{"report_id":"2303d23e-bc32-48e8-95c7-aee68e79cf23","version":0,"status":"done","tags":[],"date":"2026-10-10T22:14:31Z","url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"title":"56q.ru","dom":{"size":11543,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5694)","md5":"357537a2a3d33183547af3c144e36684","sha1":"ebabf04a9155eb267f57269caf73d16b3632aa96","sha256":"6e4ec68d84163fdc391a01a50da87ba6d6a2d81bafd19c29c2af8c69650d4bf3","sha512":"51dbb34b4478594b6557672c08748ef56734f826cfbe7dd2ce195e1f8d01710df5860e83d8a09051a3da213705f1c152637a1aa844ff2b8ad2bfbf4903cb8165","ssdeep":"192:HgAitNqa586VrVKVJTf/N7gEaudy5UNgbFquATD+/kTRGerCyL5TV9qq:jYca5bRsF7vL4+zDlnr/ZF","tlshash":"9c3276a10416f07f0a037af9e27ebf4c74da00adda869900fafc05942bd1ee1d665739","dom_hash":"domhash4f72511d776b914c704ec8c7f638902d","first_seen":"2026-10-10T22:14:45.803394Z","last_seen":"2026-10-10T22:14:45.803394Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:14:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"yandex.ru","ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-10-08T09:49:59.089795Z","alert_count":0,"request_count":1,"received_data":2846,"sent_data":5602,"comment":"","tags":null,"fingerprints":null},{"fqdn":"56q.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":314219,"sent_data":2627,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"www.reg.ru","ip":{"addr":"194.67.72.31","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":279116,"first_seen":"2012-05-30T11:53:54Z","last_seen":"2026-10-10T18:33:04.283604Z","alert_count":0,"request_count":1,"received_data":362,"sent_data":512,"comment":"","tags":null,"fingerprints":null},{"fqdn":"files.reg.ru","ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":5588631,"first_seen":"2022-11-17T08:46:40Z","last_seen":"2026-10-04T05:50:24.676245Z","alert_count":0,"request_count":2,"received_data":206429,"sent_data":997,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-10-05T17:37:07.875589Z","alert_count":0,"request_count":9,"received_data":1574272,"sent_data":4299,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"56q.ru/parking-rdap-auto.js","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"daacb0eadbbe89b15a54f55858a487ee","sha1":"871c07c2fc8fed3b0d3e9484b829e87c25c87a49","sha256":"48883fa5b4644faa17ff9ff6d093f8712df13bf9ec08fe8d707b7fe1355ab4b6","sha512":"e38ceb363ddb465357517d89c00216855f3efe388890dd89a3788ae5edf558e66c7f1f41f22a387e313bf63afafc5c5dc306160ff98abee00ae388429000a1a4","ssdeep":"384:2oDRuENCSoVeV56kz4DAClPb93ZC8ompYA+MJlsNjD8ZubaSsOFxbnUI:wkcAClbJl2D8Z0a7OFxbnR","tlshash":"5962b98078f61e6d27f215d6590b0dc2e4174a043c558c84e78bf572baedc3f917ab2a","size":14578,"data":"","first_seen":"2023-06-30T16:30:07Z","last_seen":"2026-10-11T03:09:32.271324Z","times_seen":1558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c49d56f44059c342bf0c1861ae3b6904","sha1":"9778326eb13bb7caf7272efb71d0e3262676326f","sha256":"466c504ae63ff78f98f291ab8d7fcc10a1e10b29c22251ba746e326d27fee79f","sha512":"5c1cee5e18a0eb6c6cac6aa0c75a6b50af2b994a9e75a50cd361c36d6e8059f081f2b363e425cd993d7673c5af8660959e39f1551cf67d76ecb16247ff5238b0","ssdeep":"","tlshash":"6790026418809c585d251e01631aae045ad454424118a8518145242224451025580179","size":46,"data":"","first_seen":"2023-04-18T10:46:20Z","last_seen":"2026-10-11T03:09:32.319815Z","times_seen":1535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bae51b8e92fcd4a4ae6d8007b20907b","sha1":"2d349dcc80d19591a083ac2989fa2b941e6e7001","sha256":"d8a0560358c51b493362768b5e550e2a0f7e5403e9a5e58f37e0eb28ab75c594","sha512":"965511c40a366a367bcd31fcde5ff53ba352eea23c004732a706f9e90fee8b03473b7253a441febd3f64bdab4c0b883d34bfa7475fa1f1c21b048beb6dea852a","ssdeep":"","tlshash":"39a02208a020220888a230b2c2b3f0280aab000c0c088a0203020008080200b8088afe","size":60,"data":"","first_seen":"2023-03-07T01:15:28Z","last_seen":"2026-10-11T08:54:53.185851Z","times_seen":2980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-10-11T06:01:58.119579Z","times_seen":15865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"15c4089d1e32973c5727325e1076c386","sha1":"097c486112fd84a3b3975c91c72891a9e5246950","sha256":"e7ae699b7fef5d8d20b096bcf7c379698dbe6a7c4afca57af7124979bd20a2a7","sha512":"dad4407274ac4d55f7b33a8d0d757b3678de7085eea62e3e55ff908a248678dc28ade83bc3e7b87667ae792703c3123f01f3a330a617f8d4ab416648673a0bb3","ssdeep":"","tlshash":"3ed012176671257501936010581c041d16520153574c45547f0c301d2bec11a269669c","size":241,"data":"","first_seen":"2025-12-01T21:25:25.735676Z","last_seen":"2026-10-11T08:54:53.199993Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b996d8de5e646b3a7e7745a7f1737c5","sha1":"1b750e2b2ff677f1bd05948abef62949e4334fea","sha256":"b940b39f6594e28519acdad33bba401bfcc0d2e33f542b331ac53376f06fbede","sha512":"3ecc891cca7cbd65d9d05498351fbf2e381cb6bece3458f0c58aea896982fdbff0a31578a4a4d8ffceaf13c7a2ecd011565b659c2f52ca799b80300bba06dc23","ssdeep":"","tlshash":"be11d8449db7406c044375b6d66b631461d6d127952ed808fc4cf948af50b6c3ea6fbc","size":925,"data":"","first_seen":"2026-10-10T22:14:45.846494Z","last_seen":"2026-10-10T22:14:45.846494Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1274676156a81179aad20036a7c71863","sha1":"d89fb43ec99de2e52dc481060a5f4d792d252a85","sha256":"40f585116328e398f6272742628cd84093ebc1a71e1740c134467e135fdc323d","sha512":"78b8810e4ba03e242ee4428394df1a2dda3a1f400b70ee1abda5d48e2543bc1e08e8e148904ab98750b65f27f608542f3ff3c761f142862040114bc86f7947d8","ssdeep":"","tlshash":"4d11896c28a5012cd6f37269a9d87280381a1107aaa1d408fa5c64040fe0c39aa75fdc","size":892,"data":"","first_seen":"2026-10-10T22:14:45.84806Z","last_seen":"2026-10-10T22:14:45.84806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6357d37a3edcc55461f4e2f0e501316c","sha1":"87ad2975e234cb0cdf779750962c55691b95de40","sha256":"14d02a3502d07296225450c5b4f8eeee501864367bb3885c7bef31763ad2d634","sha512":"fe8e301537d2e6c63e52e941a0c2858f1a7d67cd3824809fd00b3196a15a0a8d78bc3effe3465a1599f3d374c9bbe68b7362a6eb7eb50dc1d1ee14751ade9b59","ssdeep":"","tlshash":"1cf00ea53cdc84398337102267bba2487479a93a2c4afc15f54cc4812f99efc18bb98c","size":530,"data":"","first_seen":"2024-12-31T07:10:36.5379Z","last_seen":"2026-10-11T08:54:53.212935Z","times_seen":2594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbdbe8d2df2e35c10b3e74c4db234642","sha1":"0b97786e6d44be29eee2b66b284a19367efe8492","sha256":"6f51ca58fa7ace48c9208200af7dfe54b050f33ce1de67595558d73a47bef057","sha512":"689c535b09d2d4b2f4a990966fb4c1fe49233c4d80d53bb377e0db30f4550dba2d71fb622f91f7da79e07b052955c80105c8c4177f12233cc3c509d3e21357f7","ssdeep":"192:OKtzpZx3LtRxJKEJ0jgrjtEBol6nRPlqfYoxcP6iYox7S7L4M8OAXY:OKRXRyEJ08ruoUnR9qwgcug7S7sMXAXY","tlshash":"e412a9f432a1b8d411fb69d1086f1577017e7e06b80e295f872299d2ad244ce60f6fee","size":9291,"data":"","first_seen":"2026-09-23T08:35:42.861568Z","last_seen":"2026-10-11T08:54:53.126529Z","times_seen":781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/5b119ff3e89d6c46.