F8:F4:BF:6D:F8:CC:F3:A9"}}},"request":{"raw":"GET /moevideo-vast-midprice-bid?vpaid=true\u0026referer=goo.su HTTP/1.1\r\nHost: bid.adx.com.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.28.2\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":179,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":3,"connect":59,"send":0,"wait":58,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.top100.ru/top100/3.22.0/mgc.js","fqdn":"st.top100.ru","domain":"top100.ru","tld":"ru"},"ip":{"addr":"151.236.122.216","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.286Z","timestamp":1790602136286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.top100.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 08 Apr 2026 07:30:02 GMT","end":"Sat, 24 Oct 2026 07:30:02 GMT"},"fingerprint":{"sha1":"7C:C9:B5:84:55:54:5C:9D:41:EF:E9:99:63:4E:15:25:62:AF:AE:D3","sha256":"BE:39:53:E9:C8:08:8C:A1:6F:38:99:A3:D7:AE:D7:D4:67:3C:32:FA:2D:12:B3:17:BB:97:92:F6:44:F9:FF:D0"}}},"request":{"raw":"GET /top100/3.22.0/mgc.js HTTP/1.1\r\nHost: st.top100.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\ncontent-type: application/javascript\r\netag: W/\"cfb56d07f3dee58e41e03369b573d062\"\r\nlast-modified: Mon, 28 Sep 2026 12:30:38 GMT\r\ncontent-encoding: br\r\nx-cdn-request-id: 81249cdba1bc2fe8def17db7f137a1df\r\nx-cdn-edge-id: 2018\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4518,"size_decoded":1536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4518), with no line terminators","md5":"cfb56d07f3dee58e41e03369b573d062","sha1":"10027224ccc41467b4cab5b5b115e5f5b14c5c21","sha256":"526e6cb9225855a6a69c24abbdd46c44a1d458727775812b013de559e16c21de","sha512":"e19ea8fff9df228a5ae00b0b56a274be218ca9c6d1c21e7ebef3461f30aaed087ef17d49a683993cbbd6f434d717e1c041fd857d9c7fbe579eae00c05e2557a7","ssdeep":"96:rGxcccHJ2mYX2TZ7+J2vrhhTKGJ2vrGsJ2vrwA:rGxe625+EhhTKGEGsET","tlshash":"1991c04cf9b1b06647b7a4f1022f140ae37ea55ce4ac6568a2c4e4f06cf540e9627f7c","first_seen":"2026-09-28T13:30:08.515925Z","last_seen":"2026-09-28T21:48:05.657943Z","times_seen":4,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.new-programmatic.com/userbind?src=moevideo\u0026id=4485bcbc44746aba6ba3","fqdn":"match.new-programmatic.com","domain":"new-programmatic.com","tld":"com"},"ip":{"addr":"217.65.2.150","port":443,"asn":3175,"as":"Citytelecom LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.800Z","timestamp":1790602147800,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"admanager.geniusgroup.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 09:00:26 GMT","end":"Mon, 09 Nov 2026 09:00:25 GMT"},"fingerprint":{"sha1":"E7:18:4C:39:97:C9:82:6A:EF:02:AC:87:EC:88:19:43:77:F3:D6:96","sha256":"07:07:27:57:70:92:BB:F4:10:83:7C:08:FD:A5:31:37:E0:86:E3:CF:10:2D:C0:5E:98:D4:47:9D:B0:40:5E:81"}}},"request":{"raw":"GET /userbind?src=moevideo\u0026id=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: match.new-programmatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.22.1\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nLocation: https://rtb.moe.video/cs?d=19\u0026b=\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":2,"connect":37,"send":0,"wait":39,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catsnetwork.ru/core/code.xml?pid=9956\u0026vr=1\u0026rid=4102313\u0026dl=_goo.su","fqdn":"catsnetwork.ru","domain":"catsnetwork.ru","tld":"ru"},"ip":{"addr":"194.186.91.197","port":443,"asn":3216,"as":"PVimpelCom","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.507Z","timestamp":1790602147507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catsnetwork.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 20:15:57 GMT","end":"Sun, 04 Oct 2026 20:15:56 GMT"},"fingerprint":{"sha1":"14:6E:5B:50:1E:B6:16:0D:28:82:93:D3:FD:D1:6F:9E:4D:5B:D1:21","sha256":"FD:74:06:6F:BD:F0:67:94:1E:D9:CE:5F:EC:F3:60:28:3E:51:3F:B0:31:19:72:E4:6E:CF:38:10:76:3E:5E:D6"}}},"request":{"raw":"GET /core/code.xml?pid=9956\u0026vr=1\u0026rid=4102313\u0026dl=_goo.su HTTP/1.1\r\nHost: catsnetwork.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-type: application/xml\r\ncontent-length: 12\r\ncache-control: no-cache, max-age=0, must-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Sep 2001 12:46:00 GMT\r\nreferrer-policy: origin-when-cross-origin\r\nset-cookie: idntfy=VUaZLX76QfBVjcU; expires=Thu, 25-Sep-2036 13:29:07 GMT; domain=catsnetwork.ru; path=/c/; SameSite=None; Secure\nidntfy=VUaZLX76QfBVjcU; expires=Thu, 25-Sep-2036 13:29:07 GMT; domain=catsnetwork.ru; path=/core/; SameSite=None; Secure\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":[{"name":"idntfy","value":"VUaZLX76QfBVjcU","quoted":false,"path":"/c/","domain":"catsnetwork.ru","expires":"2036-09-25T13:29:07Z","raw_expires":"Thu, 25-Sep-2036 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VUaZLX76QfBVjcU; expires=Thu, 25-Sep-2036 13:29:07 GMT; domain=catsnetwork.ru; path=/c/; SameSite=None; Secure"},{"name":"idntfy","value":"VUaZLX76QfBVjcU","quoted":false,"path":"/core/","domain":"catsnetwork.ru","expires":"2036-09-25T13:29:07Z","raw_expires":"Thu, 25-Sep-2036 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"idntfy=VUaZLX76QfBVjcU; expires=Thu, 25-Sep-2036 13:29:07 GMT; domain=catsnetwork.ru; path=/core/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":761,"mime_type":"application/xml","magic":"ASCII text, with no line terminators","md5":"4505b55b7589ee5cd8969000a2fdb03b","sha1":"61addaba90852636de97e269fa683ef57a17a491","sha256":"21b398232e73bcfb7e782233055a6fbc1dbb3faf8736e512c216329555da2529","sha512":"491f788f72a076f90b4c6fa5d2e0990fa529e237569f900ff0c7222093ae91fe49ba31f7d2f7d0c2431cbd6f00575bd12e4486b2c8319e414f38848d9c67ff83","ssdeep":"","tlshash":"d2600000cc000030c00c0c0c030000c300303000c00c003000000000003c000c030330","first_seen":"2023-05-04T07:22:55Z","last_seen":"2026-09-28T13:30:08.517057Z","times_seen":624,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":4,"connect":57,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/img/icons8-approbation.gif","fqdn":"wordpress-215141-0.cloudclusters.net","domain":"cloudclusters.net","tld":"net"},"ip":{"addr":"69.30.235.156","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/","date":"2026-09-28T13:29:10.452Z","timestamp":1790602150452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudclusters.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:50:81:B7:BB:22:38:4F:4B:9B:ED:80:17:7B:0D:10:5D:12:14:E0","sha256":"39:2C:99:47:7A:17:2B:DC:AA:CF:16:E3:7F:72:85:54:36:11:31:A4:D1:72:5D:DF:C6:B9:F9:40:AC:84:B8:46"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/knxs/img/icons8-approbation.gif HTTP/1.1\r\nHost: wordpress-215141-0.cloudclusters.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/\r\nCookie: PHPSESSID=6j2v9qrkg1l7viufee78e655ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 12874\r\nlast-modified: Mon, 21 Sep 2026 09:25:18 GMT\r\netag: \"496c-65bfad40f7b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18796,"size_decoded":13206,"mime_type":"image/gif","magic":"GIF image data, version 89a, 48 x 48","md5":"999e73a646a2105c7b7c320e13b1482c","sha1":"707e998e1ed2f8074c37bff4859e87af6c2265a4","sha256":"81424e84e6d74a283edb5570ac902aee2f8a3f649b7ea78861a614e245f5dfac","sha512":"da6aa4f970aff95a3bf7a86d658331a21f9c3ba074b2a6bf4f7295116ce1abb3fc278709828ebade7827686d4836f91326f676df41943704ba89464865d13185","ssdeep":"384:Z20YCnuHf89VPXAfNCn93h805QIN5jrapFRFulXdNcd2:ZxYCn289pGAn9R8uhapFRF6N","tlshash":"7082bfbde4852238f8dc7b7859455a6f62b0e582e601e09e5f352843b6222af473433b","first_seen":"2026-06-17T20:06:26.345893Z","last_seen":"2026-09-28T13:30:08.517614Z","times_seen":22,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=1942412132\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A05.925%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A968%2C%22top%22%3A0%2C%22req_no%22%3A1%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqp\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=2\u0026bids=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%3D\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.932Z","timestamp":1790602145932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=1942412132\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A05.925%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A968%2C%22top%22%3A0%2C%22req_no%22%3A1%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqp\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=2\u0026bids=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%3D\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: pu=5647879041790602144; pi=OIc2RvspHyNvfPYCWYF0v54FciJ1CKoQMMxu+t7a1G5zqJCklKk89INv7QeyyTYTGc120SaVucSYL6p3eH8U+1s0Vs4=; i=8nakhEzH3NABQAxYyV5IR2jcwlwJkQ0OBdUIYtowcpv0NitGaIO2VDt4JbPAq+cK3WVvT3CD/vUKG0ywaxf7nO2sFiM=; yandexuid=1492042901790602144; yashr=9212708401790602144; bh=YKDX6dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ntiming-allow-origin: *\r\nx-ads-degradation: 0.000000\r\nx-ads-loadaverage: 0.230769\r\naccess-control-allow-origin: https://goo.su\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nx-yandex-req-id: 1790602145949627-15610061988028173734-balancer-l7leveler-kubr-yp-sas-155-BAL\r\nx-content-type-options: nosniff\r\nx-adfox-request-id: 6202835977420762603\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\nexpires: Mon, 04 Dec 1999 21:29:02 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\ncontent-type: application/json\r\np3p: policyref=/w3c/w3c.p3p, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nx-yt-trace-id: 0-1-0-0\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-yt-request-id: 45f57b2f-6f6cb0bd-fa29793b-70de1f3e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":171,"size_decoded":1486,"mime_type":"application/json","magic":"JSON text data","md5":"a3e8242ebef9b6d65f35e4a9a9d1ee27","sha1":"68ac5d403e375d9c269aaca2943c5aa4a02dfc94","sha256":"7256b139340d3d4d52d329b63c44b948f2871b41c81e5992ad4133f1bc054f80","sha512":"c0592bd2a3dba2f603946e32d9aaa7ff92d335f9f1b34ce18f732e1ce12f4c7ff4c0d988fcc17d4da4098b89829104ab81b5e9f1242dda616b5d4781144c15ab","ssdeep":"","tlshash":"b4c08c09a90a7ab20d8ace1a161ce990d7e8b448d0080e8920ced08d0f8e2afaa05834","first_seen":"2026-09-28T13:30:08.522891Z","last_seen":"2026-09-28T13:30:08.522891Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-64YFP720ET\u0026cx=c\u0026gtm=4e69o0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.086Z","timestamp":1790602136086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-64YFP720ET\u0026cx=c\u0026gtm=4e69o0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\nexpires: Mon, 28 Sep 2026 13:28:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176598\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":528150,"size_decoded":177182,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"05301dc3c895c152af131b0e3a3953b1","sha1":"04cf5c9eeadccfeb1675a7af1b91be89c5df9855","sha256":"d90c5c3023314adf80e01fadc86d234a7db15a9d7b13d42575178e7a08dadd42","sha512":"4bdf6c524fe1045edeb22ff16d92ee4f49b33d352372bf31fcdeba2a228ce3411b37619b6e408ac5d022bfd0c958c344794f4903272de8486a766a32d4cc1dd0","ssdeep":"6144:Pewp4YH7Bzn5ceZqhLRIzECIcW3sVbEbzE8U3SLoJfjXSyoGLxs5Mo/9:pH7Bz5iCzA3sVNJ7PtxK","tlshash":"10b4f7cd73ca742293a6f178903f01cba57b29a2b45cc89af289dce42d3455a5163f7c","first_seen":"2026-09-28T13:30:08.523934Z","last_seen":"2026-09-28T13:30:08.523934Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.q-bid.ru/match?ssp=moevideobanner\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D48%26b%3D%7Buid%7D","fqdn":"sp.q-bid.ru","domain":"q-bid.