{"report_id":"2357b9b8-88ed-4a9c-832d-9366026d227e","version":6,"status":"done","tags":[],"date":"2026-03-02T16:37:51Z","url":{"schema":"https","addr":"passports-kupite.com/","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":0,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"final":{"url":{"schema":"https","addr":"passports-kupite.com/","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"title":"Купить паспорт РФ с проводкой по базе за 5 дней","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-12T21:52:59.590169Z","times_seen":1037480,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"passports-kupite.com/","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":0,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T16:37:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-02","alert":"Hunting_JS_WebAssembly","trigger":"yandex.ru/map-widget/v1/build/client/worker/content_provider.worker/679d85664d88c24dc7f6.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"maps.yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":0,"first_seen":"2025-10-28T23:25:52.564573Z","last_seen":"2026-02-27T08:43:11.924081Z","alert_count":0,"request_count":12,"received_data":1697803,"sent_data":5975,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":2,"received_data":30548,"sent_data":968,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"core-renderer-tiles.maps.yandex.ru","ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":0,"first_seen":"2025-09-25T14:00:22.361578Z","last_seen":"2026-03-01T06:20:45.160149Z","alert_count":0,"request_count":8,"received_data":135333,"sent_data":6760,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yandex.ru","ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-02-25T14:02:32.198539Z","alert_count":1,"request_count":3,"received_data":1869112,"sent_data":1833,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api-maps.yandex.ru","ip":{"addr":"87.250.251.134","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":187079,"first_seen":"2012-11-01T07:04:10Z","last_seen":"2026-02-25T19:25:34.656491Z","alert_count":0,"request_count":1,"received_data":26328,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"passports-kupite.com","ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"domain_registered":"2026-02-26","domain_rank":0,"first_seen":"2026-03-02T16:37:54.352187Z","last_seen":"2026-03-02T16:37:54.352187Z","alert_count":35,"request_count":35,"received_data":1852697,"sent_data":15835,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"FitVids.JS","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":17,"received_data":558791,"sent_data":9274,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.fitvids.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"550720f2f600cc8ae7f406ff4696c71d","sha1":"c015df39d7a1d1b7d42372a93da4b3b9ffd9ed2c","sha256":"a262e6c8251a2c6bea9f176d0771de75a775f5c69dda09efea3e89e3bf4cb0c5","sha512":"bc07c3766db3bf87669341771afbdfc8f2e4143d1522a026628eb32a90b67891c6e22962b7c567785d5507d595d78702eb984850cb9514ebbd20db04f510e275","ssdeep":"","tlshash":"744195753250a93d86c920df582f124c6109c4b403eba46cb0b6e9d9dd1ca4d25394fe","size":2413,"data":"","first_seen":"2025-07-05T13:16:51.031489Z","last_seen":"2026-03-02T16:38:16.065049Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/owl.carousel.