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"06e6a541b86f9be1880f2fc1e58fb464","sha1":"4eda8bd709e442fcdeb77580d5f16d1a5b1c00ea","sha256":"c9b08a5f035a4785d52011eb10ead63f0f2d0c01b1e222843a86b95ad07c4c85","sha512":"433af57adff38c9401dd7528eae8faa798292928dce83c49a32dad236fd9eced14ade620dc630f98fbe6ec4b31ed4cbd4908a027dadd247970f2bc6655a91a5b","ssdeep":"768:FPSGS2XuKTeA/lDNxC3LbAalkXgHNYbFZvrmuZrdz1nkIyhybndJv7jCauhrC4mw:eay0j4sgtIQIb+hF0Y","tlshash":"e503c58db1e1f0a14697a1b0813f210ff33b6895a8199480f765e4e17cba99f6073f6d","size":38042,"data":"","first_seen":"2026-10-08T13:10:07.072862Z","last_seen":"2026-10-11T08:54:53.137738Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/manifest.js","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d276783c3eff75365ec2af2eb275b4dc","sha1":"13be1a62346242bc92b7b2d61cbfc54556d69505","sha256":"c1e2076faa42b9dabb88ded60783c45dca8163ecc05cb63b375275b67bb82edb","sha512":"21f9b5025cf0f942c04f315a01dfad3148e525328e8162ef6256f234085f43cf7f627efd0aeedc241ff7e45efaad4ecd041d8fbfbe62a36d475789eed85a3d87","ssdeep":"96:9s2RDpVjtVzQuHLn6h7u1ixk8LDk1y7VAU20Jc8De+/:9Dp7Vrrn6h7u187VbMa","tlshash":"8c91b7ba2354e5bb269009d05a2ed197fa157037252b94f0ab1bdc76f87cec08466b70","size":4278,"data":"","first_seen":"2024-10-13T12:37:54.659345Z","last_seen":"2026-10-11T08:54:53.169883Z","times_seen":2899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"5b057d8aa1e34436f8d5fd111b6491ce","sha1":"02b8cad77321003b4b409e66834f858541576457","sha256":"4ab09ea291b2663ca5bbf7dc04757e161bdbb7ce39a4add0865e5fd5458db231","sha512":"0355002a1535fe31144fd551611d520d2a7189ec7e210962ce3b9ec8f2a055e39a6a5c5b189534e90cb50c0a6c811a2f84a6f12a6e1a6a05719c51aa878c9187","ssdeep":"","tlshash":"d18004043c445cc45c1405013373d3053f5c05051105f4d1c5d3344330411574f1017c","size":38,"data":"","first_seen":"2023-04-11T09:22:34Z","last_seen":"2026-10-11T08:54:53.177858Z","times_seen":2961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3478a1873aabe97108aeb933a4ac7a57","sha1":"a06f36d8a0abd20a720c1b4e9b45ded93a314112","sha256":"d50dd0e2000021cf624852d7b8c742ff2d597c0f5338e56c215cf720af051ca0","sha512":"cc4699d7b9a4cde3af942560d2554f84d361d0b7634469ccf6b6081a41743549ee3f31691a44aa84ebd7985df434ba04f97ea453f8af33822a419fc203b2b715","ssdeep":"6144:mWRtA6MSwjH6byusCZ9MqrXwonQeMUjtPWqrEZfs9tJqIh3F05mWKIJdzOqvNhTN:PzWcLqMbTvbdM","tlshash":"3794c59db1e2b0a143e765a4803f560bf23b695578099090e325e9e1bcbc99f9133f3d","size":433353,"data":"","first_seen":"2026-10-10T22:14:45.852076Z","last_seen":"2026-10-10T22:14:45.852076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"223df5584c6ae20363251af3f42518ca","sha1":"a9fc6f70a65fc4af507feebef6435dc898bcac3a","sha256":"82839328e0573e00fd00bee3854b0f53cd9c83681558a65e7206f5d75cb1e4f8","sha512":"f3fdf1f8a2432d8f691d16af1b08cdab01daad5f39afe49d10b9f1b3e54e4427d3c99f452070468dad5e565715a4578badd0f1cce1583132a9cb0028348bb518","ssdeep":"","tlshash":"1890040c5c40dc7c5c1415433333df44175c05033505dd5141d1141430041434d0057c","size":42,"data":"","first_seen":"2023-04-11T09:22:34Z","last_seen":"2026-10-11T08:54:53.217698Z","times_seen":2940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/7c0e6a5b9dc0bd9b.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a476a805523ab7237540db6469b4689","sha1":"c3281ab59978957b7c873ee72cd04f3bc7c65709","sha256":"67a5a1601a381c7098a7b7ac75ab7d9751048f1d177e7759e1bf9c4f70357d3d","sha512":"78bf5fb2e55df698f9a1c13f19688e06e72ea86fa3c965a0527033695f8dfd08b7421db46aa3e4dbc5af3e26d2422f2978139cc4fe2d95742d6b8daffcaf6862","ssdeep":"1536:421aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:qN1dfXIQkN+nF/JH9zf6","tlshash":"755475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","size":305380,"data":"","first_seen":"2026-10-08T13:10:06.766222Z","last_seen":"2026-10-11T08:54:53.139624Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/head-scripts.js","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e2d9b76e9458363d6f965e0f4270960","sha1":"cf4eda3788fc9b76ab694233838018075713e1a6","sha256":"951819b4acc883fa5e8e3bf3ade8bf32e79bc7895de07f2665097b8c15ccb748","sha512":"37a79eeb3bc0b14c36e2ef6e836a37a511141c2265076c8f51f15477e166995c0462c1f1c610ac31980f1d1d89abc460a80fecbb3066a6e221ac4019a0b84870","ssdeep":"768:hZgOQuhhf/wNvdVnR4I/6rorELrKN260RJB9:X3l9/wlRCMUrp","tlshash":"be839344faf0aea51679a111b36bc4c3f967425090e3841466cef9e4ec6f53e71a3b2c","size":85185,"data":"","first_seen":"2024-10-13T12:37:54.663849Z","last_seen":"2026-10-11T08:54:53.142664Z","times_seen":2888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","size":49523,"data":"","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-10-11T08:54:53.173965Z","times_seen":2918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/bcefbd700c4cfe67.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3aed675fbd61a95df29f39978515788","sha1":"f97b072d67dc2646c5dbd65db86874e414dea356","sha256":"13393f80bcf8ce12e99d0d8dc9325106809634170e943dcc28f2bf4af95f0916","sha512":"b9b05476d7259e28562104d36b47f73ff14e87f09b2b2de2515dc03bd7cbeec16e85ac01022f4cce8538f25d8d5a8a69f751c24ee148747fe952c333c0ed6d6a","ssdeep":"3072:2zIJjYLZWB6QU0Qy5lEiTCZW3hUGWiWB8l+rajDj5BcZa7MfwpQXuchqM7bGrMFq:2zIJ0WB6QU0Qy5lEiTCZW3hUGWiWB88a","tlshash":"a7e3c78db2e1b4b142d7a0f5503f660ef33a6459a4098494b72de9e16fb898e4137f3c","size":155567,"data":"","first_seen":"2026-10-08T13:10:07.171431Z","last_seen":"2026-10-11T08:54:53.141378Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2da940479dd1331d4761b4f6483c35aa","sha1":"f68170113f89301d8b4d914c5f8cfe7f847a9e55","sha256":"89b6a185ee2ce3a6cfb65aa4705ecf096434aaa2d8dcb55fbaff3cd7744d0604","sha512":"d0769783af7f21cfc03bc8cdb4c8bb2b9a0ec2a6136bcf1915b0f53acea5855b63216591fc8610460a231ad37c9a8eeae253bcb5244cb01b127eb275dd6175ef","ssdeep":"1536:1BD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0O