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.821Z","timestamp":1790602147821,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /match?ssp=moevideobanner\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D48%26b%3D%7Buid%7D HTTP/1.1\r\nHost: sp.q-bid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/check?uid=4485bcbc44746aba6ba3\u0026ssp=moevideo","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.042Z","timestamp":1790602148042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspend.space","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 06:33:12 GMT","end":"Wed, 02 Dec 2026 06:33:11 GMT"},"fingerprint":{"sha1":"02:E1:79:5F:0F:A5:27:DE:F0:21:0D:B2:79:2C:01:A4:D9:52:58:8D","sha256":"30:5F:15:99:91:53:66:CE:4A:93:DE:33:0D:98:92:C3:1D:9A:76:71:08:7A:A5:40:8B:CC:F2:83:E1:FF:E9:EA"}}},"request":{"raw":"GET /check?uid=4485bcbc44746aba6ba3\u0026ssp=moevideo HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: as-user=737f1063-7629-40f3-b439-1f20d379af76\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.26.2\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 332\r\nlocation: https://x01.aidata.io/0.gif?pid=6472613\u0026id=737f1063-7629-40f3-b439-1f20d379af76\u0026dest=https%3A%2F%2Fprodmp.ru%2Fadspend-sync.gif%3Fdsp_provider_id%3D2%26uid%3D737f1063-7629-40f3-b439-1f20d379af76%26r%3Dhttps%253A%252F%252Frtb.moe.video%252Fcs%253Fd%253D13%2526b%253D737f1063-7629-40f3-b439-1f20d379af76\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=67\u0026b=sm_0pe-xKPD4M9a\u0026sd=1\u0026sv=625","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.107Z","timestamp":1790602148107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=67\u0026b=sm_0pe-xKPD4M9a\u0026sd=1\u0026sv=625 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=42\u0026b=dvsjvrsgdr6gw---1","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.125Z","timestamp":1790602148125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=42\u0026b=dvsjvrsgdr6gw---1 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/mytarget/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.242Z","timestamp":1790602148242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /mytarget/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155; user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:08 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://ad.mail.ru/cm.gif?p=171\u0026id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/common-engine.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.511Z","timestamp":1790602136511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 00:55:23 GMT","end":"Sun, 11 Oct 2026 00:55:22 GMT"},"fingerprint":{"sha1":"98:EF:3B:71:24:08:A4:ED:08:03:3E:4D:18:F2:FF:23:B2:67:BF:B0","sha256":"A8:B1:58:DC:E8:FE:F3:F7:97:DB:C2:A8:18:A9:77:2A:F1:E7:1C:A3:B5:2E:0B:BD:A1:D1:CD:FF:1E:F9:D9:20"}}},"request":{"raw":"GET /wrapper/js/common-engine.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn-c.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=259200\r\netag: W/\"c8b4e50e8a93f53f3da1e6c2c81071a8\"\r\nlast-modified: Thu, 17 Sep 2026 09:06:15 GMT\r\nx-amz-request-id: af7b020fcfffbbe0\r\ncontent-encoding: gzip\r\nx-cdn-request-id: d9d568764404551761bb4b3c6ebed86a\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534921,"size_decoded":133297,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c8b4e50e8a93f53f3da1e6c2c81071a8","sha1":"fbde8d60b7329a133685bc7c0abfc2bc5bf23e6c","sha256":"2f7cc76aa24ab3156c5f295061735ae333e4045ce80522cd645850e980723b34","sha512":"0f78743dc2d24c14fdcb302f733c0621acf319bdb7162e10fd0032e517971141d169a459a870da898a0ce4172ce31224a78ec20ca54e3f69abbb2491eb8194e9","ssdeep":"12288:SeFojtE5KMM4H1zX4G9szIlUa7+tV+hDHdEERk4iDDhfr+xPRgj8J1JX16ob0+tW:SMojtE5KQH1UqlUa7+tV4D9EERk4wDh5","tlshash":"d2b429aaba6230b3025e616e903f260577327a51710cd424719ee0ed67bed8d1367fbc","first_seen":"2026-09-20T19:28:13.550721Z","last_seen":"2026-09-28T16:35:59.852626Z","times_seen":9,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":3,"connect":33,"send":0,"wait":19,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.402Z","timestamp":1790602145402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-edc4844f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3901\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nlast-modified: Tue, 22 Sep 2026 17:38:01 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nexpires: Wed, 27 Sep 2056 20:02:52 GMT\r\netag: \"74e142b51efbff939eae6faefe2ab015\"\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 9\r\nx-request-id: d7d6700f4cab132f\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9291,"size_decoded":4795,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9261)","md5":"cbdbe8d2df2e35c10b3e74c4db234642","sha1":"0b97786e6d44be29eee2b66b284a19367efe8492","sha256":"6f51ca58fa7ace48c9208200af7dfe54b050f33ce1de67595558d73a47bef057","sha512":"689c535b09d2d4b2f4a990966fb4c1fe49233c4d80d53bb377e0db30f4550dba2d71fb622f91f7da79e07b052955c80105c8c4177f12233cc3c509d3e21357f7","ssdeep":"192:OKtzpZx3LtRxJKEJ0jgrjtEBol6nRPlqfYoxcP6iYox7S7L4M8OAXY:OKRXRyEJ08ruoUnR9qwgcug7S7sMXAXY","tlshash":"e412a9f432a1b8d411fb69d1086f1577017e7e06b80e295f872299d2ad244ce60f6fee","first_seen":"2026-09-23T08:35:42.861568Z","last_seen":"2026-09-29T00:03:44.687221Z","times_seen":293,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=1230107364\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A06.036%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A12%2C%22top%22%3A807%2C%22req_no%22%3A2%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqq\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=3\u0026bids=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\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:06.042Z","timestamp":1790602146042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=1230107364\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A06.036%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A12%2C%22top%22%3A807%2C%22req_no%22%3A2%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqq\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=3\u0026bids=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\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: pu=5647879041790602144; pi=OIc2RvspHyNvfPYCWYF0v54FciJ1CKoQMMxu+t7a1G5zqJCklKk89INv7QeyyTYTGc120SaVucSYL6p3eH8U+1s0Vs4=; i=8nakhEzH3NABQAxYyV5IR2jcwlwJkQ0OBdUIYtowcpv0NitGaIO2VDt4JbPAq+cK3WVvT3CD/vUKG0ywaxf7nO2sFiM=; yandexuid=1492042901790602144; yashr=9212708401790602144; bh=YKDX6dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nx-yt-trace-id: 0-1-0-0\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Mon, 04 Dec 1999 21:29:02 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\naccess-control-allow-credentials: true\r\np3p: policyref=/w3c/w3c.p3p, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nx-xss-protection: 1; mode=block\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nx-adfox-request-id: 13964421390895800226\r\npragma: no-cache\r\nx-yandex-req-id: 1790602146060097-13194442687755299727-balancer-l7leveler-kubr-yp-sas-155-BAL\r\ncontent-type: application/json\r\nx-ads-loadaverage: 0.571429\r\nx-yt-request-id: fa7b97a7-f8401a33-8f1fa35c-916a54af\r\ntiming-allow-origin: *\r\nx-ads-degradation: 0.000000\r\naccess-control-allow-origin: https://goo.su\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":171,"size_decoded":1486,"mime_type":"application/json","magic":"JSON text data","md5":"3f1570851733695181aac9a6f7652f7f","sha1":"bc977a5b25b107a7aa47449f5180c06faba40cfd","sha256":"47bdf025cf7672f56ab1849642c6d42fef9099af819ffa793c382d74fa2ca00d","sha512":"a53cd30cf91ebe0af8a3b8354b538b59773126666530e656a0ddb714fc9edecaf458ec647298fb50d2ec154949354a18ef7356f977064c19b86707fe68676bea","ssdeep":"","tlshash":"49c08005e50675b20c85ce160618e450d7d47444d01c0d4920ced0c80f4f1df5501838","first_seen":"2026-09-28T13:30:08.526202Z","last_seen":"2026-09-28T13:30:08.526202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"klkmdsync.site/MtpTLscxt9s3UUA2","fqdn":"klkmdsync.site","domain":"klkmdsync.site","tld":"site"},"ip":{"addr":"199.68.197.20","port":443,"asn":1426,"as":"LIGHTWAVENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.832Z","timestamp":1790602147832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"klkmdsync.site","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 07:15:33 GMT","end":"Wed, 18 Nov 2026 07:15:32 GMT"},"fingerprint":{"sha1":"E1:B8:80:20:CA:26:A5:53:EE:FD:A5:BC:31:57:DF:FF:FA:77:6D:CD","sha256":"6E:CD:BF:55:99:51:E7:58:CE:53:D4:45:44:67:9C:F3:03:5A:90:F4:BC:9D:8E:43:48:56:83:48:42:02:A4:54"}}},"request":{"raw":"GET /MtpTLscxt9s3UUA2 HTTP/1.1\r\nHost: klkmdsync.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 95\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nlocation: https://rtb.moe.video/cs?d=60\u0026b=000c5181-7232-4f43-8f19-d262dfab2510\r\npragma: no-cache\r\nset-cookie: uid=000c5181-7232-4f43-8f19-d262dfab2510; Path=/; Domain=klkmdsync.site; Max-Age=31536000; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"000c5181-7232-4f43-8f19-d262dfab2510","quoted":false,"path":"/","domain":"klkmdsync.site","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"uid=000c5181-7232-4f43-8f19-d262dfab2510; Path=/; Domain=klkmdsync.site; Max-Age=31536000; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":123,"dns":0,"connect":40,"send":0,"wait":39,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_out?id=%24%7BUSER_ID%7D\u0026chk=1","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.943Z","timestamp":1790602147943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_out?id=%24%7BUSER_ID%7D\u0026chk=1 HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nset-cookie: pid=NzdiNWM2NmI1YTc2N2Q5Ng; expires=Tue, 28 Mar 2028 13:29:07 GMT; domain=.adsp.io; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"NzdiNWM2NmI1YTc2N2Q5Ng","quoted":false,"path":"/","domain":".adsp.io","expires":"2028-03-28T13:29:07Z","raw_expires":"Tue, 28 Mar 2028 13:29:07 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=NzdiNWM2NmI1YTc2N2Q5Ng; expires=Tue, 28 Mar 2028 13:29:07 GMT; domain=.adsp.io; path=/; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":375,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-09-28T22:06:41.731091Z","times_seen":43220,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=19\u0026b=","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.980Z","timestamp":1790602147980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=19\u0026b= HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/b1e2874bbe2d033a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:06.576Z","timestamp":1790602146576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306891/b1e2874bbe2d033a.