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"835cc64a4fa3646144950746b3a21dbf","sha1":"89d29a4b09ff80c617339b298c98e0348efe4d5c","sha256":"df88de601eed6e1c24e1dbe8a76004e73e7fc9907e9d2bd36685898f3c4cf303","sha512":"0a293b2d480de4a0c9fa9b48cacebf76f481e8b566893e64cd112ccfdceda9411747456c38de53ccda1fec2fd6344331fa854b2226cb88cd2c53a5c15215bf61","ssdeep":"384:jLTyXBJ02qa1Q6Uq1+R0K7e105B2WzbitlDgoIiPT97bJ:X2XBNqYQ6CoWBFz2fDgod/","tlshash":"eed2521a32223f0a49db33fe55ab150d2135ee71990141c9f16a0adb3a6f589f133b7e","size":29251,"data":"","first_seen":"2025-05-24T05:40:50.835455Z","last_seen":"2026-07-31T15:50:45.55687Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6eb81b417552c63a6ab151b854b98ab7","sha1":"d8c061226879071df202bb54bbd5440defc02e7f","sha256":"a206b21b3199e1c2ea9a27dcdb4e0158901ab7c33b29f501842ec7f71b282ee9","sha512":"ab95f0987652aabd5dd9df98ced1f3cb03115ae6b076367af6fe2c294efb41f34c1ae986c9b2dfec361027d276b72e4035c5b1394a63100f43cf81905dd4b228","ssdeep":"192:fKJum1CtOWPAwytWQIuU14yq7kyYukv+aVkDoHD/ZFeW:fIuGWPAwytWQIuU14yqIyYuk1kDoHD/P","tlshash":"60e1e6662201b53729e908ca45399551a03d3077746adce09f1bf828bdbcec907baf53","size":6898,"data":"","first_seen":"2026-02-27T19:07:55.589023Z","last_seen":"2026-03-03T08:25:09.623582Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps-vector/e5b0c1d27159dffd48ea.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f40efb4fd4058a73c45db78e7b0c38bd","sha1":"7e9bcc0f5c838c084366b82ab3107e8366af4cac","sha256":"663184fe0ecb0ceb28fd5ee3e2adbd760c199a793299b70340fa921dd7c23c8f","sha512":"8211a3604d2290e02639c0fcb5c9e5ee9d78e2462a75f2386cb249a50f9695edd90df3005a66b8f55c5c48bb797ac2fd226b4e2548ff948a0ba8faeb123f148d","ssdeep":"3072:pcM8czmyPPZyy4ALSshI2qngqPANdttix5uM0b8f83uB9N8/TxpOh2QeP2h2zYIc:2sd5UANK5uMFf83uBo/TxlP8Da9Kx4K","tlshash":"c0941ae92316b51747cad1a7a03e0403e31564d0a80e412cb65ce5ef7aded8533b9fba","size":431820,"data":"","first_seen":"2026-02-27T19:07:55.571176Z","last_seen":"2026-03-16T03:07:41.370603Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.parallax-1.1.3.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"785489701fec57db6cbc77ee18dba5ab","sha1":"a0c4d3ff09db501c71429aa733b2b28a80e3543f","sha256":"5589473adf0e44c3fb2c32f14e18c24757f7af26afa44cd16c0a014b0352f20a","sha512":"2e93a10abbd7dc95bc96679c396637f41548c716de9bcff7d783845552c8638e277cfebc6f9d34010606688bfc84c9050a84b070ded905c33d3db72130affb24","ssdeep":"","tlshash":"8f11ba34bb107045cc7a712b0b3bf30ab212364108028234d239e4dc6eeda4bb86ac68","size":925,"data":"","first_seen":"2024-10-16T10:36:40.005274Z","last_seen":"2026-04-30T23:05:28.461229Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/wow.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fa2e4b6acb5db11843b66b812040de3","sha1":"13895175fe8fc3bb341af017a197ce8599e59451","sha256":"36a88df037dc6c940450a9e251a34c9321d76d894d3d1734ee8cede45028d84c","sha512":"0c42509738a3d6f2f111a34b3e84c34bbb09f25c438f548acff4e51850bb8d7c69e1b0900062651182703df37941fc6b37d819809de16143c1edd1799b28a0b4","ssdeep":"96:0PV6GqKyR6TYATHFMLzuCvp5OVEE1f3e1gJ1IHImBaokbl:0PVfSW2PuCnOVEEd3eiJmHILoe","tlshash":"82e175c9bb877032c357a1f6873f0506b33a59ada028047cb6a885e53d78c59523bf78","size":7082,"data":"","first_seen":"2023-03-07T12:01:54Z","last_seen":"2026-08-10T20:57:37.688625Z","times_seen":1424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-08-12T21:39:35.233998Z","times_seen":31955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-maps.yandex.ru/services/constructor/1.0/js/?um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec\u0026width=100%\u0026height=315\u0026lang=ru_RU\u0026scroll=true","fqdn":"api-maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.134","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"155f18357c0e253fd992d7807b86ae46","sha1":"f661df5d61b4ace3e7421e68fc7e8fd66541c908","sha256":"46c9eeabc79f7f0fcfee7fe49765c2caf55369a88f422a2a3cce518de5f5026a","sha512":"7ad425563598271cb20ad095939b21bd190a10a81bcb066def090a077bf4e822f6701ab8fc15c3407eeddb9dfb6c46341e71c147e0559208adee9811169202b5","ssdeep":"384:ibVGoYbc31ansaj/BP+U22WNIO2dmJ/yx4VB7dJwunlnetJd/0w:EnhS/T5IemUIhdqKB8d","tlshash":"14b2218af6c1b4d607e7a4a6022f650fb0b71a55b94ed8c09365c1e4ec7c94f8027f6e","size":25269,"data":"","first_seen":"2025-11-07T18:09:04.987041Z","last_seen":"2026-03-02T16:38:16.10204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/smoothscroll.