:35SGX7g8BYlyp2z2BWoy5XiN","tlshash":"7e34c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","size":249149,"data":"","first_seen":"2026-09-23T08:35:42.799207Z","last_seen":"2026-10-11T08:54:53.172068Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/e793d8b6efa50c4d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"407f79bed08ca61defdd055ba2ea10b9","sha1":"0f65896d14e66fe2cfae35f4327adc3c57c3cf0f","sha256":"0ad07f45173787915b5160ba684d649ce3556fb004e82e19828c05d5684eaba6","sha512":"1617af2e96130abd3a695bba707611deb2d3a1a82c208e21e39cd2299459b3f90f20910a4fd43a372493b83b680c89b7fd1c71329cc7c62636d1fb933401993e","ssdeep":"12288:8zIpE83UsOSnh0zsRYfpVGkHuAI8Plj9gvngOgi1nhBPnzBL:YIP3UsOSnh4sRYfpVGkHuAI8Plj9gvnr","tlshash":"8bf4e989f5e1b07042e7a0f9803f150ff23a7a15550980a4f62ae8e57eb899e5137f3d","size":728429,"data":"","first_seen":"2026-10-08T13:10:07.042671Z","last_seen":"2026-10-11T08:54:53.176277Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/c7e788da26a0731e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"52d107f01fbb7e3e3973988ba1a4cca0","sha1":"8bd5f7c4b97348112f89dcd4940f14df1aa41de1","sha256":"98522c78d353622ba66d74d4fd85bee397796be077dfcd6f8a63b42407771c57","sha512":"2312e73dc10829bf17dfb7ebda903ac2ed13594719a128f5a0848f4a3b5c7374bfba855c15c3fb4d90d3117690235bc1ddb5be007d32bae5fb150bc6b068c650","ssdeep":"96:xILwTOO4XfL9Zy3EiQY+bK+dgJ91v39xGgSbYeaXExTv1J0a2qo6ZXCw2B:xILUMZaf0K+KJvPzvS8R6v1JzLo6ZU","tlshash":"33a10aed324275f48bc5109094bea641f5bd5d026c0ba891e02ac0512db5fea60dbffe","size":4829,"data":"","first_seen":"2026-10-08T13:10:07.0714Z","last_seen":"2026-10-11T08:54:53.143974Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/5b119ff3e89d6c46.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.110Z","timestamp":1791670433110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307259/5b119ff3e89d6c46.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 10973\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nexpires: Tue, 10 Oct 2056 03:11:23 GMT\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 07 Oct 2026 17:39:06 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"7a05ada6fc9187ee7ad45989bb80c29b\"\r\ntiming-allow-origin: *\r\nx-strm-log-split: 6\r\nx-request-id: 9c6889c9ebf16087\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38042,"size_decoded":11868,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38000)","md5":"06e6a541b86f9be1880f2fc1e58fb464","sha1":"4eda8bd709e442fcdeb77580d5f16d1a5b1c00ea","sha256":"c9b08a5f035a4785d52011eb10ead63f0f2d0c01b1e222843a86b95ad07c4c85","sha512":"433af57adff38c9401dd7528eae8faa798292928dce83c49a32dad236fd9eced14ade620dc630f98fbe6ec4b31ed4cbd4908a027dadd247970f2bc6655a91a5b","ssdeep":"768:FPSGS2XuKTeA/lDNxC3LbAalkXgHNYbFZvrmuZrdz1nkIyhybndJv7jCauhrC4mw:eay0j4sgtIQIb+hF0Y","tlshash":"e503c58db1e1f0a14697a1b0813f210ff33b6895a8199480f765e4e17cba99f6073f6d","first_seen":"2026-10-08T13:10:07.072862Z","last_seen":"2026-10-11T08:54:53.137738Z","times_seen":128,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":51,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/bcefbd700c4cfe67.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.118Z","timestamp":1791670433118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307259/bcefbd700c4cfe67.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 31664\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Tue, 10 Oct 2056 02:11:24 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlast-modified: Wed, 07 Oct 2026 17:39:06 GMT\r\netag: \"ca4ae444db5411180f408b2d7bedb05d\"\r\nx-strm-log-split: 2\r\nx-request-id: 415ba03de14950fd\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155567,"size_decoded":32559,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"a3aed675fbd61a95df29f39978515788","sha1":"f97b072d67dc2646c5dbd65db86874e414dea356","sha256":"13393f80bcf8ce12e99d0d8dc9325106809634170e943dcc28f2bf4af95f0916","sha512":"b9b05476d7259e28562104d36b47f73ff14e87f09b2b2de2515dc03bd7cbeec16e85ac01022f4cce8538f25d8d5a8a69f751c24ee148747fe952c333c0ed6d6a","ssdeep":"3072:2zIJjYLZWB6QU0Qy5lEiTCZW3hUGWiWB8l+rajDj5BcZa7MfwpQXuchqM7bGrMFq:2zIJ0WB6QU0Qy5lEiTCZW3hUGWiWB88a","tlshash":"a7e3c78db2e1b4b142d7a0f5503f660ef33a6459a4098494b72de9e16fb898e4137f3c","first_seen":"2026-10-08T13:10:07.171431Z","last_seen":"2026-10-11T08:54:53.141378Z","times_seen":128,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/meta/17817361?target-ref=http%3A%2F%2F56q.ru%2F\u0026pcode-version=1307259\u0026pcodever=1307259\u0026comboblock-unencoded-vast=1\u0026ad-session-id=9806261791670433152\u0026target-id=52398081\u0026pcode-test-ids=1387855%2C0%2C91%3B1726809%2C0%2C41%3B1716708%2C0%2C37%3B1471934%2C0%2C56%3B1704154%2C0%2C23\u0026pcode-uid=4739682601791670432\u0026pcode-flags-map=eJzlV21zmkoY%2FS2X9EO8CQnLO35xtrhGJggU0CajdmejG2VEcBBN0%2BB%2FvwNoR0yr6bS9L3O%2F6L54zp7n2Wd3PS%2FMPfQcz4fvTdRDLlPvvzBrEq4oU2fAlSarV0DiZYW5ZFK6TI1xPqzwQNI4ZjO8ZHrQwyUY95DrGbZVZRA4IKtyBS2IiiipBbppeAW0iTzfte8xuvORa0ET6y6CvtFDGDZx10Mu1k3bQxj1kOVXFqCfFxVyUdR4hS%2FIb5CFXGhiz3ehj27u8UfDb2Pbgbrh31dIHkkYPpDRDMdR%2BFyhk0QAgFbQtYw7%2FNGwmvZHbNm2k5MfVSKJkiKXSkwEmy3b7Xi4B02jCX2EnbZtoZN4sVw6R99h2ISOj1zcdc3jQFnWJFACu77tmFBHHWT52LB69i3C0PSxDk3zPdRvjxOpEq9JBRGyin2q8ulQbyOst9EJHhkIIhC%2FlsuWqwm9Nm7ZLm4ZZsf2dNtB2HHtu%2FsTXJq4V3p57eKe0UQ2RtaNYaG8A%2BFxCoEXeO5QjgE9bHQcF3l5EeOeAXEPei0Xdo5vkywCIAkF23uzi0zDui3ShF1kNQ9KpP8yYMJ4RNIgjgZMfcB8mqbpYlkfDAaD6%2BLj6ekp%2F75aJGQ9JkUzWRUz5416RJ%2BWRbvWOO8T9svwolZO5Z%2FjixpbjHKsxu5mGueNgrzR%2F3Q2%2FLOWd8%2Bu%2Fqw13g2YywHzEMajWaHDZSELRI4HqiCyvDJgNpdvlpqQ%2BUNIkwOt43ieLZK4lLGVhdnhxVf8%2BILtf7punG2Hcmn9xtmwUPdqreUo%2BN5aEzL%2BMqXpc9GRZKDIgiCxMzKLn1kSjZM4GLOz1SJI2fWcLtOYjeJ1PInZYDGNI8oChbIyuxqT0TR6nrJrkgQkSuP1j6dPERVV42VWfFP2dnv5rZB%2BNF0%2Fr%2Ba88cdjEJFoRL%2Bn6QtZToOUlOVX7O8ojZPskcyD8DnbgrNZEMVZGDzSbDkKsuUiTtIsTciahtkTpTMajWv%2FnqDp7oC9FjOn44DsMnPeqJNVOo2TLCWT2rYkrrN3tdqh5l8ttlHZovruxNUakrCvNqWf053YURLMg4iEFZl7soq0voibHSfXB6w2zECfY%2Flh7WC0D%2FhhAciEPge20yWDunlTlIqgKUBgAZDeFuUypUkYpGROZuCbIU7iJB4XLZ7j5aLBqWW%2FyMm1IouaCID8Y%2FLkv0%2BepAoKz%2F0z8miU0iQlQTSnUXpCpibz2u%2FJ4mwVpqskDuNJUHniHsJ4styrMXmzdxO8SYkoaxzPitrP6fj6zv62lXcnOZ3SdRyM6JxM9gU85pdtHL1698u08Bv2oLE9zll5WeU%2Fz5aUJKNptiATmpFFkC0Sug7oU3mEX11crwZOXV68JnISywvCL4n3gZLV9gX%2FP4SbP5DL9Dmk%2F5GIhwd%2FeHlVLe1F03Owd2s42G61PFQ1Zo8PWOKqrpGTpK0NqPoIz4KO17Z9bNo32EGufmDyeK5CA3hBkwuarofwhy5y77GHTKT7uZmwXey1Ye7SmnYHu7Z93C8qQJEEcc9luehDF3n%2BSZel8KK2BXZgbs5y%2BwBvEHahb9jYt03kQks%2Fbh4UXubU0jw4ut1EJ6y0wkvaAV7hxBKfO6HX%2Fp1jgcRrhyBZ5XJjufkL2K3xTg%3D%3D\u0026pcode-icookie=f9ulKCCZTiyxaSVWCW9VDZMPCiF1W3KAMm4bI%2F%2FxX80aPWOrkj6NyLLii0e3owQ39NKskgeCMxRkhDGEmgmluPdsyeA%3D\u0026disable-base64=1\u0026imp-id=2\u0026banner-lang=ru\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=349094941818882\u0026tga-with-creatives=1\u0026top-ancestor=http%3A%2F%2F56q.