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:06 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3456\r\ncontent-encoding: br\r\nexpires: Wed, 27 Sep 2056 19:40:10 GMT\r\netag: \"2ba1334fea0895e2a2230018080a116a\"\r\ncache-control: public, max-age=946708560\r\nlast-modified: Fri, 25 Sep 2026 15:48:18 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nx-strm-log-split: 0\r\nx-request-id: 0cd493fd5da529db\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12817,"size_decoded":4350,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12784)","md5":"5eca467590c977848effafa9c5f0b35b","sha1":"d5bde57768574d6cebf4fdc50b5dbfbf145edd12","sha256":"cc17e78fb4e5bd94cd182619d76967e2fba152b06d710bf364af1219bfa2f743","sha512":"4f9478a958067ac130e576f13623e6d1c3e8fc9b6a365b7acb848f4f0e8688f40bd938694ee6714c91b05e4b11542dce9671866255924af351727f05f0ee1b46","ssdeep":"192:kjF4De2ABy72SyAEQ4m2Bx7y1MpjRo6xMrkxC+xfZGK+WRAOz:kjmp2yCzaGx7y1GjverkxKEAO","tlshash":"8242c9c9faa1b47142ea50e6407f0a0ab32db50e1419d418b65cd9d26ff8c4f6136b3d","first_seen":"2026-09-28T09:40:38.826225Z","last_seen":"2026-09-28T15:08:42.224901Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-v.skcrtxr.com/wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=goo.su","fqdn":"cdn-v.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.490Z","timestamp":1790602147490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 00:55:23 GMT","end":"Sun, 11 Oct 2026 00:55:22 GMT"},"fingerprint":{"sha1":"98:EF:3B:71:24:08:A4:ED:08:03:3E:4D:18:F2:FF:23:B2:67:BF:B0","sha256":"A8:B1:58:DC:E8:FE:F3:F7:97:DB:C2:A8:18:A9:77:2A:F1:E7:1C:A3:B5:2E:0B:BD:A1:D1:CD:FF:1E:F9:D9:20"}}},"request":{"raw":"GET /wrapper/vpaid.xml?id=3b87ab75-56ea-4bab-89d4-978e4800d3b1\u0026rxt-host=goo.su HTTP/1.1\r\nHost: cdn-v.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-type: text/xml; charset=utf-8\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://goo.su\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-cdn-request-id: 2088ac35250277b034d41270e589f6fe\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2955,"size_decoded":1439,"mime_type":"text/xml; charset=utf-8","magic":"ASCII text, with very long lines (499)","md5":"9d003d3042b719c6245cdadf54e58312","sha1":"ede7086db3d11329b0c6de5e65c7de876e691bd3","sha256":"172abd2dccafa66dbb98cde111cf6712305791acd588ca70b3f7fb79a0af3813","sha512":"317b711bf84f4200b563f3ddd299ff6a1cf3af0a1fdabe963135cb8c61724633d3535654c61ec2237153ee238471de5be3b7837ad26738fe627b74a2344567d2","ssdeep":"","tlshash":"c851acb701ed6cb90d9500dc7a91f78443ff0cff2b9085a6f0378ca59201d63b9251a8","first_seen":"2026-09-28T13:30:08.530874Z","last_seen":"2026-09-28T13:30:08.530874Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":46,"connect":34,"send":0,"wait":34,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp.q-bid.ru/match?ssp=moevideovideo\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D49%26b%3D%7Buid%7D","fqdn":"sp.q-bid.ru","domain":"q-bid.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.822Z","timestamp":1790602147822,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /match?ssp=moevideovideo\u0026location=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D49%26b%3D%7Buid%7D HTTP/1.1\r\nHost: sp.q-bid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssp-asr.digitalcaramel.com/yhb","fqdn":"ssp-asr.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.278Z","timestamp":1790602145278,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /yhb HTTP/1.1\r\nHost: ssp-asr.digitalcaramel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1047\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.digitalcaramel.com/caramel.js?ts=1790602135846","fqdn":"ads.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.848Z","timestamp":1790602135848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.digitalcaramel.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 12:54:52 GMT","end":"Sun, 20 Dec 2026 12:54:51 GMT"},"fingerprint":{"sha1":"28:D6:5D:30:44:12:45:58:7C:6A:E9:36:1A:2B:56:83:0A:3C:89:48","sha256":"BD:22:C2:92:75:81:9B:FC:D3:B3:97:B9:86:C3:10:18:B4:66:9F:88:AA:B2:E1:1E:7F:3C:F3:6E:DF:0B:50:E8"}}},"request":{"raw":"GET /caramel.js?ts=1790602135846 HTTP/1.1\r\nHost: ads.digitalcaramel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 174710\r\nlast-modified: Thu, 24 Sep 2026 12:34:19 GMT\r\netag: \"6ab518cb-2aa76\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';\r\npermissions-policy: interest-cohort=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: DENY\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174710,"size_decoded":175309,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"d4208e8c895920ee636734c5a070a7c1","sha1":"49b7b9765815a4c971404219de2bff676e0b9b3f","sha256":"dca75c9c2797dbefbcf2c191560197ad2d860788055a1aa54460d3de61e0c5da","sha512":"345519ac1ab243d2854d9de24844286aa742ed39a1ca3f29fbfcf3ee799171792eb639035d21cafefd7cea164d977aed997be76d47565a1cb80503c4d837e6e7","ssdeep":"1536:BUQRHz2RWww8cNUMv06TCOEhbi6lCtDole7ASIRPULAB4xzbAeXT6S:qM/UMbTCOE6OlGa8ZGS","tlshash":"0404fa89ffa1b03142e760ad516b470ab33a7609b8054478b55dc8d62b7cd4fa223fbd","first_seen":"2026-09-25T00:39:36.241984Z","last_seen":"2026-09-28T16:35:59.830526Z","times_seen":9,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":66,"connect":13,"send":0,"wait":26,"receive":27,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otclick-adv.ru/core/match.gif?ssp=54\u0026tag=moevideo\u0026reference=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D26%26b%3D%7Bvisitor_id%7D","fqdn":"otclick-adv.ru","domain":"otclick-adv.ru","tld":"ru"},"ip":{"addr":"139.45.228.133","port":443,"asn":57304,"as":"JSC RetnNet","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.805Z","timestamp":1790602147805,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.otclick-adv.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 15 Sep 2025 18:16:14 GMT","end":"Sat, 17 Oct 2026 18:16:13 GMT"},"fingerprint":{"sha1":"AC:7F:37:A5:93:0B:F1:5C:17:8C:E2:05:1C:18:98:EB:54:71:45:A1","sha256":"D0:29:C5:21:78:51:6F:01:ED:DC:C3:B6:AA:53:D9:5F:7B:59:04:97:33:EE:31:F7:62:1A:DE:FA:03:83:F2:F9"}}},"request":{"raw":"GET /core/match.gif?ssp=54\u0026tag=moevideo\u0026reference=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D26%26b%3D%7Bvisitor_id%7D HTTP/1.1\r\nHost: otclick-adv.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: idntfy=VSWGrO4QG5lxNPj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 124\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nP3P: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nCache-Control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thursday, 01-Jan-1970 00:00:00 GMT\r\nLocation: https://rtb.moe.video/cs?d=26\u0026b=VSWGrO4QG5lxNPj\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_out?id=${USER_ID}","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.820Z","timestamp":1790602147820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_out?id=${USER_ID} HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adsp.io/match/mv_out?id=%24%7BUSER_ID%7D\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":36,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.programmatica.com/match/MoeVideo?id=4485bcbc44746aba6ba3\u0026chk=1","fqdn":"sync.programmatica.com","domain":"programmatica.com","tld":"com"},"ip":{"addr":"77.246.157.45","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:09.196Z","timestamp":1790602149196,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/MoeVideo?id=4485bcbc44746aba6ba3\u0026chk=1 HTTP/1.1\r\nHost: sync.programmatica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:09 GMT\r\ncontent-length: 0\r\nlocation: https://cm-ssp.voxexchange.io/Sync/dsp-callback/696e3ec2810d9896b09e8099?evid=MmJjOTVjNjA5OGJmNDdlNw\r\nset-cookie: pid=MmJjOTVjNjA5OGJmNDdlNw; expires=Tue, 28 Mar 2028 13:29:09 GMT; domain=.programmatica.com; path=/; secure; SameSite=None\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: PUT,GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"MmJjOTVjNjA5OGJmNDdlNw","quoted":false,"path":"/","domain":".programmatica.com","expires":"2028-03-28T13:29:09Z","raw_expires":"Tue, 28 Mar 2028 13:29:09 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=MmJjOTVjNjA5OGJmNDdlNw; expires=Tue, 28 Mar 2028 13:29:09 GMT; domain=.programmatica.com; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/frontend/js/redirect.js?id=399eaf833ac5f607b305c4ace0c25eb5","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.720Z","timestamp":1790602135720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.goo.su","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 11 Dec 2025 10:48:38 GMT","end":"Tue, 12 Jan 2027 10:48:37 GMT"},"fingerprint":{"sha1":"82:23:C9:6D:49:3E:29:B7:9C:36:14:B9:ED:0A:9E:A3:65:76:C3:28","sha256":"F1:CA:E0:D3:1C:F2:4E:10:20:7C:D4:A4:34:EB:7B:2B:3E:3C:8C:FA:D9:C7:CA:35:CD:07:AF:07:82:79:4F:56"}}},"request":{"raw":"GET /frontend/js/redirect.js?id=399eaf833ac5f607b305c4ace0c25eb5 HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/hbXzr/\r\nCookie: __ddg8_=McNtuYAzoJSc5Uhm; __ddg10_=1790602135; __ddg9_=91.90.42.154; __ddg1_=MSKzL279oKdTtqzpDTkX; block_ads=1; XSRF-TOKEN=LG7xcmUa65wL95by9tbZEiUZaqgUP7DLwr1VW3jR; goosu_session=jakJC1Yh5ltD470y5cCe5CthFnq8ASl1jdWIJO3s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fHcWAIQAab2h6XfY; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:04 GMT\n__ddg10_=1790602144; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:04 GMT\n__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:04 GMT\r\ndate: Sun, 27 Sep 2026 18:01:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:07:03 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30328\r\nddg-cache-status: HIT,HIT\r\netag: \"688b7887-156eb\"\r\nexpires: Mon, 28 Sep 2026 21:46:13 GMT\r\nage: 70049\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"fHcWAIQAab2h6XfY","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:04Z","raw_expires":"Mon, 28-Sep-2026 13:49:04 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=fHcWAIQAab2h6XfY; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:04 GMT"},{"name":"__ddg10_","value":"1790602144","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:04Z","raw_expires":"Mon, 28-Sep-2026 13:49:04 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1790602144; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:04 GMT"},{"name":"__ddg9_","value":"91.90.42.154","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:04Z","raw_expires":"Mon, 28-Sep-2026 13:49:04 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:04 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":87787,"size_decoded":30996,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65468)","md5":"399eaf833ac5f607b305c4ace0c25eb5","sha1":"07a18a0a451b4dde777bac1e148bb8062ca05f05","sha256":"9ac92dd22b771410a6944726d1ed1fd7a7faaf239c2d80eab0bc1233e6ce95d2","sha512":"986f60e07a6b6084b72807785804f77f4aa04b727951edd0d3a394d2a493eb95f5c774ad93d25b9b80c3abe0a3a63df6940472577ae4889ded92565f8d4da38d","ssdeep":"1536:Sqeo1GzGM+7TWaxsZGSJRgO1vVakaGSUUMOE6MLBvhTut5TEm3/f3CfxYgPDK:SrfgOjaAv/TutVtAYgrK","tlshash":"ba8309ddb2cab06347a770ba407f550bf236199d684d8400f115e8e9bc78a4a923bf7d","first_seen":"2025-02-06T20:23:39.270815Z","last_seen":"2026-09-28T13:30:08.532335Z","times_seen":1444,"resource_available":true,"data":null}},"time_used":9122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9055,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TRGNQBDL","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.860Z","timestamp":1790602135860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtm.js?id=GTM-TRGNQBDL HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 28 Sep 2026 13:28:55 GMT\r\nexpires: Mon, 28 Sep 2026 13:28:55 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 28 Sep 