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa69f359746603fa54e7c277a79ec253","sha1":"82dfdbcba129e94de4c5fa304710bdc740b722a5","sha256":"4e1444401ea8cfe684564c33f965b92aaa635f1c573f5bc3ab73e6d9de20fc4c","sha512":"c4dd1c628f267b89d48252b1161d73c5198da2180df7fbfa7ade5e92b57ce7d644974fa330a63225772f413f2fb762640443413c156cb84dd2aac2675ccafc0c","ssdeep":"96:qzoo+w/gt8yDhEYyzsVVTd196SEufi+/8E/pkKQ+9dyiTK+Qfd2qx:M+wYSyDhEHGAafi+/8E/pTHyiTK+S2u","tlshash":"1ea195753b03756653ca6b78516fa30c26310042aa4fded76925c868ed34e7128c7f2e","size":4717,"data":"","first_seen":"2023-10-16T11:32:09Z","last_seen":"2026-03-20T19:45:59.303255Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.counterup.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T20:21:56.808241Z","times_seen":13072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/script.js?69a5bcc69a9b4","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cc3a6c9be2ceb26a172134a82759cad","sha1":"426d47ec78355e21d600f9053b0a21515a0d5c99","sha256":"82fd73495de3e769f44936ce425caddbfd3acf423ce6124b8277998ba55404bd","sha512":"4e3b7fbbba65a88b3fdbd4c17b04cb776f8fed7dd392a948ea6742ff07ce94763a88a3b8afabcaacb96c0ab7b881ea276fb545ccadfface8a30e2588b50628c8","ssdeep":"96:/8E5s+Jnw5QCHFz+7t74HJU7UUQo4rvXm58aVgbVkwkBCtXm58aVgbVkwkBCpyB6:/8EqcwBFz+7t7PAa4LXmZVgbVRWeXmZS","tlshash":"85b1d15e32b2b1cd56f710bd707a77c459026cb68d18a1e7e8e4a4b0096de47fd22f0a","size":5491,"data":"","first_seen":"2025-11-07T18:09:05.02234Z","last_seen":"2026-03-02T16:38:16.116052Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/bootstrap.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba847811448ef90d98d272aeccef2a95","sha1":"5814e91bb6276f4de8b7951c965f2f190a03978d","sha256":"898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1","sha512":"bced99d9331614757643273441a2b8921103382949ab0e510f386c453ec2a2359da39680d8a169e6bcbe7531844eaf5f598560f0d133d3fa3a9f6c7502b148df","ssdeep":"768:jryxMjJYkskKzykVtCb+9C8agZMdyKHfivbOCtFKH:3HbjZC7w","tlshash":"f1d26506b2303161079fb2f5515f020b733a6a7ee906907c38b99ae63d79c587167f39","size":29110,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-08-12T18:29:45.131745Z","times_seen":29109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/map-widget-app/fec9d41075f93aaa0ebe.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2bbc0558f6000bffa1653f94a66237e","sha1":"92eb96e4892d5fc716674e11110cf76ab14fcac7","sha256":"b3478a72bea27d77a7de9e3a48e3935bf827b92f14d2ec0701852b8ecbda2e82","sha512":"4ca41b081538905b69d0d137a702e2dee1a862344445169fd4602a0d8a399e7bcfbedfbc42fc5401928df912be1c5c67742cbc691c5d220aa59b91908d390658","ssdeep":"6144:5HbemjHJR10cJFc4pA//2iFyH37sR2U2hoKOkxqZHq9Lf:5HdjHJR10cJ7pA//2iFK37m29GKOkxb5","tlshash":"08b4f7c9f095b06846d32abac26f150ab37a3e4da40d8510b266d8d83d7d95c723ff39","size":536202,"data":"","first_seen":"2026-02-27T19:07:55.517313Z","last_seen":"2026-03-03T08:25:09.541453Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps/e41d25534028ebc3b8e9.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"581bb7a94d1535032a1b2131d2fe7835","sha1":"d5ef27f65659b6ef801ea65f0a547ae2298db693","sha256":"eb0b3fe6e5d2147ac4994a08a241ccaa90673f48f5122151b00e3bbdda056577","sha512":"5a969b4a4455c4b706fe38a714d773a6d1f516d520ad7a5d5e1edd8f430956a8388c186cd933eff145af8fd955fa8708b3998b16a89aa868c7864da789157861","ssdeep":"3072:iqDgzzZibv9tR+cRhdqkkQpE5M1n/mxePdJrdEOkSfVj:iqDgzzAnjqkQ5mn/mxePdJrdEOVj","tlshash":"1224e68eb141b41582c7a276513f080bb236a596550e842cf269e8ff3dbc858763bf7d","size":210591,"data":"","first_seen":"2026-02-18T18:39:03.082667Z","last_seen":"2026-04-13T09:29:25.24171Z","times_seen":646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.ajaxchimp.langs.