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A800%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A240%2C%22top%22%3A1486%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=1888\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKntJAkue8B1EswXnpbly98VWyE1C_9-SVcT12Xds-6TdtqK8IGpsRP7l6Wf_2-fEXSdWH1N_A6dWF_gD4RwBXITNu6NaniVMILn3VjojExg8wMMi8amSON1BpZ0hVqjRM7UaIGBxbIlJ5Eoy2wGm2hVAYKkjyNuuuCRaXM_C5P8gKsckj8ROV3jzQO5dNkRFQp5aoolsscqoJx4qk1ihimoWYhqCpUWRg4W8NJQDrUDUpjN24TNk7eUJqoEh8JrQkqUSU8guCA7IbeREuDjoyp6cxKURySHgLMhZ6yElcCjbY_4uMyGNhoGRw6ec_9VObfMjhqjU-HiCJxUy_2nTgI4ZFCEyBjNtY2G2sI8vWB6kP36R6olDhOELoZDK_7fuL9EOPjhS63kFVpEAWeykvIEi8J04RJ78YgJqow8KQ9ypHWQNIuDoARK4zV_a5QLOmoe_L_B4osiN25wJjw_msouR4FDwwVgbTH4f8B8sdCbMK84jV2xa0EeUO13qA2-kOPskyve06crnHIYBsTXV_kNlD5fCLXdZWxPJIj7d76SZ3AN-RiG2-Dsk5cJ2xSBJWo8QpcrveSDLbByJho1_GCKytCuWVpIPV7umYI-A-_ZR4_TkPTaEt5vf0wuN_3AmmQuRJlKRFl0leLQ5Uy-BHSa1q4cUO6raFW4P8Fp2I3CPmYEUbFLsay3TEvwx-Sz3MU0wndTJ8s6Y7ES1xLDRtQj1_UMB47r2I97om2YtGLuCT4fNF_j7Di5QvBqCX-gfDmhqnGGQ3lrWU3UVEy6CdKuPDsSoiMSUERkGdvLRk-ZYl2g6cxcMYvATYBQCv-cxI2_jgRfROs4nyzsfuCtepHaNOz7O0WzpaLisMfZ8WdGMcgH0OD8N4JApSoAXuVPQ-huIGp2E8bbQ6wUxjlFzbux_JJo9y1xPvOHHBCnFN-5D5_7HEIijlxtlWyJjTBO6jGwLVroGOXCC2i78W3FRLjJjokEcOEjsZKE0UskVoKy6TbGDNa100WuM57vxnqQ8YoUVSsMqNGteo60ezFaaJTrfdf-6aVa5SM5FSqLg0k4R8AG9yLPNfvoUU8lXUv8wKJMkqysDsxzNe-B0_8wEq1npCpBVFC9pAeWXTsVvByxwXiCoIJFaNS0LSoUMfECW_goqIU4w7dyXBzUEEjH_uguIvT7iQK-O-kUcBYzi8W-wrCfGwRdTE8SlyhXzuhbY83rsV_5sSNWyQ0r4ptmcK2FeuqyKvQXpC9yRCNWkK0FnXHYZWNPRgSje3gVqyC1S2k4qy2v8opr1l7fv5jvsTvCwax_L3pvsufpO3Zox7_0yoZxgyUUZCS0mYFvw7YzeyAKMVoGNhT2g0f8o_l2EKbYD56SObLu_e0eAO4VeYtfy9863BGTPMGQ-xjv94dTlM07hMOQe5duKzk-PaTVcXTNU3f8gRaY-cjWFF2OjcjAI6fEefiyqGxk0gN17lu9KE-x5GW9-DjL5PWHuzCvJOTg5GNgCEeWY__J_lF8FvqPaq4-puvZETGhJUzZ3jdnDNtnxbuCECYhz_6F4AeEUpwASSYgXhIDFuBkEkxedBzbGV_EGc4J0U9sRKsxXkhyj7alE8MCD3Xa08fo_9ne-h41FzKkSoLHk2k38ncMG02n3pSV8YrCffMHI7NfXKm2BOnzhvkgZq72kVY1BRuvkq3Y1RUaIeuYC063Mx76R9vc9ZFRxoQUtRVKNbu2ZIv5AYnm4niH16wqZeNn94zHO89Pxtb4WgHOZigZ5O6qaRTVECJiOCz-KCOuDraYFiQ5gJTrvMnClYB21sGtRt5SvCpPKfjjZt4857Aiolb_t6F7QYO1s7CBN3VLgjBgtUuQPgB-Q%3D%3D\u0026uniformat=true\u0026callback=Ya%5B1821557295698%5D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.241Z","timestamp":1791670433241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/meta/17817361?target-ref=http%3A%2F%2F56q.ru%2F\u0026pcode-version=1307259\u0026pcodever=1307259\u0026comboblock-unencoded-vast=1\u0026ad-session-id=9806261791670433152\u0026target-id=52398081\u0026pcode-test-ids=1387855%2C0%2C91%3B1726809%2C0%2C41%3B1716708%2C0%2C37%3B1471934%2C0%2C56%3B1704154%2C0%2C23\u0026pcode-uid=4739682601791670432\u0026pcode-flags-map=eJzlV21zmkoY%2FS2X9EO8CQnLO35xtrhGJggU0CajdmejG2VEcBBN0%2BB%2FvwNoR0yr6bS9L3O%2F6L54zp7n2Wd3PS%2FMPfQcz4fvTdRDLlPvvzBrEq4oU2fAlSarV0DiZYW5ZFK6TI1xPqzwQNI4ZjO8ZHrQwyUY95DrGbZVZRA4IKtyBS2IiiipBbppeAW0iTzfte8xuvORa0ET6y6CvtFDGDZx10Mu1k3bQxj1kOVXFqCfFxVyUdR4hS%2FIb5CFXGhiz3ehj27u8UfDb2Pbgbrh31dIHkkYPpDRDMdR%2BFyhk0QAgFbQtYw7%2FNGwmvZHbNm2k5MfVSKJkiKXSkwEmy3b7Xi4B02jCX2EnbZtoZN4sVw6R99h2ISOj1zcdc3jQFnWJFACu77tmFBHHWT52LB69i3C0PSxDk3zPdRvjxOpEq9JBRGyin2q8ulQbyOst9EJHhkIIhC%2FlsuWqwm9Nm7ZLm4ZZsf2dNtB2HHtu%2FsTXJq4V3p57eKe0UQ2RtaNYaG8A%2BFxCoEXeO5QjgE9bHQcF3l5EeOeAXEPei0Xdo5vkywCIAkF23uzi0zDui3ShF1kNQ9KpP8yYMJ4RNIgjgZMfcB8mqbpYlkfDAaD6%2BLj6ekp%2F75aJGQ9JkUzWRUz5416RJ%2BWRbvWOO8T9svwolZO5Z%2FjixpbjHKsxu5mGueNgrzR%2F3Q2%2FLOWd8%2Bu%2Fqw13g2YywHzEMajWaHDZSELRI4HqiCyvDJgNpdvlpqQ%2BUNIkwOt43ieLZK4lLGVhdnhxVf8%2BILtf7punG2Hcmn9xtmwUPdqreUo%2BN5aEzL%2BMqXpc9GRZKDIgiCxMzKLn1kSjZM4GLOz1SJI2fWcLtOYjeJ1PInZYDGNI8oChbIyuxqT0TR6nrJrkgQkSuP1j6dPERVV42VWfFP2dnv5rZB%2BNF0%2Fr%2Ba88cdjEJFoRL%2Bn6QtZToOUlOVX7O8ojZPskcyD8DnbgrNZEMVZGDzSbDkKsuUiTtIsTciahtkTpTMajWv%2FnqDp7oC9FjOn44DsMnPeqJNVOo2TLCWT2rYkrrN3tdqh5l8ttlHZovruxNUakrCvNqWf053YURLMg4iEFZl7soq0voibHSfXB6w2zECfY%2Flh7WC0D%2FhhAciEPge20yWDunlTlIqgKUBgAZDeFuUypUkYpGROZuCbIU7iJB4XLZ7j5aLBqWW%2FyMm1IouaCID8Y%2FLkv0%2BepAoKz%2F0z8miU0iQlQTSnUXpCpibz2u%2FJ4mwVpqskDuNJUHniHsJ4styrMXmzdxO8SYkoaxzPitrP6fj6zv62lXcnOZ3SdRyM6JxM9gU85pdtHL1698u08Bv2oLE9zll5WeU%2Fz5aUJKNptiATmpFFkC0Sug7oU3mEX11crwZOXV68JnISywvCL4n3gZLV9gX%2FP4SbP5DL9Dmk%2F5GIhwd%2FeHlVLe1F03Owd2s42G61PFQ1Zo8PWOKqrpGTpK0NqPoIz4KO17Z9bNo32EGufmDyeK5CA3hBkwuarofwhy5y77GHTKT7uZmwXey1Ye7SmnYHu7Z93C8qQJEEcc9luehDF3n%2BSZel8KK2BXZgbs5y%2BwBvEHahb9jYt03kQks%2Fbh4UXubU0jw4ut1EJ6y0wkvaAV7hxBKfO6HX%2Fp1jgcRrhyBZ5XJjufkL2K3xTg%3D%3D\u0026pcode-icookie=f9ulKCCZTiyxaSVWCW9VDZMPCiF1W3KAMm4bI%2F%2FxX80aPWOrkj6NyLLii0e3owQ39NKskgeCMxRkhDGEmgmluPdsyeA%3D\u0026disable-base64=1\u0026imp-id=2\u0026banner-lang=ru\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=349094941818882\u0026tga-with-creatives=1\u0026top-ancestor=http%3A%2F%2F56q.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A800%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A240%2C%22top%22%3A1486%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=1888\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKntJAkue8B1EswXnpbly98VWyE1C_9-SVcT12Xds-6TdtqK8IGpsRP7l6Wf_2-fEXSdWH1N_A6dWF_gD4RwBXITNu6NaniVMILn3VjojExg8wMMi8amSON1BpZ0hVqjRM7UaIGBxbIlJ5Eoy2wGm2hVAYKkjyNuuuCRaXM_C5P8gKsckj8ROV3jzQO5dNkRFQp5aoolsscqoJx4qk1ihimoWYhqCpUWRg4W8NJQDrUDUpjN24TNk7eUJqoEh8JrQkqUSU8guCA7IbeREuDjoyp6cxKURySHgLMhZ6yElcCjbY_4uMyGNhoGRw6ec_9VObfMjhqjU-HiCJxUy_2nTgI4ZFCEyBjNtY2G2sI8vWB6kP36R6olDhOELoZDK_7fuL9EOPjhS63kFVpEAWeykvIEi8J04RJ78YgJqow8KQ9ypHWQNIuDoARK4zV_a5QLOmoe_L_B4osiN25wJjw_msouR4FDwwVgbTH4f8B8sdCbMK84jV2xa0EeUO13qA2-kOPskyve06crnHIYBsTXV_kNlD5fCLXdZWxPJIj7d76SZ3AN-RiG2-Dsk5cJ2xSBJWo8QpcrveSDLbByJho1_GCKytCuWVpIPV7umYI-A-_ZR4_TkPTaEt5vf0wuN_3AmmQuRJlKRFl0leLQ5Uy-BHSa1q4cUO6raFW4P8Fp2I3CPmYEUbFLsay3TEvwx-Sz3MU0wndTJ8s6Y7ES1xLDRtQj1_UMB47r2I97om2YtGLuCT4fNF_j7Di5QvBqCX-gfDmhqnGGQ3lrWU3UVEy6CdKuPDsSoiMSUERkGdvLRk-ZYl2g6cxcMYvATYBQCv-cxI2_jgRfROs4nyzsfuCtepHaNOz7O0WzpaLisMfZ8WdGMcgH0OD8N4JApSoAXuVPQ-huIGp2E8bbQ6wUxjlFzbux_JJo9y1xPvOHHBCnFN-5D5_7HEIijlxtlWyJjTBO6jGwLVroGOXCC2i78W3FRLjJjokEcOEjsZKE0UskVoKy6TbGDNa100WuM57vxnqQ8YoUVSsMqNGteo60ezFaaJTrfdf-6aVa5SM5FSqLg0k4R8AG9yLPNfvoUU8lXUv8wKJMkqysDsxzNe-B0_8wEq1npCpBVFC9pAeWXTsVvByxwXiCoIJFaNS0LSoUMfECW_goqIU4w7dyXBzUEEjH_uguIvT7iQK-O-kUcBYzi8W-wrCfGwRdTE8SlyhXzuhbY83rsV_5sSNWyQ0r4ptmcK2FeuqyKvQXpC9yRCNWkK0FnXHYZWNPRgSje3gVqyC1S2k4qy2v8opr1l7fv5jvsTvCwax_L3pvsufpO3Zox7_0yoZxgyUUZCS0mYFvw7YzeyAKMVoGNhT2g0f8o_l2EKbYD56SObLu_e0eAO4VeYtfy9863BGTPMGQ-xjv94dTlM07hMOQe5duKzk-PaTVcXTNU3f8gRaY-cjWFF2OjcjAI6fEefiyqGxk0gN17lu9KE-x5GW9-DjL5PWHuzCvJOTg5GNgCEeWY__J_lF8FvqPaq4-puvZETGhJUzZ3jdnDNtnxbuCECYhz_6F4AeEUpwASSYgXhIDFuBkEkxedBzbGV_EGc4J0U9sRKsxXkhyj7alE8MCD3Xa08fo_9ne-h41FzKkSoLHk2k38ncMG02n3pSV8YrCffMHI7NfXKm2BOnzhvkgZq72kVY1BRuvkq3Y1RUaIeuYC063Mx76R9vc9ZFRxoQUtRVKNbu2ZIv5AYnm4niH16wqZeNn94zHO89Pxtb4WgHOZigZ5O6qaRTVECJiOCz-KCOuDraYFiQ5gJTrvMnClYB21sGtRt5SvCpPKfjjZt4857Aiolb_t6F7QYO1s7CBN3VLgjBgtUuQPgB-Q%3D%3D\u0026uniformat=true\u0026callback=Ya%5B1821557295698%5D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: http://56q.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nCookie: pcuid_context=4739682601791670432; pi=dCXamnLq37WUMLBANpsdtWq4YxX1zZ+9gW8N+PvqvJ8ZsVNe9nHp+3pKFzkrXQ3oGAI6W78JN/9xsAXAiSqrtd4YMa0=; i=UtvKa3bCkiYa25E6nw8XdE2GGYpgAJvXdcmiUxw6TzD5u7AeCCBXOPBByyDvH/BzedmLKkmGtFINpVhF4T4Z0piTvOU=; yandexuid=8087846311791670432; yashr=6282556141791670432; bh=YKDxqtYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pcuid_context","value":"4739682601791670432"},{"name":"pi","value":"dCXamnLq37WUMLBANpsdtWq4YxX1zZ+9gW8N+PvqvJ8ZsVNe9nHp+3pKFzkrXQ3oGAI6W78JN/9xsAXAiSqrtd4YMa0="},{"name":"i","value":"UtvKa3bCkiYa25E6nw8XdE2GGYpgAJvXdcmiUxw6TzD5u7AeCCBXOPBByyDvH/BzedmLKkmGtFINpVhF4T4Z0piTvOU="},{"name":"yandexuid","value":"8087846311791670432"},{"name":"yashr","value":"6282556141791670432"},{"name":"bh","value":"YKDxqtYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag=="}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 10 Oct 2026 22:13:53 GMT\r\nuniformat-product-type: None\r\nuniformat: true\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\naccess-control-allow-origin: http://56q.ru\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nexpires: Sat, 10 Oct 2026 22:13:53 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ncontent-security-policy: upgrade-insecure-requests; default-src 'none'; base-uri 'none'; script-src 'report-sample' 'unsafe-inline' 'self' yandex.ru an.yandex.ru api-maps.yandex.ru mc.yandex.ru yastatic.net pcode.yads.tech *.maps.yandex.net; style-src 'unsafe-inline' yastatic.net; img-src 'self' data: avatars.mds.yandex.net favicon.yandex.net *.captcha.yandex.net yastatic.net *.maps.yandex.net *.yandex.ru avatars.yads.tech; media-src blob: strm.yandex.ru *.strm.yandex.net; font-src yastatic.net; connect-src 'self' blob: abs.yandex.ru an.yandex.ru yandex.ru mc.yandex.ru yastatic.net log.strm.yandex.ru display.yads.tech display-logs.yads.tech; frame-src yandexadexchange.net yandex.ru an.yandex.ru; report-uri https://csp.yandex.net/csp?from=yabs\u0026project=yabs\u0026yandex_login=\u0026platform=\r\npragma: no-cache\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-yandex-req-id: 1791670433258196-13499862373098668235-balancer-l7leveler-kubr-yp-klg-39-BAL\r\nset-cookie: yuidss=8087846311791670432; domain=yandex.ru; path=/; expires=Tue, 07-Oct-2036 22:13:53 GMT; SameSite=None; Secure\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"yuidss","value":"8087846311791670432","quoted":false,"path":"/","domain":"yandex.ru","expires":"2036-10-07T22:13:53Z","raw_expires":"Tue, 07-Oct-2036 22:13:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yuidss=8087846311791670432; domain=yandex.ru; path=/; expires=Tue, 07-Oct-2036 22:13:53 GMT; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":688,"size_decoded":2567,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0d235eb6d590f6fe7b022e4c95620e1e","sha1":"078ca4335bb1aa1464334e1c95679a27ea7ba530","sha256":"2124210dfcd6b07fa7ed78fb324ae4064511d052285d3791694833d15627d324","sha512":"259d96fbf16889e09ae964fd6e9a306310f7fc467a64e82ea6735927d108b1089daf02487580676c1178f38f5e7c6e1a4791d33b67e9444edcc192ea8281bec5","ssdeep":"","tlshash":"6401f9996197d88aca430115e2da2b2818ac13b2dfe8c034ecedce1e24ec0c3220c753","first_seen":"2026-10-10T22:14:45.808136Z","last_seen":"2026-10-10T22:14:45.808136Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:13:51.280Z","timestamp":1791670431280,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 56q.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T08:43:28.107066Z","times_seen":19022149,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/parking-rdap-auto.css","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:51.743Z","timestamp":1791670431743,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /parking-rdap-auto.css HTTP/1.1\r\nHost: 56q.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 10 Oct 2026 22:13:51 GMT\r\nContent-Type: text/css\r\nContent-Length: 18958\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-4a0e\"\r\nContent-Encoding: gzip\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: e49599273c9a9cd58a962f1a71e3b0dd\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":183441,"size_decoded":19332,"mime_type":"text/css","magic":"ASCII text, with very long lines (25481)","md5":"f02aa05f29aa86a85baefe0cb2fdd9f5","sha1":"227423a46928013d510160fcf52b527e93b324bc","sha256":"0e92a5c32b01644c566f05118a9d8053901ae650b4af9bed013603ee91825639","sha512":"0b1053931ad3a31c4ced22c432a538c32559d3ea4550ca05955e5cb9127235492ab8489598fe11160c6c9bd673ce81a5981c0ea7097971801cca434c6f7698f3","ssdeep":"384:Hq+8EpHAsL5pCAJLcmoQQ/rtYtmvIX99tB5DlQMCVghifjVmxRkCOd8SwbbjWfVQ:K+Ec+4gibU4bH3lKhd4","tlshash":"62049c064b700c3bd21f1da9d5e7d8c2fb462aa2a2fdc58ffd02f726d15e248672550a","first_seen":"2025-12-01T21:25:25.692819Z","last_seen":"2026-10-11T03:09:32.250337Z","times_seen":747,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/head-scripts.js","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:52.014Z","timestamp":1791670432014,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /head-scripts.js HTTP/1.1\r\nHost: 56q.