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123557\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354076,"size_decoded":124207,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5041)","md5":"2e703a561640dc0c45948838a4526816","sha1":"b370a5d64df714c4ac219cd6cfd4d55bf66f3643","sha256":"5fb4127ac5a9c09ed1fca6ad4b5f67db8e90a27f2399f164d0039744afe2268c","sha512":"bab3a700976eb3bb1e64a60f2179ba45f08edfbb4828a8f80a93b54918471b8bab28dbd2cb6e08df3130753b32b515f29c558f3bce7fc5d5224c084cd98dc094","ssdeep":"6144:awp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLC9/Sd9:NvKE63sV794","tlshash":"fa7408ccb7d6b42283a3b574503f018bb27a6992b84cc898f286edd42d7465a4177f7c","first_seen":"2026-09-28T13:30:08.532911Z","last_seen":"2026-09-28T13:30:08.532911Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":3,"connect":14,"send":0,"wait":40,"receive":41,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/sync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026external_id=4485bcbc44746aba6ba3","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.826Z","timestamp":1790602147826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:45:37 GMT","end":"Sun, 13 Dec 2026 13:45:36 GMT"},"fingerprint":{"sha1":"C1:28:84:D9:3C:21:08:3C:B4:D3:58:6A:79:07:F5:53:5F:F5:90:1F","sha256":"5C:EC:53:1B:2B:EC:3C:74:85:A8:66:B3:11:FF:9E:47:EE:35:42:9E:1C:41:CF:82:F9:6A:14:44:75:AA:59:7D"}}},"request":{"raw":"GET /sync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026external_id=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.20.1\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nset-cookie: smi_uid=rHiRElIds; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"smi_uid","value":"rHiRElIds","quoted":false,"path":"/","domain":".pxltag.com","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"smi_uid=rHiRElIds; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":392,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":100,"dns":0,"connect":53,"send":0,"wait":104,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://sqmodq.moe.video/?v=v1.50.60\u0026p=12332\u0026i=1\u0026s=10\u0026r=aHR0cHM6Ly9nb28uc3UvaGJYenIv\u0026u=0373180a78a11b17570c\u0026l=en","fqdn":"sqmodq.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"155.212.215.69","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:10.014Z","timestamp":1790602150014,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /?v=v1.50.60\u0026p=12332\u0026i=1\u0026s=10\u0026r=aHR0cHM6Ly9nb28uc3UvaGJYenIv\u0026u=0373180a78a11b17570c\u0026l=en HTTP/1.1\r\nHost: sqmodq.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://goo.su\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2hQrOhzptGtQKqJciWzdSw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Accept: 6b7U0oQ5qbLQ1kEMgOSAwhOewT0=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\nV: v1.37.57\r\nSet-Cookie: uid=4485bcbc44746aba6ba3; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:10 GMT; Secure; SameSite=None\ncid=0373180a78a11b17570c; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:10 GMT; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":[{"name":"uid","value":"4485bcbc44746aba6ba3","quoted":false,"path":"/","domain":"moe.video","expires":"2027-09-19T13:29:10Z","raw_expires":"Sun, 19 Sep 2027 13:29:10 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid=4485bcbc44746aba6ba3; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:10 GMT; Secure; SameSite=None"},{"name":"cid","value":"0373180a78a11b17570c","quoted":false,"path":"/","domain":"moe.video","expires":"2027-09-19T13:29:10Z","raw_expires":"Sun, 19 Sep 2027 13:29:10 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"cid=0373180a78a11b17570c; Path=/; Domain=moe.video; Expires=Sun, 19 Sep 2027 13:29:10 GMT; Secure; SameSite=None"}],"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":0,"dns":159,"connect":205,"send":0,"wait":50,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.713Z","timestamp":1790602135713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Roboto:400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 28 Sep 2026 13:28:55 GMT\r\ndate: Mon, 28 Sep 2026 13:28:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":2202,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"dfa65fcd6017ba2c1cf093c705e2c975","sha1":"305ddf2fa610a798dcb5c26c4cefae17edb092de","sha256":"55765d8b683a0ce25e43363f56ebd29632716d24c60cecf5dea499f86e124b68","sha512":"5abd0edeab527f3aec1620eda46530d18723204d76c835b4c23dbcb5fd913c4a37ae099ecf7a176c461da4fe6793d088456427d1d0fa46ed1c4e6e56020cab36","ssdeep":"96:1OEbaNslOEbaN3FZKOEbaNTOEbaNoTOEbaNEy+aZjzBrgOEbaNfubqGIFuV4yOEd:2NsmNRNkNokNEqbN2bqGIwV4BNCNCwNX","tlshash":"66c10e91041704409b834cd227ce7f35fe1f92116145d0b9ebfc9b6b9debda6426835e","first_seen":"2026-02-19T23:10:15.778009Z","last_seen":"2026-09-28T23:29:18.89658Z","times_seen":20334,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":34,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/vas-bundles/bundles-es2017/loader.bundle.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.135Z","timestamp":1790602145135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306891/vas-bundles/bundles-es2017/loader.bundle.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 235052\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\netag: \"9027979d46ac935013ae00c41792885a\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nlast-modified: Fri, 25 Sep 2026 15:48:19 GMT\r\ncache-control: public, max-age=946708560\r\nexpires: Wed, 27 Sep 2056 19:09:07 GMT\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 2\r\nx-request-id: 88588e48f2fc4968\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1051908,"size_decoded":235948,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65483)","md5":"8f582f3650570b387b51a1da6d4c038d","sha1":"036b886476f8c3422e0ad5c9fcf8ffe134d7ebed","sha256":"c363916fdcf234367f73ae7deffd63564f921b049a1a04cd3ca3664de238e303","sha512":"e023cb8e8d9a2051c85eca8863138a1cbd390c89633c3ade8c43cdd1740f1276aa5c84e8f930cdc5a1a48a749fdc71895fc074f9ad61dda9ea9314697f9fa458","ssdeep":"24576:X2hrGP5vc6RBPoKjjyvr6hFE34opYeMaZv3kiQ9mAVjOffMgo8+P4wdqnsZU5Jfy:X2h1hIB2d7meBup9gXEB","tlshash":"cb254be97292b07943c790d4c43f051aa2386985680c412cf9b9ecd7a4dbe8d6376fbd","first_seen":"2026-09-28T09:08:36.283286Z","last_seen":"2026-09-28T17:59:52.38093Z","times_seen":4,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":2,"connect":13,"send":0,"wait":16,"receive":36,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adspend.space/moevideo?uid=4485bcbc44746aba6ba3","fqdn":"sync.adspend.space","domain":"adspend.space","tld":"space"},"ip":{"addr":"5.189.234.229","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.795Z","timestamp":1790602147795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspend.space","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 06:33:12 GMT","end":"Wed, 02 Dec 2026 06:33:11 GMT"},"fingerprint":{"sha1":"02:E1:79:5F:0F:A5:27:DE:F0:21:0D:B2:79:2C:01:A4:D9:52:58:8D","sha256":"30:5F:15:99:91:53:66:CE:4A:93:DE:33:0D:98:92:C3:1D:9A:76:71:08:7A:A5:40:8B:CC:F2:83:E1:FF:E9:EA"}}},"request":{"raw":"GET /moevideo?uid=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: sync.adspend.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.26.2\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 71\r\nlocation: /check?uid=4485bcbc44746aba6ba3\u0026ssp=moevideo\r\nset-cookie: as-user=737f1063-7629-40f3-b439-1f20d379af76; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, authorization\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"as-user","value":"737f1063-7629-40f3-b439-1f20d379af76","quoted":false,"path":"/","max_age":2592000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"as-user=737f1063-7629-40f3-b439-1f20d379af76; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":3,"connect":49,"send":0,"wait":54,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=mvvideo","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.812Z","timestamp":1790602147812,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cm?ssp=mvvideo HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/moevideo_outstream/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.802Z","timestamp":1790602147802,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /moevideo_outstream/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155; user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://rtb.moe.video/cs?d=22\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":54,"send":0,"wait":107,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/img/Sans.png","fqdn":"wordpress-215141-0.cloudclusters.net","domain":"cloudclusters.net","tld":"net"},"ip":{"addr":"69.30.235.156","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/","date":"2026-09-28T13:29:10.451Z","timestamp":1790602150451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudclusters.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:50:81:B7:BB:22:38:4F:4B:9B:ED:80:17:7B:0D:10:5D:12:14:E0","sha256":"39:2C:99:47:7A:17:2B:DC:AA:CF:16:E3:7F:72:85:54:36:11:31:A4:D1:72:5D:DF:C6:B9:F9:40:AC:84:B8:46"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/knxs/img/Sans.png HTTP/1.1\r\nHost: wordpress-215141-0.cloudclusters.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/\r\nCookie: PHPSESSID=6j2v9qrkg1l7viufee78e655ff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4538\r\nlast-modified: Mon, 21 Sep 2026 09:25:18 GMT\r\netag: \"11a3-65bfad40f7b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4515,"size_decoded":4869,"mime_type":"image/png","magic":"PNG image data, 494 x 102, 8-bit colormap, non-interlaced","md5":"b751b3dbd0f21e93ed71f247e6bd2625","sha1":"a40616dc922bb5cf7c8b57f1831f0ec5157f54cf","sha256":"2d89e384577123798498f6539f81abae7a7ec30285f79255a2d2a5260e261e13","sha512":"bccdeec2e4fe5ef45d7f9f2abb682afaf27e53b21366bbffe708d9a3b940d119d2f8e1a83cea8a8fa9886d766ac797a73e50305417188b61f2afd7b9a5551329","ssdeep":"96:7VexsqDavHCVVbvsgl++MgCwW6R2qaTsYiTQGu6ZirWKxN9kRc+:ZvHSzXHMSW6ROAYiTQACnk","tlshash":"58919dd8105ec19b952de60ed47c6342ee3ab12a87c45a33d9e0b23d4d1866b67f3217","first_seen":"2026-06-17T16:13:22.631922Z","last_seen":"2026-09-28T13:30:08.535484Z","times_seen":33,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.programmatica.com/match/MoeVideo?id=4485bcbc44746aba6ba3","fqdn":"sync.programmatica.com","domain":"programmatica.com","tld":"com"},"ip":{"addr":"77.246.157.45","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.799Z","timestamp":1790602147799,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /match/MoeVideo?id=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: sync.programmatica.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:09 GMT\r\ncontent-length: 0\r\nlocation: https://sync.programmatica.com/match/MoeVideo?id=4485bcbc44746aba6ba3\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: PUT,GET,POST,OPTIONS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"match.ohmy.bid/cm?ssp=mvban","fqdn":"match.ohmy.bid","domain":"ohmy.bid","tld":"bid"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.813Z","timestamp":1790602147813,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cm?ssp=mvban HTTP/1.1\r\nHost: match.ohmy.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=14\u0026b=8bb8e51b-ba04-4c7d-8258-9dd11baffbfc","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.868Z","timestamp":1790602147868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=14\u0026b=8bb8e51b-ba04-4c7d-8258-9dd11baffbfc HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":164,"dns":0,"connect":36,"send":0,"wait":45,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@2.x.x/dist/alpine.