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"99f45c34618bcd47bd5d1b8c471ceecc","sha1":"35b12c56df8b0b78731e00cca1fcf117b0ac587a","sha256":"d04d29d58b9e217ae2802d3ca331f4514469c1f842831aed7a72a0ceb9d13d2d","sha512":"7ce8d2e1cf4350796d660c6eb7823f4e9211e4c1e294dd260c2707298e1276c75056eb7540abafe488b31e4062cb45e2b78bab9ef92c300e542bc11804a2b73f","ssdeep":"","tlshash":"7f8163bc50e132822a870167738a6163b4d4409b1c6a760cb85f436e1fddc9d3e7c6e6","size":3836,"data":"","first_seen":"2023-03-08T22:56:13Z","last_seen":"2026-07-19T10:15:38.483765Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.ajaxchimp.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed92ef7abb9b223600aff68d8f1086f4","sha1":"07641c0ac5e3bcdd8a1118ddf3ba326301fdf32a","sha256":"69b7af93aa3cec92cf17362298e47308df2971f5a763bd967e75cbb0a15ef743","sha512":"6646d077a83cf895a32d4f9e0901b7786a39ffc6ba99ba8a597dfbd33da573c7797ab27179bd8b6c9500929021ec626cdca932a8daffad30aec3775f20a44522","ssdeep":"","tlshash":"c541344025501bc2418b22f2e4d7bbe370e7d5948824f558e668e0e30ee4dcdae27a9e","size":2369,"data":"","first_seen":"2023-03-07T01:28:10Z","last_seen":"2026-07-19T10:15:38.452949Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/waypoints.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","size":8044,"data":"","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-08-12T18:35:25.732492Z","times_seen":12660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61e116c26321a87d72d7a7ba6a8c5cd0","sha1":"38c12b6676f08a57ea0564fb853b6ea62bfbb650","sha256":"8624ed1517bb7ff5b4853dbdd00b23b6234ce4efea11cc1165660e8cede4b22b","sha512":"3c35d8e69e76d790f784928cbccd5621542a7c2be0fe616e0ee14e5f0ad988517b0699593a1e4b8a18306b31f34ac98fea47e0f461e48598275e56a3e3e63e59","ssdeep":"","tlshash":"b4f0e57105b2857050f31c4136afbb403a220953514294107abcca08aff1d1388abfee","size":438,"data":"","first_seen":"2025-11-19T14:39:03.117696Z","last_seen":"2026-06-07T04:13:15.705462Z","times_seen":2543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/react/19.2.1/react-with-dom.min.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"12476e7ccccf38da32b06df7f5a4bb6d","sha1":"894bf8526523d15036c3c75d629c364c274b6457","sha256":"4133abbfd407004cf1ee60183a5665e45724af50d14f9767bedf6706ea638675","sha512":"fc990cbcf5a30f7dfbb8e80759c2f9835e48f0327245a4134df1b81cd2ee01337e5547c796826771fe8e96f09016a81f5f9ceec3eb38b85a0a86fcc91e9a627b","ssdeep":"3072:kZolIaD1m+pcenx6daShW7mMDTy5KI2vb:kZo+6c+Ya37mMDTy5H2vb","tlshash":"7a1408ec3955e5126eb712a7009f28077338262b240c4da0a615fdee74b845fb16bfde","size":190368,"data":"","first_seen":"2025-12-11T05:38:52.91514Z","last_seen":"2026-08-12T19:54:05.307408Z","times_seen":2494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/map-widget-base/64e04586c0e70079baca.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"82d4e3af8feaf2680c45ac5ffbaa3201","sha1":"4e9b6f21c157dca9c8f01aab4a3de55f2749969e","sha256":"a536e9877b195e4dfce0ea4b223ef90a097f188cf1fb871f20f0a12cabdf0704","sha512":"616d2164bcc1057e5c649c54b37312f1e45fb8e09eac3594d0e16a2408c1d0c0783ac50f0662ed5f1abd536f12679d682994f6e597d2a2e3f2b54ba07a4ca26c","ssdeep":"1536:YVJu+zNDe7pU++RbAPs6d7GaZh3lQyXsxDgw1uMh5Uua00bvdrX1EJWnMF6GtMtj:YVJdAU+HbMyXcgwl5UJ0UxFoQ","tlshash":"71c309c97592f06557f365a8c13f140bf23a2929184cc064f7e6d8e52cb988e913bf6e","size":124929,"data":"","first_seen":"2026-01-20T11:46:52.35251Z","last_seen":"2026-03-03T11:25:48.155341Z","times_seen":546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"passports-kupite.com/images/download_screen.