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 10 Oct 2026 22:13:52 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 19126\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-4ab6\"\r\nContent-Encoding: gzip\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: dc925fd1f2427638199306077042d63a\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85185,"size_decoded":19514,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1406)","md5":"8e2d9b76e9458363d6f965e0f4270960","sha1":"cf4eda3788fc9b76ab694233838018075713e1a6","sha256":"951819b4acc883fa5e8e3bf3ade8bf32e79bc7895de07f2665097b8c15ccb748","sha512":"37a79eeb3bc0b14c36e2ef6e836a37a511141c2265076c8f51f15477e166995c0462c1f1c610ac31980f1d1d89abc460a80fecbb3066a6e221ac4019a0b84870","ssdeep":"768:hZgOQuhhf/wNvdVnR4I/6rorELrKN260RJB9:X3l9/wlRCMUrp","tlshash":"be839344faf0aea51679a111b36bc4c3f967425090e3841466cef9e4ec6f53e71a3b2c","first_seen":"2024-10-13T12:37:54.663849Z","last_seen":"2026-10-11T08:54:53.142664Z","times_seen":2888,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.reg.ru/domain/shop/get_parking_info?dname=56q.ru\u0026rand=0.2044598273701207\u0026callback=ondata","fqdn":"www.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.31","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:52.348Z","timestamp":1791670432348,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /domain/shop/get_parking_info?dname=56q.ru\u0026rand=0.2044598273701207\u0026callback=ondata HTTP/1.1\r\nHost: www.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 194.67.72.31\r\ndate: Sat, 10 Oct 2026 22:13:52 GMT\r\ncontent-length: 13602\r\ncache-control: no-cache\r\nset-cookie: __rh_=dc7c68c0a508534d27b978ed1110fa7c; domain=reg.ru; Path=/; HttpOnly\n__rf_=XEREQgIaHRcEYItRRMcoShjN; domain=reg.ru; Path=/; HttpOnly\n__js_p_=432,2700,0,0,0; Path=/\r\ncontent-type: text/html; charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__rh_","value":"dc7c68c0a508534d27b978ed1110fa7c","quoted":false,"path":"/","domain":"reg.ru","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__rh_=dc7c68c0a508534d27b978ed1110fa7c; domain=reg.ru; Path=/; HttpOnly"},{"name":"__rf_","value":"XEREQgIaHRcEYItRRMcoShjN","quoted":false,"path":"/","domain":"reg.ru","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__rf_=XEREQgIaHRcEYItRRMcoShjN; domain=reg.ru; Path=/; HttpOnly"},{"name":"__js_p_","value":"432,2700,0,0,0","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__js_p_=432,2700,0,0,0; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T08:43:28.107066Z","times_seen":19022149,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/favicon.ico?1","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:52.724Z","timestamp":1791670432724,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico?1 HTTP/1.1\r\nHost: 56q.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 10 Oct 2026 22:13:52 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 14134\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-3736\"\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nX-Request-Id: f817ff79685f580f03e3a942113af9e0\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14134,"size_decoded":14510,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c79cecb75624b00f9e69b603e79bb4bd","sha1":"7f68e4de425b71357d0c569a44cd2848754bb8f8","sha256":"7fccb84339fd382be7267a5cf90e04e8fb96c99c82fecaa4a0ccbb36686bf5bb","sha512":"9d10ad7942269e75627302a7b41315dfac62392360b3f7f5f5d7a97dbe7c0485b48b15805a5c5b4f4af6cdb425a5d1311b92a218fc143cbfe2e2e3b7c6f70e6e","ssdeep":"12:j/qs0e3iiii+7777777777777777777777bOnCezeJ0/tRCX+X9Rrl2lb77oIIIk:jysv7HK7qXauUUUUUUNZ","tlshash":"4a52851c2b9eec0ec3162fba6819d29622757cfa89d045373cf66b1f2af52c55c70264","first_seen":"2023-09-15T16:38:47Z","last_seen":"2026-10-11T03:09:32.293384Z","times_seen":3053,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.102Z","timestamp":1791670433102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-edc4844f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3901\r\nlast-modified: Tue, 22 Sep 2026 17:38:01 GMT\r\nexpires: Tue, 10 Oct 2056 00:12:58 GMT\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"74e142b51efbff939eae6faefe2ab015\"\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-strm-log-split: 1\r\nx-request-id: 96002f8e1baf4f30\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9291,"size_decoded":4795,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9261)","md5":"cbdbe8d2df2e35c10b3e74c4db234642","sha1":"0b97786e6d44be29eee2b66b284a19367efe8492","sha256":"6f51ca58fa7ace48c9208200af7dfe54b050f33ce1de67595558d73a47bef057","sha512":"689c535b09d2d4b2f4a990966fb4c1fe49233c4d80d53bb377e0db30f4550dba2d71fb622f91f7da79e07b052955c80105c8c4177f12233cc3c509d3e21357f7","ssdeep":"192:OKtzpZx3LtRxJKEJ0jgrjtEBol6nRPlqfYoxcP6iYox7S7L4M8OAXY:OKRXRyEJ08ruoUnR9qwgcug7S7sMXAXY","tlshash":"e412a9f432a1b8d411fb69d1086f1577017e7e06b80e295f872299d2ad244ce60f6fee","first_seen":"2026-09-23T08:35:42.861568Z","last_seen":"2026-10-11T08:54:53.126529Z","times_seen":781,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":30,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.107Z","timestamp":1791670433107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://56q.ru/\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\ncache-control: public, max-age=31556952\r\nexpires: Mon, 11 Oct 2027 03:36:28 GMT\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nx-nginx-request-id: 219820fe009144c4\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 7\r\nx-request-id: 1263d06c925833df\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26004,"size_decoded":26903,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-10-11T08:14:17.893599Z","times_seen":31401,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":50,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/7c0e6a5b9dc0bd9b.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.112Z","timestamp":1791670433112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307259/7c0e6a5b9dc0bd9b.