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:55.715Z","timestamp":1790602135715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/alpinejs@2.x.x/dist/alpine.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:28:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8824\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.8.2\r\nx-jsd-version-type: version\r\netag: W/\"695b-tHfyZigAkBKyAth11Sq08uXIoiE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220121-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 21497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUFsC2n556UUxSz52qtdHGB%2BQDB4HdXkhKke%2FA0mNno26Pq81qlY4DnDzObUfeHU1u4WXTiUcqijWoarph19dfdCsOMHfprrtMkrndDpNAsyYW8WtrUKQ9G6guxV3ikNb3w%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a42318145bc95a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26971,"size_decoded":9918,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26643)","md5":"6b901f5538c64bb8a5791b6138c38b20","sha1":"b477f26628009012b202d875d52ab4f2e5c8a221","sha256":"df214f6d418dbc7a53a5e5ad9939e8f2dd624bdf2ed72596cf248e5d4112c720","sha512":"237601d0c8a603f128589625e6cafcad8ee0b137c05c3e69a412e06e1a7dd4d7b59bf6472b1e3cf53f64ea8a0da368b334fd2f89e6746b26b6d26d010f989839","ssdeep":"768:p49sDJg4my4lc8xhYjiq3O6oMpk3T5KFvVi9/bLPwCC5haN:pltKcDk3Te9i9/bL9CrA","tlshash":"95c2fb98b299b03147e6a2f350f64045b3392598780a5094f338edeb2525ccd69e7fbb","first_seen":"2026-05-30T15:59:09.42412Z","last_seen":"2026-09-28T13:30:08.536829Z","times_seen":37,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/pbd/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly9nb28uc3UvIl19fQ==","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.193Z","timestamp":1790602147193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /pbd/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly9nb28uc3UvIl19fQ== HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://1026--fcc2c245-e2bd-4abd-8b0f-e4fe53067a32.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.adsp.io/match/mv_ins?id=${USER_ID}","fqdn":"sync.adsp.io","domain":"adsp.io","tld":"io"},"ip":{"addr":"188.124.55.44","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.817Z","timestamp":1790602147817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sync.adsp.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 16:02:13 GMT","end":"Thu, 17 Dec 2026 16:02:12 GMT"},"fingerprint":{"sha1":"7B:E2:06:A4:C4:51:6B:72:60:52:80:A8:29:34:DA:FB:30:CB:53:23","sha256":"1C:EB:73:A4:87:C9:8E:CF:41:3F:15:23:F0:8B:21:FC:F0:BD:B1:79:58:C5:2B:1E:DE:21:2C:16:B0:22:CB:82"}}},"request":{"raw":"GET /match/mv_ins?id=${USER_ID} HTTP/1.1\r\nHost: sync.adsp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-length: 0\r\nlocation: https://sync.adsp.io/match/mv_ins?id=%24%7BUSER_ID%7D\u0026chk=1\r\nset-cookie: chk=1; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"chk","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"chk=1; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wordpress-215141-0.cloudclusters.net/wp-content/uploads/2026/09/knxs/","fqdn":"wordpress-215141-0.cloudclusters.net","domain":"cloudclusters.net","tld":"net"},"ip":{"addr":"69.30.235.156","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T13:29:09.885Z","timestamp":1790602149885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudclusters.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 19 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DC:50:81:B7:BB:22:38:4F:4B:9B:ED:80:17:7B:0D:10:5D:12:14:E0","sha256":"39:2C:99:47:7A:17:2B:DC:AA:CF:16:E3:7F:72:85:54:36:11:31:A4:D1:72:5D:DF:C6:B9:F9:40:AC:84:B8:46"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/knxs/ HTTP/1.1\r\nHost: wordpress-215141-0.cloudclusters.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2148\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=6j2v9qrkg1l7viufee78e655ff; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"6j2v9qrkg1l7viufee78e655ff","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=6j2v9qrkg1l7viufee78e655ff; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7096,"size_decoded":2561,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0726ba0892f92ec797c67dbc26c58976","sha1":"a95d66643ab73e304591ab87ebb1a2f989ff4a0d","sha256":"478f6ee4ef8423c1590134606005dfd2e7644236ac1b25c0437a42faaefeb4a9","sha512":"242c5971bda6f76dbf4f059006eb597bbc4858e66235a2adee2f0eb366b87115efe843fddfb0a1f94a98311456754d307eb23b92440622e763daae2cee883795","ssdeep":"192:iC9ko2Bfsw5Y24PRx2yOfnmdTPKbXlml9Fc:QnkhSXlmlI","tlshash":"96e12d9796e318067507c4a86ff64b473298c903c14ec96a7bdc628ccfc69e5da9378c","first_seen":"2026-09-28T13:30:08.537385Z","last_seen":"2026-09-28T13:30:08.537385Z","times_seen":1,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":144,"connect":115,"send":0,"wait":120,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.421Z","timestamp":1790602145421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /safeframe-bundles/0.89/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11893\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 15 Jul 2026 12:02:36 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Wed, 27 Sep 2056 19:54:01 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"2e7b6e3fb8d17570cbabde24df196cc6\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nx-strm-log-split: 1\r\nx-request-id: 63def956bdee7a59\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49523,"size_decoded":12788,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49523), with no line terminators","md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-09-28T22:43:31.483956Z","times_seen":2428,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=2591178172\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A06.348%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A968%2C%22top%22%3A807%2C%22req_no%22%3A3%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqr\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=4\u0026bids=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\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:06.354Z","timestamp":1790602146354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=2591178172\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A06.348%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A300%2C%22h%22%3A0%2C%22width%22%3A300%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A968%2C%22top%22%3A807%2C%22req_no%22%3A3%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqr\u0026p2=hjxt\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=4\u0026bids=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\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: pu=5647879041790602144; pi=OIc2RvspHyNvfPYCWYF0v54FciJ1CKoQMMxu+t7a1G5zqJCklKk89INv7QeyyTYTGc120SaVucSYL6p3eH8U+1s0Vs4=; i=8nakhEzH3NABQAxYyV5IR2jcwlwJkQ0OBdUIYtowcpv0NitGaIO2VDt4JbPAq+cK3WVvT3CD/vUKG0ywaxf7nO2sFiM=; yandexuid=1492042901790602144; yashr=9212708401790602144; bh=YKDX6dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nx-yt-trace-id: 0-1-0-0\r\ncontent-encoding: gzip\r\nexpires: Mon, 04 Dec 1999 21:29:02 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://goo.su\r\nx-xss-protection: 1; mode=block\r\nx-adfox-request-id: 119376575399812126\r\np3p: policyref=/w3c/w3c.p3p, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-ads-degradation: 0.000000\r\npragma: no-cache\r\nx-yandex-req-id: 1790602146371015-11754929174689212263-balancer-l7leveler-kubr-yp-sas-155-BAL\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nx-yt-request-id: 7d8c1c68-ac719b1d-8decbf20-fd5897a2\r\nx-ads-loadaverage: 0.285714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":171,"size_decoded":1485,"mime_type":"application/json","magic":"JSON text data","md5":"ee24f0ef5774326f79569daf2c51dd40","sha1":"974251b3f8c3db0ed73147896adfabaa7bc47cdf","sha256":"ee354ebf2c9aee6eac05585888c9ae47acd79675056ae68e47e5edce5f60d280","sha512":"55ed50b6560c57621716cea038c697daa9120eb49112230e4d2dac747c3053d057137573d7df1eecf67c0c2b039c6b2dfde5a90f1fa329c59e3dffd8492ca1f7","ssdeep":"","tlshash":"eec08c08a90a7ab64c89cf1a1658f850d7d8b458c0080e4d60cee0890f0e2afaa01824","first_seen":"2026-09-28T13:30:08.539075Z","last_seen":"2026-09-28T13:30:08.539075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cm.pxltag.com/rsync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026sync_url=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D51%26b%3D%7Binner_id%7D","fqdn":"cm.pxltag.com","domain":"pxltag.com","tld":"com"},"ip":{"addr":"87.228.57.56","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.824Z","timestamp":1790602147824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pxltag.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 13:45:37 GMT","end":"Sun, 13 Dec 2026 13:45:36 GMT"},"fingerprint":{"sha1":"C1:28:84:D9:3C:21:08:3C:B4:D3:58:6A:79:07:F5:53:5F:F5:90:1F","sha256":"5C:EC:53:1B:2B:EC:3C:74:85:A8:66:B3:11:FF:9E:47:EE:35:42:9E:1C:41:CF:82:F9:6A:14:44:75:AA:59:7D"}}},"request":{"raw":"GET /rsync?platform_id=7dcd9c5600104bb9b65b45f366b26d70\u0026sync_url=https%3A%2F%2Frtb.moe.video%2Fcs%3Fd%3D51%26b%3D%7Binner_id%7D HTTP/1.1\r\nHost: cm.pxltag.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx/1.20.1\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nlocation: https://rtb.moe.video/cs?d=51\u0026b=SqAVzhko6\r\nset-cookie: smi_uid=SqAVzhko6; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"smi_uid","value":"SqAVzhko6","quoted":false,"path":"/","domain":".pxltag.com","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"smi_uid=SqAVzhko6; max-age=31536000; domain=.pxltag.com; path=/; HttpOnly; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":88,"dns":0,"connect":53,"send":0,"wait":96,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goo.su/img/favicons/favicon-16x16.png","fqdn":"goo.su","domain":"goo.su","tld":"su"},"ip":{"addr":"82.202.170.126","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:04.870Z","timestamp":1790602144870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.goo.su","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 11 Dec 2025 10:48:38 GMT","end":"Tue, 12 Jan 2027 10:48:37 GMT"},"fingerprint":{"sha1":"82:23:C9:6D:49:3E:29:B7:9C:36:14:B9:ED:0A:9E:A3:65:76:C3:28","sha256":"F1:CA:E0:D3:1C:F2:4E:10:20:7C:D4:A4:34:EB:7B:2B:3E:3C:8C:FA:D9:C7:CA:35:CD:07:AF:07:82:79:4F:56"}}},"request":{"raw":"GET /img/favicons/favicon-16x16.png HTTP/1.1\r\nHost: goo.