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/download_screen.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 55658\r\nlast-modified: Thu, 26 Feb 2026 06:40:14 GMT\r\netag: \"699feace-d96a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 723 x 272, 8-bit colormap, non-interlaced","md5":"b36de5a5f6776ec1b714f102fd367532","sha1":"1641e4868cc5c7f9687a36fa4be28e5d34b5042f","sha256":"cb6edb041eaf693433f85dbd9bbc8830600350cec2d2dde6ad963fb368744110","sha512":"d62c03eda4f388bd19c2a2dc348336ca6cf984397550a346e82b7ce5fb912afd9154ebc7afcce0c1f02412b26c17e6e6387aaee7616bf01377475c4882e186c6","ssdeep":"768:wj6+mN1a/hIXWMYGeWL2HUsbsoEBwfprAA16RsPmsxe9ug51GhEfAMLHNA5BiEu:H+Ca/hMWiJzGrPeCmeg582fXLHMi5","tlshash":"b343f1816e7782abd7c03b06d79f09f85871daaf5216b9e556f501320c3069e2127b3f","first_seen":"2025-11-07T18:09:05.013079Z","last_seen":"2026-03-02T16:38:16.049262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.ajaxchimp.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/jquery.ajaxchimp.min.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feaca-941\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2369,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2369), with no line terminators","md5":"ed92ef7abb9b223600aff68d8f1086f4","sha1":"07641c0ac5e3bcdd8a1118ddf3ba326301fdf32a","sha256":"69b7af93aa3cec92cf17362298e47308df2971f5a763bd967e75cbb0a15ef743","sha512":"6646d077a83cf895a32d4f9e0901b7786a39ffc6ba99ba8a597dfbd33da573c7797ab27179bd8b6c9500929021ec626cdca932a8daffad30aec3775f20a44522","ssdeep":"","tlshash":"c541344025501bc2418b22f2e4d7bbe370e7d5948824f558e668e0e30ee4dcdae27a9e","first_seen":"2023-03-07T01:28:10Z","last_seen":"2026-07-19T10:15:38.452949Z","times_seen":65,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/msk.jpg","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/msk.jpg HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/css/style.css?1772469446\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 266745\r\nlast-modified: Thu, 26 Feb 2026 06:40:16 GMT\r\netag: \"699fead0-411f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266745,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1085, components 3","md5":"d14ecd249ff1d5562368a6700ee93f07","sha1":"0de1cc4f87b685e0f1888ba761099826beeb5c62","sha256":"a15a946bca409d25ce9fe3d23111929cafd856682b184d7a231c0625e029025c","sha512":"3c261cda8935cbf07dfba23f2876947e9f9b717b20da79251019d983a365665ecafdf243f94d2499a0e9e433140cd8356cff2be1834c3b7ceb7eca62282234b4","ssdeep":"6144:ww4m5/DhNQT/D486VzPg1Od0et5ygM9TBbU2QyDzR2heXmi7ISWe:r4ghYH6ZgXeoTBzhDzR97ce","tlshash":"41442344a76543edc98ea17d2946039ba3c18f46f9c93c4bb0993d50036c7fc79abc60","first_seen":"2025-11-07T18:09:04.989627Z","last_seen":"2026-03-02T16:38:16.051953Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 02:03:48 GMT\r\nexpires: Fri, 26 Feb 2027 02:03:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 398019\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-12T14:06:02.320207Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/home/fonts/ys/4/text-bold.woff2","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/4/text-bold.woff2 HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yandex.ru/\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49556\r\nlast-modified: Thu, 26 Jan 2023 10:28:19 GMT\r\nexpires: Tue, 02 Mar 2027 22:24:55 GMT\r\nx-nginx-request-id: 3bfc9ea2d0a8d12a\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\netag: \"861356dc262da2415c61c39164c1a84b\"\r\ncache-control: public, max-age=31556952\r\nx-strm-log-split: 2\r\nx-request-id: a3742e678dc54298\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49556, version 