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 28055\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"a4196b6d14793a5f5f2ea3a40a1cdcd2\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nlast-modified: Wed, 07 Oct 2026 17:39:06 GMT\r\naccess-control-allow-origin: *\r\nexpires: Tue, 10 Oct 2056 04:41:26 GMT\r\nx-strm-log-split: 4\r\nx-request-id: 88ea8283555692ce\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305380,"size_decoded":28950,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"3a476a805523ab7237540db6469b4689","sha1":"c3281ab59978957b7c873ee72cd04f3bc7c65709","sha256":"67a5a1601a381c7098a7b7ac75ab7d9751048f1d177e7759e1bf9c4f70357d3d","sha512":"78bf5fb2e55df698f9a1c13f19688e06e72ea86fa3c965a0527033695f8dfd08b7421db46aa3e4dbc5af3e26d2422f2978139cc4fe2d95742d6b8daffcaf6862","ssdeep":"1536:421aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:qN1dfXIQkN+nF/JH9zf6","tlshash":"755475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","first_seen":"2026-10-08T13:10:06.766222Z","last_seen":"2026-10-11T08:54:53.139624Z","times_seen":128,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/manifest.js","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:51.744Z","timestamp":1791670431744,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /manifest.js HTTP/1.1\r\nHost: 56q.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 10 Oct 2026 22:13:51 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: W/\"6a02aafa-10b6\"\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: 51c7f3ead71799190be3e926a78c98ba\r\nContent-Encoding: gzip\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4278,"size_decoded":2569,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4278), with no line terminators","md5":"d276783c3eff75365ec2af2eb275b4dc","sha1":"13be1a62346242bc92b7b2d61cbfc54556d69505","sha256":"c1e2076faa42b9dabb88ded60783c45dca8163ecc05cb63b375275b67bb82edb","sha512":"21f9b5025cf0f942c04f315a01dfad3148e525328e8162ef6256f234085f43cf7f627efd0aeedc241ff7e45efaad4ecd041d8fbfbe62a36d475789eed85a3d87","ssdeep":"96:9s2RDpVjtVzQuHLn6h7u1ixk8LDk1y7VAU20Jc8De+/:9Dp7Vrrn6h7u187VbMa","tlshash":"8c91b7ba2354e5bb269009d05a2ed197fa157037252b94f0ab1bdc76f87cec08466b70","first_seen":"2024-10-13T12:37:54.659345Z","last_seen":"2026-10-11T08:54:53.169883Z","times_seen":2899,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-edc4844f.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.114Z","timestamp":1791670433114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs_render-edc4844f.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 45126\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\netag: \"b1c5c7d824d71dde55cecf38bce29d4f\"\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Tue, 22 Sep 2026 17:38:01 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Tue, 10 Oct 2056 04:43:02 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 3\r\nx-request-id: 03fd6e63eb9a251f\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249149,"size_decoded":46021,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65499)","md5":"2da940479dd1331d4761b4f6483c35aa","sha1":"f68170113f89301d8b4d914c5f8cfe7f847a9e55","sha256":"89b6a185ee2ce3a6cfb65aa4705ecf096434aaa2d8dcb55fbaff3cd7744d0604","sha512":"d0769783af7f21cfc03bc8cdb4c8bb2b9a0ec2a6136bcf1915b0f53acea5855b63216591fc8610460a231ad37c9a8eeae253bcb5244cb01b127eb275dd6175ef","ssdeep":"1536:1BD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0O:35SGX7g8BYlyp2z2BWoy5XiN","tlshash":"7e34c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","first_seen":"2026-09-23T08:35:42.799207Z","last_seen":"2026-10-11T08:54:53.172068Z","times_seen":774,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":48,"receive":3,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.117Z","timestamp":1791670433117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /safeframe-bundles/0.89/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11893\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"2e7b6e3fb8d17570cbabde24df196cc6\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nlast-modified: Wed, 15 Jul 2026 12:02:36 GMT\r\naccess-control-allow-origin: *\r\nexpires: Tue, 10 Oct 2056 00:34:11 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-strm-log-split: 6\r\nx-request-id: 3dda7037d0f6ce0f\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49523,"size_decoded":12788,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49523), with no line terminators","md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-10-11T08:54:53.173965Z","times_seen":2918,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/parking-rdap-auto.js","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:52.019Z","timestamp":1791670432019,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /parking-rdap-auto.js HTTP/1.1\r\nHost: 56q.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 10 Oct 2026 22:13:52 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4278\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-10b6\"\r\nContent-Encoding: gzip\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: b0cb62b64dbc746d2c95441eb7f3258b\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14578,"size_decoded":4665,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3635)","md5":"daacb0eadbbe89b15a54f55858a487ee","sha1":"871c07c2fc8fed3b0d3e9484b829e87c25c87a49","sha256":"48883fa5b4644faa17ff9ff6d093f8712df13bf9ec08fe8d707b7fe1355ab4b6","sha512":"e38ceb363ddb465357517d89c00216855f3efe388890dd89a3788ae5edf558e66c7f1f41f22a387e313bf63afafc5c5dc306160ff98abee00ae388429000a1a4","ssdeep":"384:2oDRuENCSoVeV56kz4DAClPb93ZC8ompYA+MJlsNjD8ZubaSsOFxbnUI:wkcAClbJl2D8Z0a7OFxbnR","tlshash":"5962b98078f61e6d27f215d6590b0dc2e4174a043c558c84e78bf572baedc3f917ab2a","first_seen":"2023-06-30T16:30:07Z","last_seen":"2026-10-11T03:09:32.271324Z","times_seen":1558,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-Regular.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:52.282Z","timestamp":1791670432282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 24 Sep 2026 04:43:25 GMT","end":"Sun, 11 Apr 2027 04:43:25 GMT"},"fingerprint":{"sha1":"17:FD:46:6C:2B:CD:21:86:78:33:85:11:D2:E5:98:FE:E0:17:E0:DD","sha256":"D2:C9:82:F7:C4:5B:13:63:9F:E7:2C:11:DD:78:BE:25:15:6A:27:BE:29:60:09:4A:EC:BE:DB:C7:99:BD:33:1E"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:52 GMT\r\ncontent-length: 98868\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://56q.ru\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"dc131113894217b5031000575d9de002\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nx-request-id: c5b7abc332acbfa98bbc283dd0b330ec\r\nexpires: Fri, 01 Oct 2027 22:13:52 GMT\r\ncache-control: max-age=30758400\r\nContent-Type: font/woff2,font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98868,"size_decoded":99746,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-10-11T07:59:04.633762Z","times_seen":30715,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":3,"connect":43,"send":0,"wait":171,"receive":43,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-SemiBold.