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/hbXzr/\r\nCookie: __ddg8_=fHcWAIQAab2h6XfY; __ddg10_=1790602144; __ddg9_=91.90.42.154; __ddg1_=MSKzL279oKdTtqzpDTkX; block_ads=1; XSRF-TOKEN=LG7xcmUa65wL95by9tbZEiUZaqgUP7DLwr1VW3jR; goosu_session=jakJC1Yh5ltD470y5cCe5CthFnq8ASl1jdWIJO3s; adtech_uid=ee2b2d9b-7047-48a3-90d7-5b479f18b790%3Agoo.su; top100_id=t1.6673155.1939344963.1790602136276; t3_sid_6673155=s1.1920423623.1790602136277.1790602141284.1.4.1.0...1; _ga_64YFP720ET=GS2.1.s1790602136$o1$g0$t1790602136$j60$l0$h0; _ga=GA1.1.1936950156.1790602136; _sltm=677f02102c589b155509dba10fb7cda4~0; _sltb=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4beUJ18QTV2UI5eH; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT\n__ddg10_=1790602145; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT\n__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT\r\ndate: Thu, 24 Sep 2026 06:34:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1567\r\nlast-modified: Wed, 30 Jul 2025 12:50:59 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nddg-cache-status: HIT,HIT\r\netag: \"688a1533-61f\"\r\nexpires: Thu, 01 Oct 2026 06:33:45 GMT\r\nage: 370490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"4beUJ18QTV2UI5eH","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:05Z","raw_expires":"Mon, 28-Sep-2026 13:49:05 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=4beUJ18QTV2UI5eH; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT"},{"name":"__ddg10_","value":"1790602145","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:05Z","raw_expires":"Mon, 28-Sep-2026 13:49:05 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1790602145; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT"},{"name":"__ddg9_","value":"91.90.42.154","quoted":false,"path":"/","domain":".goo.su","expires":"2026-09-28T13:49:05Z","raw_expires":"Mon, 28-Sep-2026 13:49:05 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=91.90.42.154; Domain=.goo.su; Path=/; Expires=Mon, 28-Sep-2026 13:49:05 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1567,"size_decoded":2175,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"2b201347b6d90e0ad2bbad3be209db73","sha1":"ae5de3e7f779cf33aefd5dc738f2126633bb7824","sha256":"df0a5932ec719656fd8f147bcc0c14312e53e52c2df13f5f815d72833de9c852","sha512":"577839e7493e86954bdf7e0fec853520b9cd1f714a9e560f9e9270a5ee118bd63907d8bdcc9f7f65bd11e01b2669908b78b550e6b77426d897431044523fc6b1","ssdeep":"","tlshash":"5831e7c9893cce18dc6b65ff21e202d978389ad311deaa3951df45197854eb0009d51d","first_seen":"2023-04-06T08:25:23Z","last_seen":"2026-09-28T13:30:08.540088Z","times_seen":1063,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=gpmdata","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.923Z","timestamp":1790602147923,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /image?source=gpmdata HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155; user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:08 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://sync.upravel.com/mytarget/sync\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/ujs?ymss=digitalcaramel\u0026rc=1","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.513Z","timestamp":1790602136513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /rtb/ujs?ymss=digitalcaramel\u0026rc=1 HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:28:56 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2628\r\nConnection: keep-alive\r\ncache-control: no-cache\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure\nsm=MQBqumuY; path=/rtb; max-age=604800; samesite=none; httponly; secure\r\ncontent-encoding: gzip\r\nserver-timing: app;srv=s30;dur=0.0005\r\n\r\n","headers":null,"cookies":[{"name":"u","value":"arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs","quoted":false,"path":"/","max_age":7776000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure"},{"name":"sm","value":"MQBqumuY","quoted":false,"path":"/rtb","max_age":604800,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"sm=MQBqumuY; path=/rtb; max-age=604800; samesite=none; httponly; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6218,"size_decoded":3128,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1028)","md5":"47e665e0f388e2637ce2cc7b8dbd40eb","sha1":"bba4792370576e09b84b9e5386df014122004b5b","sha256":"a31e3d5f6d0829304f412e1997b3f5f9171ee20bbdd816af35ea729b5535ebad","sha512":"92ce404f2c77df4f13740ccdeb69bf35488c5fd230dfc076d00f2d156af0731496b1b304558e9225e3cf216ccb80da969976271fa4da4eb388600a309ba0669d","ssdeep":"192:5ZhQ2ciF+UAt0PktAX7y1Gt9X+7OyrbApSFIBT0d/q5ZFY:5c2ciIUp9XmtgpSyBYx6K","tlshash":"68d1069372a8903900b10077d19e2f0169338f71d4db9da6d53de900b995f4aaf9bbec","first_seen":"2026-09-28T13:30:08.540584Z","last_seen":"2026-09-28T13:30:08.540584Z","times_seen":1,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.moe.video/p/cr.js","fqdn":"cdn1.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:06.611Z","timestamp":1790602146611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.moe.video","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 08:13:46 GMT","end":"Tue, 10 Nov 2026 08:13:45 GMT"},"fingerprint":{"sha1":"21:99:67:8A:A4:28:04:7D:FE:58:13:D6:B2:C3:7F:07:6A:E6:07:E4","sha256":"5B:3E:2C:AA:FB:70:63:1D:69:D4:43:E2:67:39:1A:42:F4:87:C2:E8:71:7A:85:A7:77:FD:A0:5C:60:13:52:75"}}},"request":{"raw":"GET /p/cr.js HTTP/1.1\r\nHost: cdn1.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:06 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Monday, 28-Sep-2026 13:00:16 GMT\r\nexpires: Mon, 28 Sep 2026 13:59:06 GMT\r\ncache-control: max-age=1800\r\ncache: HIT\r\nx-cached-since: 2026-09-28T13:00:16+00:00\r\nx-node: m9p-up-gc54\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362241,"size_decoded":115372,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51594)","md5":"126ed5d5e16cfb30b9b489236fafe046","sha1":"ce37977b753547e53be3af2a967595630edfe3b0","sha256":"b85c940cbba43ed9b029f7d98c67b5f17dd340b1058bb598c5499b7e6760b328","sha512":"3f5337c2a6597f3f007d5750d70916ee9d256824bb9d22d495fdcae213bbc269341c76a86a2879e585cb0c8673a514ff219aa5c66433f6ae35df3af6c71adcba","ssdeep":"6144:rYopTfsU72CkTkb1SVqwZ92udpXQlUQrrqEgLhA/lySk3Kth1mSYSVJbKzfM6PL0:sopTfFkTkb1SVpZ92UQrrqEgLhA/lySZ","tlshash":"34743cd533d3b826879591ba60374209f33659d92c08412cf57ce8e67be1d8522bbfb8","first_seen":"2026-09-28T13:30:08.541736Z","last_seen":"2026-09-28T13:30:08.541736Z","times_seen":1,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":4,"connect":60,"send":0,"wait":62,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/moevideo/sync","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.790Z","timestamp":1790602147790,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /moevideo/sync HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155; user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://rtb.moe.video/cs?d=10\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kimberlite.io/rtb/syncd","fqdn":"kimberlite.io","domain":"kimberlite.io","tld":"io"},"ip":{"addr":"37.0.127.92","port":443,"asn":61400,"as":"Start LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.361Z","timestamp":1790602145361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kimberlite.io","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Mar 2026 13:39:33 GMT","end":"Sat, 03 Apr 2027 13:39:32 GMT"},"fingerprint":{"sha1":"54:6D:AA:4B:D6:ED:DC:0A:22:19:26:1B:95:C0:97:0D:3D:0B:C4:42","sha256":"E9:84:4F:C4:B6:4B:27:E3:3D:3C:C2:7D:22:2D:BA:5B:F6:7A:97:80:E3:79:D7:E9:06:D8:4C:7E:B2:A0:6D:3A"}}},"request":{"raw":"GET /rtb/syncd HTTP/1.1\r\nHost: kimberlite.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: sm=MQBqumuY; u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx\r\nDate: Mon, 28 Sep 2026 13:29:05 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure\nda=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure\nf=; max-age=30; samesite=none; httponly; secure\nn=1; max-age=30; samesite=none; httponly; secure\r\nlocation: https://dm.hybrid.ai/match?id=414\r\nreferrer-policy: no-referrer\r\nserver-timing: app;srv=s11;dur=0.0016\r\n\r\n","headers":null,"cookies":[{"name":"u","value":"arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs","quoted":false,"path":"/","max_age":7776000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"u=arprmOFYj_A~sAluUhrOPeI7R-soLHoBHA3zDrs; path=/; max-age=7776000; samesite=none; httponly; secure"},{"name":"da","value":"2OZrzwAAAAE","quoted":false,"path":"/rtb","max_age":604800,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"da=2OZrzwAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure"},{"name":"f","value":"","quoted":false,"max_age":30,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"f=; max-age=30; samesite=none; httponly; secure"},{"name":"n","value":"1","quoted":false,"max_age":30,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"n=1; max-age=30; samesite=none; httponly; secure"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":60,"send":0,"wait":77,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306891/320cdcfab0944496.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.418Z","timestamp":1790602145418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306891/320cdcfab0944496.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 28086\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"c497a695fca4554f7406b95ae5006e07\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\nexpires: Wed, 27 Sep 2056 19:38:48 GMT\r\nlast-modified: Fri, 25 Sep 2026 15:48:17 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-strm-log-split: 7\r\nx-request-id: 4ae6141fffecc4cc\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305380,"size_decoded":28981,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"fccd97ebac02b69505e7a6efa28efbe8","sha1":"dc86f1ab20d881cd7bf84437971b50e7597fea08","sha256":"064230ee9d192eee399d49f7b44ddc8bfe93fd1e719057de6d69fa7dcb72d1e5","sha512":"8d931d3e2d0673f057f0320bbb16f52b20ca3d1d8ec9bd0daca3871b8100fb3d6700e2c1366232373a2d9e56a40a79228e43552eb07c25c4341294393bade1e1","ssdeep":"1536:p21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:XN1dfXIQkN+nF/JH9zf6","tlshash":"905475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","first_seen":"2026-09-28T08:51:21.782186Z","last_seen":"2026-09-29T00:03:44.567823Z","times_seen":30,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1026--fcc2c245-e2bd-4abd-8b0f-e4fe53067a32.stbid.ru/?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd","fqdn":"1026--fcc2c245-e2bd-4abd-8b0f-e4fe53067a32.stbid.ru","domain":"stbid.ru","tld":"ru"},"ip":{"addr":"185.115.93.201","port":443,"asn":42881,"as":"Sc Itns.net Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.262Z","timestamp":1790602147262,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stbid.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 25 May 2026 07:36:56 GMT","end":"Thu, 10 Dec 2026 07:36:56 GMT"},"fingerprint":{"sha1":"BA:DF:B2:60:EF:C7:F2:20:08:8F:BA:68:E4:59:E9:BB:21:27:0D:57","sha256":"FC:7E:C5:6E:44:BB:A2:72:57:C7:4D:EE:6D:23:28:EB:B6:F3:B1:B1:82:D3:6A:91:12:0C:A2:85:BA:AF:EB:CA"}}},"request":{"raw":"GET /?r=https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd HTTP/1.1\r\nHost: 1026--fcc2c245-e2bd-4abd-8b0f-e4fe53067a32.stbid.