1.0","md5":"861356dc262da2415c61c39164c1a84b","sha1":"78630d36a4fc82a8a69201fcd1a97e59bdc4b15e","sha256":"18539e5632dbeb12467c472ed06bae43a3f893eae4db6daf11d0485585655e44","sha512":"4e6f0af54148ffce48455ca985aa8102978307d0d1fd6867b88ec3d88d6234766520aa213890e08377faf955e26bd22d4d4afdb1da91318bec821a1a302134f6","ssdeep":"768:tCghMLpSKGJN2Y0AR9r1Wafjy1zzjLPdu3esJ/+1HydAkaGS4QDJCuw5Cw8pyU:thWpKjwUia+lHL43esJ/MT4QDJCVAyU","tlshash":"912302f86a051f9f6cbf646f3c27458bed1e55752392c4b2c2f5a0632489eb30b5980d","first_seen":"2023-08-18T07:07:20Z","last_seen":"2026-08-12T19:54:05.383429Z","times_seen":3012,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/_/fd161c881e6392111418a1036fe1188e.svg","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/front-maps-static/maps-front-maps/build/_/fd161c881e6392111418a1036fe1188e.svg HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yandex.ru/\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-nginx-request-id: b904435fc9233ea4\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Tue, 15 Oct 2024 07:29:38 GMT\r\nexpires: Tue, 02 Mar 2027 22:10:16 GMT\r\ncache-control: public, max-age=31556952\r\ntiming-allow-origin: *\r\netag: W/\"fd161c881e6392111418a1036fe1188e\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-strm-log-split: 2\r\nx-request-id: 6cc2b384c8183662\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1198,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd161c881e6392111418a1036fe1188e","sha1":"284d75d199cf28e8e525b726f4b5ce7434d1f004","sha256":"9ffdbafd1ef442af76599cc428e73756fd8358f12889d8ade5e13808bec289c2","sha512":"faf373d19dc348435d6f02b2d7e7807c0bd03aad566fc1fb300101e2e080d0a1499e366e57184a56c4562b7ad52faf1a936ba660d69019d949f8d948ed5307e9","ssdeep":"","tlshash":"a721fee7b3e412c080129bb85b3d65a013376db295449d4ac764ad10b200cbd9ec88cb","first_seen":"2023-05-08T21:53:18Z","last_seen":"2026-08-12T19:54:05.302197Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,600,700,900,300italic,400italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro:300,400,600,700,900,300italic,400italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 16:37:26 GMT\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17087,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"942c636f93e4165c7930a1cfa0593455","sha1":"c781208d7a50cb8830b5b738422b2b7640e3c2b2","sha256":"bdc680fb15df82483da9a2db8b52597fada4d509c8b694b095eca273768fa0cd","sha512":"1249504a2b95f8f77869372c56cc8e695a036ee94aa8b0cdde0e9259bbdf2b18d0f503423f186ea0920d6a5d981603b5a999daa9f3e927ad996666f44aff8d7c","ssdeep":"192:ml32l2lrlD3tlFlHYlskx2kskJkd3tk/khYkon1Cb63gYIv3q0eb83JLXCpVGrSj:mt2gtttPmqy2DKst2rXfPkMe6jZr7","tlshash":"a372cef3411ae44857a31cc633de3e3a9e8f60207185c16adffd5898aca5c2a53b4b5d","first_seen":"2025-09-12T20:03:02.187905Z","last_seen":"2026-08-11T19:51:03.079501Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":156,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/client_3.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/client_3.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 11204\r\nlast-modified: Thu, 26 Feb 2026 06:40:13 GMT\r\netag: \"699feacd-2bc4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 134, 8-bit colormap, non-interlaced","md5":"0a785ba98b6c3260ae16ff17ed904fc2","sha1":"febaf549f418851f736bac0ae6210a8d38268408","sha256":"7aa828bed9bb18509dd443fbafbd0a25323aa59a32abfe932b5327a0196cb58b","sha512":"e21aee74d53988dcd44fb74850e1a2245d2462418aa933b3f97e722ccaf0358c8aef9ed13c63092bf59ed49c858a49f87c2d6f8c5a11eef7118f9496e6c8b2ef","ssdeep":"192:XjGNGjsfaBR+CRkaY+B3s9qR/3NAWAwGvH5EtZ9WGj57Omk/MtdDH5O:TGcBBAL+x6qR/+HHKtZ9WGFymkEHc","tlshash":"6632bfc6d83adc70e79865a4edf3dbcec1697e2aa499f01a523075d6c073d076d0d222","first_seen":"2025-11-07T18:09:05.002288Z","last_seen":"2026-03-02T16:38:16.055453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/react/19.2.1/react-with-dom.min.