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:52.284Z","timestamp":1791670432284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 24 Sep 2026 04:43:25 GMT","end":"Sun, 11 Apr 2027 04:43:25 GMT"},"fingerprint":{"sha1":"17:FD:46:6C:2B:CD:21:86:78:33:85:11:D2:E5:98:FE:E0:17:E0:DD","sha256":"D2:C9:82:F7:C4:5B:13:63:9F:E7:2C:11:DD:78:BE:25:15:6A:27:BE:29:60:09:4A:EC:BE:DB:C7:99:BD:33:1E"}}},"request":{"raw":"GET /fonts/inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:52 GMT\r\ncontent-length: 105804\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://56q.ru\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"007ad31a53f4ab3f58ee74f2308482ce\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nx-request-id: da7dd5d12271de4ac2b1852c0fd68373\r\nexpires: Fri, 01 Oct 2027 22:13:52 GMT\r\ncache-control: max-age=30758400\r\nContent-Type: font/woff2,font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105804,"size_decoded":106683,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105804, version 1.0","md5":"007ad31a53f4ab3f58ee74f2308482ce","sha1":"dfa9f8f3d79bf8a0001fe72eeadad0490cba59cc","sha256":"152261291c938aa5aad6a56d52b47ffcb893d1c0387e76d7f270a7382ff786d5","sha512":"48aef263aca876ba4db5a596fbb8332524d6b440a8a516e1baa7899f2f1da0e1c44452d0380869ec455d27a6e0b931210b1fb669b36e36914ca27235f34e8558","ssdeep":"3072:wo/8sikhizn8CQRxZ9UXsfH0K1yjewt8G5VYqLS8b:a5z3iHCAHjaJtZ5dLS8b","tlshash":"6fa312cab961eaecd2b1d42806545efaacf3eff0c1e315225697014898accd35ed4f84","first_seen":"2023-04-12T20:55:47Z","last_seen":"2026-10-11T07:59:04.947086Z","times_seen":22538,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":2,"connect":43,"send":0,"wait":46,"receive":129,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/c7e788da26a0731e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.105Z","timestamp":1791670433105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307259/c7e788da26a0731e.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1982\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 07 Oct 2026 17:39:06 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"382381456c04afca1bbb4eea20e62826\"\r\nexpires: Tue, 10 Oct 2056 04:41:26 GMT\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nx-strm-log-split: 3\r\nx-request-id: 3e12f8a236f9dd5c\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4829,"size_decoded":2876,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4790)","md5":"52d107f01fbb7e3e3973988ba1a4cca0","sha1":"8bd5f7c4b97348112f89dcd4940f14df1aa41de1","sha256":"98522c78d353622ba66d74d4fd85bee397796be077dfcd6f8a63b42407771c57","sha512":"2312e73dc10829bf17dfb7ebda903ac2ed13594719a128f5a0848f4a3b5c7374bfba855c15c3fb4d90d3117690235bc1ddb5be007d32bae5fb150bc6b068c650","ssdeep":"96:xILwTOO4XfL9Zy3EiQY+bK+dgJ91v39xGgSbYeaXExTv1J0a2qo6ZXCw2B:xILUMZaf0K+KJvPzvS8R6v1JzLo6ZU","tlshash":"33a10aed324275f48bc5109094bea641f5bd5d026c0ba891e02ac0512db5fea60dbffe","first_seen":"2026-10-08T13:10:07.0714Z","last_seen":"2026-10-11T08:54:53.143974Z","times_seen":128,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":14,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1307259/e793d8b6efa50c4d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://56q.ru/","date":"2026-10-10T22:13:53.115Z","timestamp":1791670433115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R46 DV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Sep 2026 16:59:46 GMT","end":"Mon, 29 Mar 2027 20:59:59 GMT"},"fingerprint":{"sha1":"2D:60:83:96:F9:DE:F8:A8:6E:C8:F7:EA:8E:88:A0:92:12:E1:C3:D3","sha256":"D2:15:15:81:4B:46:CB:CC:99:D9:E4:A6:DB:82:27:A6:D4:85:7A:B5:3C:D4:D2:A5:A2:BE:22:9F:F7:25:C0:2D"}}},"request":{"raw":"GET /partner-code-bundles/1307259/e793d8b6efa50c4d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://56q.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://56q.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 140917\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\netag: \"f6f08c0f60b7de9a90b952039ac06723\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Tue, 10 Oct 2056 04:41:30 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 07 Oct 2026 17:39:06 GMT\r\nx-strm-log-split: 8\r\nx-request-id: 7deb03bfa8b35c2a\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":728429,"size_decoded":141813,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"407f79bed08ca61defdd055ba2ea10b9","sha1":"0f65896d14e66fe2cfae35f4327adc3c57c3cf0f","sha256":"0ad07f45173787915b5160ba684d649ce3556fb004e82e19828c05d5684eaba6","sha512":"1617af2e96130abd3a695bba707611deb2d3a1a82c208e21e39cd2299459b3f90f20910a4fd43a372493b83b680c89b7fd1c71329cc7c62636d1fb933401993e","ssdeep":"12288:8zIpE83UsOSnh0zsRYfpVGkHuAI8Plj9gvngOgi1nhBPnzBL:YIP3UsOSnh4sRYfpVGkHuAI8Plj9gvnr","tlshash":"8bf4e989f5e1b07042e7a0f9803f150ff23a7a15550980a4f62ae8e57eb899e5137f3d","first_seen":"2026-10-08T13:10:07.042671Z","last_seen":"2026-10-11T08:54:53.176277Z","times_seen":129,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":27,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"56q.ru/","fqdn":"56q.ru","domain":"56q.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:13:51.507Z","timestamp":1791670431507,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 56q.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 10 Oct 2026 22:13:51 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\nX-Request-Id: c4c1d65e951d1ebfe28eb6bc3b402c47\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10372,"size_decoded":3994,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5823)","md5":"dda4547b62cf198784fca9053125c171","sha1":"5e912e282c493394fa639a8859250dd33127dab1","sha256":"bb75f3e7ecc9e092c05126a59a29b8e6118453871dbd79f84169fabcdedcaed9","sha512":"4e29a3a0f3f26ffa33ebd411e9a347e5109ef4b66919b3f7cc875a84c28c3d81a5993db1b6305598a58d55f3fbcc34f67a52fe5ae9c60f5b4c01407d541b7c2c","ssdeep":"192:bgAo86VrVKVu5/N7oaO6UNgbFcuATD+/kTRGerCyL5TV9qE:3obRsC7oN6+3Dlnr/Zz","tlshash":"b12266910456f07f0a037af9e23f7f4c74dd00a9de869900faec155827d1ea1d66ab29","first_seen":"2026-10-10T22:14:45.831216Z","last_seen":"2026-10-10T22:14:45.831216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":78,"connect":30,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"56q.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}