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: Angie/1.11.2\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: close\r\nlocation: https://sync.upravel.com/image?source=pbd\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Orig-Url: https%3A%2F%2Fsync.upravel.com%2Fimage%3Fsource%3Dpbd\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Angie:1.11.2","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":58,"connect":42,"send":0,"wait":42,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.tds.bid/api/v1/sync?ssp_id=13\u0026ssp_uid=4485bcbc44746aba6ba3","fqdn":"ads.tds.bid","domain":"tds.bid","tld":"bid"},"ip":{"addr":"89.219.34.76","port":443,"asn":48716,"as":"PS Internet Company LLP","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.836Z","timestamp":1790602147836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.tds.bid","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 18:44:16 GMT","end":"Thu, 19 Nov 2026 18:44:15 GMT"},"fingerprint":{"sha1":"8D:64:48:F0:E5:4E:AB:18:85:3B:42:BF:DD:89:B7:BD:DE:17:02:2F","sha256":"13:B2:B4:01:44:20:63:34:66:E3:36:42:98:00:1B:80:16:DC:DA:B8:07:04:38:4A:AF:4B:E1:3D:7F:B0:C5:FF"}}},"request":{"raw":"GET /api/v1/sync?ssp_id=13\u0026ssp_uid=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: ads.tds.bid\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nlocation: https://rtb.moe.video/cs?d=68\u0026b=039c32d2-a6a1-453a-8bcb-567da0c57dfe\r\nset-cookie: tds_bid_uid=039c32d2-a6a1-453a-8bcb-567da0c57dfe; Domain=.tds.bid; HttpOnly; Max-Age=31536000; Path=/; SameSite=none; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"tds_bid_uid","value":"039c32d2-a6a1-453a-8bcb-567da0c57dfe","quoted":false,"path":"/","domain":".tds.bid","max_age":31536000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"tds_bid_uid=039c32d2-a6a1-453a-8bcb-567da0c57dfe; Domain=.tds.bid; HttpOnly; Max-Age=31536000; Path=/; SameSite=none; Secure"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":160,"dns":0,"connect":95,"send":0,"wait":98,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.skcrtxr.com/wrapper-builder/19e08d82-9ec3-4dda-b15f-01ab2c95e167/dynamic.js?host=goo.su\u0026v=d-1790594234__s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.102.200","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:28:56.717Z","timestamp":1790602136717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 00:55:23 GMT","end":"Sun, 11 Oct 2026 00:55:22 GMT"},"fingerprint":{"sha1":"98:EF:3B:71:24:08:A4:ED:08:03:3E:4D:18:F2:FF:23:B2:67:BF:B0","sha256":"A8:B1:58:DC:E8:FE:F3:F7:97:DB:C2:A8:18:A9:77:2A:F1:E7:1C:A3:B5:2E:0B:BD:A1:D1:CD:FF:1E:F9:D9:20"}}},"request":{"raw":"GET /wrapper-builder/19e08d82-9ec3-4dda-b15f-01ab2c95e167/dynamic.js?host=goo.su\u0026v=d-1790594234__s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:28:56 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-private-network: true\r\naccess-control-allow-credentials: true\r\nx-service-id: worker\r\ncache-control: max-age=600\r\nx-cdn-request-id: 4149357573568df742253c75d429dee6\r\nx-cdn-edge-id: 2010\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":396,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:06.942Z","timestamp":1790602146942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://goo.su\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:54 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:41 GMT\r\ncontent-type: font/woff2\r\nage: 596172\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21884,"size_decoded":22697,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21884, version 1.0","md5":"4279528ce0e7dc28919e6f8ce5f0eaa5","sha1":"a0bec563643727d81bf21d0acec08227d9269da4","sha256":"425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371","sha512":"2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507","ssdeep":"384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87","tlshash":"0aa2e187b3eaa46d5787b931fa0a1900b8fe73f65d27da6484e087c9a1456c48c3dd3c","first_seen":"2026-02-19T22:29:10.595811Z","last_seen":"2026-09-28T23:29:18.926464Z","times_seen":29818,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":2,"connect":30,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.upravel.com/image?source=pbd","fqdn":"sync.upravel.com","domain":"upravel.com","tld":"com"},"ip":{"addr":"94.26.229.53","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.498Z","timestamp":1790602147498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.upravel.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 10 Jul 2026 10:51:38 GMT","end":"Mon, 25 Jan 2027 10:51:38 GMT"},"fingerprint":{"sha1":"C0:2D:95:65:92:3A:ED:B1:E4:3F:18:C8:A1:A8:48:E1:BA:87:D9:F9","sha256":"7A:2A:F5:4C:29:9C:E5:2E:D2:52:F9:B6:98:FA:9D:B0:D0:87:16:1B:48:F6:FC:F2:6F:E9:39:E3:9D:D1:6B:33"}}},"request":{"raw":"GET /image?source=pbd HTTP/1.1\r\nHost: sync.upravel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: session_tptc=1790602147155; session_tptc-legacy=1790602147155; user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: Angie\r\nDate: Mon, 28 Sep 2026 13:29:07 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://sync.upravel.com/gpmdata/sync\r\nP3P: CP=\"NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA\"\r\nSet-Cookie: user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\nuser_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nAccess-Control-Allow-Credentials: false\r\n\r\n","headers":null,"cookies":[{"name":"user_id","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"user_id=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32;SameSite=None;Secure; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"},{"name":"user_id-legacy","value":"fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","quoted":false,"path":"/","domain":".upravel.com","max_age":315360000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"user_id-legacy=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32; Max-Age=315360000; Domain=.upravel.com; Path=/; Version=1"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.dvgroup.com/match/MoeVideo?id=4485bcbc44746aba6ba3\u0026chk=1","fqdn":"sync.dvgroup.com","domain":"dvgroup.com","tld":"com"},"ip":{"addr":"5.35.3.132","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.056Z","timestamp":1790602148056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtb.dvgroup.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 11:32:46 GMT","end":"Fri, 11 Dec 2026 11:32:45 GMT"},"fingerprint":{"sha1":"6E:13:23:D1:06:DC:C6:10:D1:95:71:41:EE:43:90:26:38:DE:BE:4D","sha256":"E7:1E:19:72:83:B4:14:D8:95:C4:BD:4F:36:73:1B:07:9F:7C:02:98:72:8E:B1:ED:16:DA:47:03:0B:33:2D:AD"}}},"request":{"raw":"GET /match/MoeVideo?id=4485bcbc44746aba6ba3\u0026chk=1 HTTP/1.1\r\nHost: sync.dvgroup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: chk=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nlocation: https://rtb.moe.video/cs?d=42\u0026b=dvsjvrsgdr6gw---1\r\nset-cookie: pid=dvsjvrsgdr6gw---1; expires=Tue, 28 Mar 2028 13:29:08 GMT; domain=.dvgroup.com; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pid","value":"dvsjvrsgdr6gw---1","quoted":false,"path":"/","domain":".dvgroup.com","expires":"2028-03-28T13:29:08Z","raw_expires":"Tue, 28 Mar 2028 13:29:08 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pid=dvsjvrsgdr6gw---1; expires=Tue, 28 Mar 2028 13:29:08 GMT; domain=.dvgroup.com; path=/; secure; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=3536173366\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A06.463%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A608%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A640%2C%22top%22%3A807%2C%22req_no%22%3A4%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqt\u0026p2=gxxp\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=5\u0026bids=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\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:06.469Z","timestamp":1790602146469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/adfox/332443/getBulk/v2?pr=3406380872\u0026pr1=3536173366\u0026dl=https%3A%2F%2Fgoo.su%2FhbXzr%2F\u0026prr=\u0026extid_loader=\u0026extid_tag_loader=goo.su\u0026fa=\u0026date=2026-09-28T13%3A29%3A06.463%2B00%3A00\u0026pd=28\u0026pw=1\u0026pv=13\u0026pdw=1280\u0026pdh=1024\u0026ylv=0.1306891\u0026ybv=0.1306891\u0026ytt=146784802308101\u0026is-turbo=0\u0026skip-token=\u0026ad-session-id=7449991790602145797\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A973%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A608%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A640%2C%22top%22%3A807%2C%22req_no%22%3A4%2C%22ad_no%22%3A0%7D\u0026pcode-version=1306891\u0026yaru=true\u0026p1=dgtqt\u0026p2=gxxp\u0026puid28=677f02102c589b155509dba10fb7cda4~0\u0026slotNumber=5\u0026bids=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\u0026utf8=%E2%9C%93\u0026pcode-test-ids=1387855%2C0%2C42%3B1651221%2C0%2C70%3B1710134%2C0%2C16%3B1471934%2C0%2C51%3B1534007%2C0%2C61%3B1691259%2C0%2C43%3B1680292%2C0%2C55%3B1584245%2C0%2C73%3B1671862%2C0%2C71%3B1659521%2C0%2C50%3B1693920%2C0%2C67%3B1688411%2C0%2C61%3B1695061%2C0%2C39%3B1688414%2C0%2C82%3B1684924%2C0%2C82%3B1688419%2C0%2C25%3B1679913%2C0%2C68%3B1695297%2C0%2C75%3B1638094%2C0%2C2%3B1695445%2C0%2C83%3B912286%2C0%2C96\u0026pcode-uid=5647879041790602144\u0026pcode-flags-map=eJzlWGtz4jgW%2FS1Lz4dmut1t%2Be18oRRbgCpGcksySTbJqBxwEm8AU%2BAkk27y37dkAxugG9I1M%2Fuo%2FQJ%2BoKOjo3uvuOdb4xzymAt4HKE%2BYo2ji2%2BNx3T0kDWOGuCT74BPwDZ0q%2FGxUWbzEg%2FVY1f3fR80Xq4%2BNvqQy3qw7CPGMSWbCKYOHM%2FZGG1armV71egQ82poiLhg9FyiM4EYgZEMGIIC95GEoUw4YjKIKEcS9RERGxNkv083wC3LN1y78fLxwE%2BMNXuGAhgFSQQFkgx9SRAXsodEl4ayTZk8ZTCOEZMJi%2FZPbOu2ZVeoMAwl7sEOkh0YRYidS0wkQQmjaqG4Q%2FYDecDXrRUQJh2pvgSmSpcYMthDAjFekQsxFwwfJ2Jb911Qx%2Fe9%2FbKon9TzIlLtSszQMQ5lmOBwL7ite75fLz3hSHIlIhEYRjKiMFRbqLjyExxLQU%2FQfqY2ME1PX%2B9OW61Xqi0goezjEFHJIyqkoDKkvf1IpgVMb01LQNZBQjLUrqWLZBzQEB2GcPdA9CE%2FDOBUAB1EEIOR5IJBgTrn8hSLrqQxDLA43wC5SUej63RwL4vJ6HkTzgIA%2BBVcG5%2FJU0xCeioJpbEC38%2FEsl2njvoIwbBNWY%2FLPoxwqAI%2F7lJyQArLdi1%2FGZZteiZhCGPxhsSwHce362IRQ8ZRLbvEpE0lJoIuMyOgpI07sm9tgJXp7DYrN%2FFc11%2Bmb43HuwyTE6kE4fjvSHKasODAYv6FARNB4wgGqIeIkJj06QmSMBIygFF0DIOT%2FUCebbwKfRUdxzQhVdoGEVaQDAWiChf1MqbsYK46uuW53utE3OQYwKCLZNBFB7g5wLSAtc6kJVYIebei08ZRj%2FKAxirR6dn5ASzf8uusxESVn4BRVdqqghRF8EyidhsF%2B2uzYziu6X9H9YASob6JCowQCRQcFskEnlsvrp1EEQ8YQkRyzmQXwfBALjgm8B1vrYw6AJe1BZEOJkjdQHgAwjCNWhDeg0zILwlKUF3w%2BDkJJEOnkIVof%2BV0TNcFzvYWYcgl7sUMcXWeyj6Gqs5UlXA%2FmgWAbVZox1GCIpUVSmjJENmW5OLbZWNUDNIyLyaXjaPLxm93ZTmdH11eXl5%2Brj6enp7U96fpLH0cptXl7KF68751NMme5tV1s%2FX%2BItW%2BXn1o1q%2FU5%2FBDU6ue6pqvrd603rcq8NbFb%2B%2Bufm2q23effm22frlsfLxsXI%2BKwX3Fg2lQA5ZuAM%2B0NMO9VGfWW6nO0vH1KJttcR0W48V0VtQ0lrSkdvVhPX74Qbv47XPr3fKRonbRendVsduZaz7IfzTXbTr8epeVz9WN7QDXMU1bu0%2Fvi2ctnQxnRT7U7h%2Bmeak9jrN5WWiT4rG4LbR8eldMMg24meZoD8N0cDd5vtMe01meTsri8eflcy3X8w1Hs96k3movv7ekn5Xrj7N53%2FrbTT5JJ4PsR5y%2BpvO7vEzr8Kv2d1AWs8VNOs5Hz4vl4MV9PikWo%2FwmW8wH%2BWI%2BLWblopylj9lo8ZRl99lk2PzvWXS2SrBdMuNsmKcrZd63jtKH8q6YLcr0trkMic%2BLX5rNbc5%2FNtnWxhYdrTKu2bLN12zL7PdyRXYwy8f5JB1t0HxFq5L1m%2FWywtQvgOZfLcCFrhlXza2nF8C4qgYszAsdLF%2FXCN7Lm1bpmr4LTA0A%2B22rnJfZbJSX6Ti9B99d4m0xK4bVlaEbTnWhe%2FV9pcln17F8CwDn5%2Bg5%2Fz56tme6hv6foZdNymxWpvlknE3KAzR9x%2FD%2FGhXvH0blw6wYFbf5xhF3PSpu569izHl5VQnexMRyfN3QLP%2BP8Vifs3%2FZzKtMLu%2ByxyIfZOP09jWBG1Vsi8nOuV%2FLYrxoWxfLdF7UxUr9fDHP0tngbjFNb7NFOs0X01n2mGdPdQrvFK6dB4eKl%2BFbuq0ZpvmnrPc6Sx%2BWJ%2Fj%2Fw3LVATkvn0fZ%2F8iKr7b%2B8BqeB7Z6WhgxBMNz2cYE8y4KZSeB7MDfcEf3LLDu4mAoEoJk3ePIoAsxwaSzH8HVHbfuA%2Bv2NuQyoPQEI9mFJIyUK3KgOXKB7tTNEe%2FSJKp8Lyn6dXdCiRT9%2FeN90%2FONtTWQQGWaRLSPiaS9AwaOatBBbXOEPK6dGtpub1O%2BuZa2vmUE2vayxUScIxJUVt6JoLFsR5QyCfdP7OqusWp1l%2BNX4ypvC5NASMg5EnwFvIF3%2FVCWxeRHkPVO7HcnHc8Hm%2BMB8HT7dffNBUOwt2wQT9Ex5YYOPNk3Dzk%2Ful5r2oYRR8oOCE6k6FBZNWaqBRcMBieYdDY9pEE52todYNj%2Bhki1ZdKmpLIqGQ42EaazYrgJ4enGMjiq9l1ZiV0Yx5ggziVPWB%2BdSxxs99zj4h%2F5lt1hGUuTc91hfsfSVId8ZV7Jp7y8k%2BkkH1c1ajvgvaUhtbKBd5WWhm7o%2B9WxfdsAOzp3RS%2Byf15p01829fspgf3p5HkWABsbFlXB3Dkwu6074A2zG4dnt9bF7EuiDGiOIhQI5fooJ7YLlW0Y0p5klB4oS57lG9YbSO3PhopUHcMM9Wgfbfjh27m0o4zr%2B8B8nZOIdGCnNo9WW3uowhm%2BuzZaQhQhgWQiUC%2BOYKULoz15DkmIznYczR06pqdXTvnLPwHomqhw\u0026pcode-icookie=VRukVLhei49J0lflfAJ9qO9bDfisuskltrsgb1%2FBlvaaXt%2BST3waWh%2Fd0f8HGHxVYqQNZ5mmRQQXlFDVe17C8hhkD90%3D\u0026disable-base64=1\u0026top-ancestor=https%3A%2F%2Fgoo.su\u0026top-ancestor-undetermined=0\u0026tga-with-creatives=1\u0026banner-lang=en\u0026grab-orig-len=388\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKrrpE83_NC9R1gWwLYxjxL5K-P7JD72Y9lGQnctCzZslW2JNUS-G-GgfDA0zRl5aQ15WvW2t6m16A-n_-yF9VmcN4m_9YZq_z6yO-KP_C9EMcsIe7H1ccw6F-IF8Tgs0O8G1wxPmRhllSd0wdW6QQicWgtH5Z18sb14vuOS9LlmS3xmMnTvYQkyXGSm_ogIiynXqUNNBe-RjvDOWmP6i0kUkf9DdA7haK1z33M9mKVY6eotXBsYA1Baq-NmctQtdhOIImWjaamU2O_fdkBS1VS8ISU3B5O6GiBR6_Aq2TuMOTNNE0mOnT66n6K9RbEcICqImleAEsqAbcWdoJGbWTqyrJ05DbP1XlGzrNWsA%3D%3D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nCookie: pu=5647879041790602144; pi=OIc2RvspHyNvfPYCWYF0v54FciJ1CKoQMMxu+t7a1G5zqJCklKk89INv7QeyyTYTGc120SaVucSYL6p3eH8U+1s0Vs4=; i=8nakhEzH3NABQAxYyV5IR2jcwlwJkQ0OBdUIYtowcpv0NitGaIO2VDt4JbPAq+cK3WVvT3CD/vUKG0ywaxf7nO2sFiM=; yandexuid=1492042901790602144; yashr=9212708401790602144; bh=YKDX6dUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-xss-protection: 1; mode=block\r\nx-ads-degradation: 0.000000\r\nexpires: Mon, 04 Dec 1999 21:29:02 GMT\r\nx-ads-loadaverage: 0.214286\r\nx-yt-request-id: 73511dbe-e2a95358-e99b72fb-9c3b5a4a\r\npragma: no-cache\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\np3p: policyref=/w3c/w3c.p3p, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ncontent-type: application/json\r\nx-adfox-request-id: 5330806265227851258\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Wed, 27 Sep 2028 13:29:06 GMT; SameSite=None; Secure\nis_gdpr_b=CIiuDxDAngMYAQ==; Path=/; Domain=.yandex.ru; Expires=Wed, 27 Sep 2028 13:29:06 GMT; SameSite=None; Secure\n_yasc=9y5+wRPbz5ndhagTQKz1B/hmsBkF9Lg4ehwT00k1+m7w0Tjo2bbyeUBWnUaX1SjgXvA/lA==; domain=.yandex.ru; path=/; expires=Thu, 25 Sep 2036 13:29:06 GMT; SameSite=None; Secure\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nx-yt-trace-id: 0-1-0-0\r\nx-yandex-req-id: 1790602146485744-18293281567551622839-balancer-l7leveler-kubr-yp-sas-155-BAL\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"is_gdpr","value":"1","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-09-27T13:29:06Z","raw_expires":"Wed, 27 Sep 2028 13:29:06 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Wed, 27 Sep 2028 13:29:06 GMT; SameSite=None; Secure"},{"name":"is_gdpr_b","value":"CIiuDxDAngMYAQ==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2028-09-27T13:29:06Z","raw_expires":"Wed, 27 Sep 2028 13:29:06 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"is_gdpr_b=CIiuDxDAngMYAQ==; Path=/; Domain=.yandex.ru; Expires=Wed, 27 Sep 2028 13:29:06 GMT; SameSite=None; Secure"},{"name":"_yasc","value":"9y5+wRPbz5ndhagTQKz1B/hmsBkF9Lg4ehwT00k1+m7w0Tjo2bbyeUBWnUaX1SjgXvA/lA==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2036-09-25T13:29:06Z","raw_expires":"Thu, 25 Sep 2036 13:29:06 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"_yasc=9y5+wRPbz5ndhagTQKz1B/hmsBkF9Lg4ehwT00k1+m7w0Tjo2bbyeUBWnUaX1SjgXvA/lA==; domain=.yandex.ru; path=/; expires=Thu, 25 Sep 2036 13:29:06 GMT; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3921,"size_decoded":3229,"mime_type":"application/json","magic":"JSON text data","md5":"1ebd0499e36db2d382b862928753e903","sha1":"f00b5bc4182d6d8eef01aeebd72aeb03f0a05460","sha256":"a4695f0a4fce15d6b4cea7d67df80e4e0b00270f98f50dc8bdbac847e588be8d","sha512":"944b40e94890d7b69de00144c3af98f7d86c05cad87293e950cfad27ed015469de4e106631ae63b3e062d299fe398c308d55d45de5d4184be2ade7faeac032ed","ssdeep":"","tlshash":"a28155c32dba1b67e6c5782949fc41c3dc4b9ba46160c0680eebd0eac96d7e145cbc27","first_seen":"2026-09-28T13:30:08.544253Z","last_seen":"2026-09-28T13:30:08.544253Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.lotus-dsp.ru/sync?ssp=MoeVideo\u0026id=4485bcbc44746aba6ba3","fqdn":"a.lotus-dsp.ru","domain":"lotus-dsp.ru","tld":"ru"},"ip":{"addr":"213.171.19.207","port":443,"asn":56694,"as":"LLC Smart Ape","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.823Z","timestamp":1790602147823,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"lotus-dsp.ru","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 04:16:37 GMT","end":"Tue, 10 Nov 2026 04:16:36 GMT"},"fingerprint":{"sha1":"86:F4:CA:B5:43:87:7C:E6:25:DA:36:8A:E8:74:41:22:D0:91:F0:A9","sha256":"8F:16:CE:8A:2F:A1:F7:01:63:8F:FF:6C:15:C9:63:FF:07:5E:E4:E8:A1:C3:F7:26:05:B5:1B:A8:C9:C6:6C:44"}}},"request":{"raw":"GET /sync?ssp=MoeVideo\u0026id=4485bcbc44746aba6ba3 HTTP/1.1\r\nHost: a.lotus-dsp.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.24.0\r\nDate: Mon, 28 Sep 2026 13:29:08 GMT\r\nContent-Type: text/plain\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: adpreudid=1; Expires=Wed, 28 Oct 2026 16:29:08 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nVary: Origin\r\n\r\n","headers":null,"cookies":[{"name":"adpreudid","value":"1","quoted":false,"path":"/","domain":".lotus-dsp.ru","expires":"2026-10-28T16:29:08Z","raw_expires":"Wed, 28 Oct 2026 16:29:08 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"adpreudid=1; Expires=Wed, 28 Oct 2026 16:29:08 GMT; Domain=.lotus-dsp.ru; SameSite=None; Secure; Path=/"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":565,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":75,"dns":0,"connect":28,"send":0,"wait":28,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=28\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.069Z","timestamp":1790602148069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=28\u0026b=fcc2c245-e2bd-4abd-8b0f-e4fe53067a32 HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtb.moe.video/cs?d=61\u0026b=K9OfXzeHstsLa2gRWyCDpA","fqdn":"rtb.moe.video","domain":"moe.video","tld":"video"},"ip":{"addr":"87.228.3.188","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:08.145Z","timestamp":1790602148145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.moe.video","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 26 Jan 2026 09:58:49 GMT","end":"Sat, 27 Feb 2027 09:58:48 GMT"},"fingerprint":{"sha1":"75:31:A4:A2:F1:CA:60:40:B2:3C:13:EC:AD:CC:40:1E:92:B6:3C:3F","sha256":"57:72:B5:4B:C1:9B:DF:D2:97:2C:7B:9E:0F:7E:77:AA:D5:C0:B6:6F:CB:1D:A3:B0:69:24:2C:01:C0:4E:1D:B5"}}},"request":{"raw":"GET /cs?d=61\u0026b=K9OfXzeHstsLa2gRWyCDpA HTTP/1.1\r\nHost: rtb.moe.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://goo.su/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid=4485bcbc44746aba6ba3; cid=0373180a78a11b17570c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 28 Sep 2026 13:29:08 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":155,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T23:46:24.546872Z","times_seen":18714445,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hb-bidder.skcrtxr.com/bidder","fqdn":"hb-bidder.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"158.160.196.30","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:05.211Z","timestamp":1790602145211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 06:30:41 GMT","end":"Thu, 10 Dec 2026 06:30:40 GMT"},"fingerprint":{"sha1":"FC:3D:29:86:9D:C7:68:30:9D:F3:DB:49:38:01:BC:80:0E:93:F5:E6","sha256":"44:5D:32:BB:6F:D0:2C:02:82:65:22:03:DE:0D:C4:76:48:11:DA:CD:80:EA:E6:CF:EB:41:D3:7E:EB:C0:23:BA"}}},"request":{"raw":"POST /bidder HTTP/1.1\r\nHost: hb-bidder.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 1775\r\nOrigin: https://goo.su\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://goo.su/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1775,"data":"{\"places\":[{\"id\":\"Caramel_bfnkV7OrJN\",\"placementId\":\"55392600-d41f-473b-9a08-1ba30e356718\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_qRmT4IAofp\",\"placementId\":\"f5f2fb85-cf7c-4d75-8c57-d114b1aa8c73\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_vrgnkme8UL\",\"placementId\":\"94f8aae6-fb24-43d7-af30-86d7ab478bf4\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_94smfsDngE\",\"placementId\":\"7007724e-035b-44dc-9a9e-f3c90dea6b87\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_1aFaleYblb\",\"placementId\":\"7b20d9ab-2c20-4cbc-b304-d51d6dba8b5a\",\"sizes\":[[300,250],[300,300],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Uq02oypJe4\",\"placementId\":\"f5cdb6e9-45f2-4560-9459-af8a57755c18\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_LoS4zUhx1g\",\"placementId\":\"03902555-a028-4a34-8704-abab0960873b\",\"sizes\":[[300,250],[320,50],[320,100],[336,280],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"},{\"id\":\"Caramel_Q617qtAxKC\",\"placementId\":\"9fc87b26-0232-4d0a-a789-15364f04e0ae\",\"sizes\":[[300,250],[300,100],[300,50],[250,250],[200,200]],\"ext\":{\"rxtUid\":null},\"targetRef\":\"https://goo.su/hbXzr/\"}],\"settings\":{\"currency\":\"RUB\",\"windowSize\":{\"width\":1280,\"height\":973}}}"}},"response":{"raw":"HTTP/2 200 \r\nserver: ycalb\r\ndate: Mon, 28 Sep 2026 13:29:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\naccess-control-allow-origin: https://goo.su\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11,"size_decoded":268,"mime_type":"application/json","magic":"JSON text data","md5":"9cc989d2e211083e0a170316914f1d06","sha1":"392cd18d051f72b887529ac2998da54749f1338f","sha256":"846949c5a40e3ffbb702473e54dfac0646541aa624a844369b6e24e51ddaf96b","sha512":"9c4a9614d8f18da66239b624d6140b3993bfb19758c6f66e769cfe6c8f9bcf7bd0c728fe8bb53a27df86e1cf6e1bc1f33a389f8a474b69a2444b797493bf3781","ssdeep":"","tlshash":"9250000c000c000000c03000f0000000000000000030c030cc0c00c3030c30c0cc0000","first_seen":"2023-04-06T11:36:39Z","last_seen":"2026-09-28T19:13:07.886092Z","times_seen":8206,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":41,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-c.skcrtxr.com/wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f","fqdn":"cdn-c.skcrtxr.com","domain":"skcrtxr.com","tld":"com"},"ip":{"addr":"151.236.81.32","port":443,"asn":57363,"as":"CDNvideo LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://goo.su/hbXzr/","date":"2026-09-28T13:29:07.677Z","timestamp":1790602147677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.skcrtxr.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 00:55:23 GMT","end":"Sun, 11 Oct 2026 00:55:22 GMT"},"fingerprint":{"sha1":"98:EF:3B:71:24:08:A4:ED:08:03:3E:4D:18:F2:FF:23:B2:67:BF:B0","sha256":"A8:B1:58:DC:E8:FE:F3:F7:97:DB:C2:A8:18:A9:77:2A:F1:E7:1C:A3:B5:2E:0B:BD:A1:D1:CD:FF:1E:F9:D9:20"}}},"request":{"raw":"GET /wrapper/js/adserver-vpaid-eng-v4.js?v=s-79883bbc-7b8f-4305-ac8f-e6e7326d0f6f HTTP/1.1\r\nHost: cdn-c.skcrtxr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 28 Sep 2026 13:29:07 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=259200\r\netag: W/\"b2a18943ab7a5eb4dccf94ce4a7ba65d\"\r\nlast-modified: Thu, 24 Sep 2026 08:35:11 GMT\r\nx-amz-request-id: 04cef1213a1319ff\r\ncontent-encoding: gzip\r\nx-cdn-request-id: f8e12d75e5f0b84793ad2d77e9fe98bc\r\nx-cdn-edge-id: 2009\r\nx-cdn-edge-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190091,"size_decoded":58853,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b2a18943ab7a5eb4dccf94ce4a7ba65d","sha1":"4e9649c9ded068ebab5450fc01e8e219a4fab87e","sha256":"31135c3c3439a66a081057a00d9a1276bc3fb98a031a07149995e8a6d855be62","sha512":"f434a793629e7744c30298af6a96ef4627755529c21a8a01f580c723772fd961ebafe6e3c1dcdd2fe1fd7a092c1fd0ceb419f9a9f2415ba4f75a0874998599ca","ssdeep":"3072:QCeuNLCB20XEoQWjZ5DAQ47GK8Y9KnRTp0oe2hPP5/vLugzdxRveg2lSZfW7HuBP:Ku5C1XEoVZRAQ47GK8Y9KnRTpLe2hPhz","tlshash":"aa043bccb2d6706243a761b5407f560bb23a6a89740c8420f169d8e97cb8e4e537bf7d","first_seen":"2026-09-25T00:39:36.123835Z","last_seen":"2026-09-28T13:30:08.546402Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}