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /react/19.2.1/react-with-dom.min.js HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 51062\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\netag: \"bbea458797d2670bd44766cc26362170\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Thu, 04 Dec 2025 09:30:29 GMT\r\ncontent-encoding: br\r\nx-nginx-request-id: 3efaf0e35e29cb81\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Tue, 02 Mar 2027 22:26:33 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31556952\r\nx-strm-log-split: 6\r\nx-request-id: 3ef6cabc6b5eabba\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190368,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57797)","md5":"12476e7ccccf38da32b06df7f5a4bb6d","sha1":"894bf8526523d15036c3c75d629c364c274b6457","sha256":"4133abbfd407004cf1ee60183a5665e45724af50d14f9767bedf6706ea638675","sha512":"fc990cbcf5a30f7dfbb8e80759c2f9835e48f0327245a4134df1b81cd2ee01337e5547c796826771fe8e96f09016a81f5f9ceec3eb38b85a0a86fcc91e9a627b","ssdeep":"3072:kZolIaD1m+pcenx6daShW7mMDTy5KI2vb:kZo+6c+Ya37mMDTy5H2vb","tlshash":"7a1408ec3955e5126eb712a7009f28077338262b240c4da0a615fdee74b845fb16bfde","first_seen":"2025-12-11T05:38:52.91514Z","last_seen":"2026-08-12T19:54:05.307408Z","times_seen":2494,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":80,"dns":5,"connect":13,"send":0,"wait":15,"receive":13,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=620\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=620\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 18725\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\ncontent-type: image/png\r\netag: \"5acda8a35486271f62f123469061609f\"\r\nset-cookie: _yasc=9k9wpl6e52haqDg17T/g3FGSBIt/0979fLeSWCyqUZk2TzN4A5mFtji9btcikK8=; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=XipstC99osMNkW6Zh6Pm0V4v7tN36iiQJsae1183zsVe64+4Xi+PFs3ou+rsc+3hHSmnDY3Am8DV4uLEYZzgUDpy+SU=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=3564990921772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=8862742971772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7654321\r\nvary: Origin\r\nx-l7-hostname: k5bvqe7etzlzsnzi.vla.yp-c.yandex.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"5acda8a35486271f62f123469061609f","sha1":"a6c3b3122816e832fdee22b15d2547d15a2ba7f4","sha256":"afb9c970f41ef3a2db479116c555ea9aa873a068aa06fe002df9f0f235f18743","sha512":"6c58fb82965e10ff6def4e1b11bb248262b1aa84646543247c540d40433d12a3b8dbf5938d911aa0d01dc1bbabd9cbf4533346e3453075fef649351c6c62aabb","ssdeep":"384:RCpZZzIjnjM2rx3yr0v3coZhA1W5xcmw33gsbPDi3yQi00GRXN:ckro2rsr0vsoZmSKesz2di0Dd","tlshash":"3482e019fa8f016cc21da96ee985935804237a2679e48f71c909adcbb83c2cc57570af","first_seen":"2026-03-02T16:38:16.057747Z","last_seen":"2026-03-02T16:38:16.057747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":143,"dns":7,"connect":50,"send":0,"wait":156,"receive":3,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=619\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=619\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14920\r\netag: \"e66998435f40fc229f2a6df64ce645bb\"\r\nvary: Origin\r\nset-cookie: _yasc=HSvX5eEOf3mqKsWihfVGd3hDt92aisAV7AoZ8sk+WYc+de8LBm/D4kF38PLmjA==; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=Q0hsroHO4UdHkrEYIuIARjvZxRgxYx3lS/cjq41Pf0qNGZjFupp8J07ixFF4mzpDBvOdOyRgROQ67EvYLcWfkD6eASs=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=6327781341772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=1916774801772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\ncache-control: max-age=7654321\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nx-l7-hostname: muzck46xgw7kuq4z.vla.yp-c.yandex.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"e66998435f40fc229f2a6df64ce645bb","sha1":"7605e4920cd2b12422197ef8a5170954dbce482c","sha256":"43e69b88ce07747a80b215c3f243c1ea60c820ea5387650d97fbc31a8ab29e5b","sha512":"8a4554a5178d9295bb5d324d6c745c134656fe0c3d342c6052350a7c5311667688bcc54e2c93a8455325952bee4faa62085383a66b2556034fa1b40e6e5ecea8","ssdeep":"384:TgoL2ySJHU2/8fsWFg877QrOyLID1LA/Vg:TVLSX8v77w1/G","tlshash":"8162d070da622d4d79d0c94fe6e5f5a1eee497bf7e3ea81ae0ca1007009838f0a70575","first_seen":"2026-03-02T16:38:16.058862Z","last_seen":"2026-03-02T16:38:16.058862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/map-widget/v1/build/client/worker/content_provider.worker/679d85664d88c24dc7f6.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /map-widget/v1/build/client/worker/content_provider.worker/679d85664d88c24dc7f6.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-req-id: 1772469449390244-15896069595696832412-balancer-l7leveler-kubr-yp-sas-249-BAL\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 27 Feb 2026 07:22:49 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nx-amz-request-id: 96d3b0484b9f398e\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-nginx-request-id: 0be3d9f49370899f\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\netag: W/\"1f5147c1355f81ab4c3764c2513cf0e4\"\r\nx-yandex-req-id: 1772469449390244-15896069595696832412-balancer-l7leveler-kubr-yp-sas-249-BAL\r\naccess-control-allow-origin: *\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Wed, 01 Mar 2028 16:37:29 GMT; SameSite=None; Secure\nis_gdpr_b=CKKGRxCT9wIYAQ==; Path=/; Domain=.yandex.ru; Expires=Wed, 01 Mar 2028 16:37:29 GMT; SameSite=None; Secure\n_yasc=9n8+9qgHa3va1gDNXD8ET9rBqg+b+ddm+IpQu0f2XlSwekitWihMfBov4Nwt6w==; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\npi=faAjE1X52MO7j43NxpwPQhyCAmhfEL8KW2WPllpfiyJSdJbJ2NKWCn5h5PX84nMjlUZq/OmmSEB7maFtXLc0YFBv86Q=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=btByLnPzDUv2IcZcg0FEyEnxw5zl5g654dmStY4jYAddkwh4K+OYcsXwHvzDftnvve+cVeeLi0BP50lyjo4UxPaq4GU=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7968324121772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=8565892521772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YMn5ls0GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Tue, 06 Apr 2027 16:37:29 GMT; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1018657,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1f5147c1355f81ab4c3764c2513cf0e4","sha1":"e75d14627df6f71f562ed97e6f5fff1a3cd16580","sha256":"4651ce27199ad418890e9a49d5ef52231a3c7c1deb1ea8874723f4b414c9fcb5","sha512":"ce2a31431919f75514bbaf53e95a3c6f8d89b606220a7b2315f0804c76800906b1cdf3633701822c2d3250008cbe66f4dc910b704da446311783d0ae6e6cfc84","ssdeep":"12288:6u9F0zzEierX4TB50xulQTrut8hOpJQzFuV+mxO4etQw8P85v:ryPEi5IxuKTruioQ4OxKw8g","tlshash":"ed254bb5a3637d6bd35691e2603b0083ac686583c008056cf65cd5fe78f89a856bdff8","first_seen":"2026-02-27T19:07:55.554772Z","last_seen":"2026-03-16T03:07:41.370076Z","times_seen":220,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-02","alert":"Hunting_JS_WebAssembly","trigger":"yandex.ru/map-widget/v1/build/client/worker/content_provider.worker/679d85664d88c24dc7f6.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/css/responsive.css","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 06:40:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699fead6-439\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1081), with no line terminators","md5":"7435d198be3862b3a843cd3fe97f140c","sha1":"16ac5c0e86d479778a96799f1d38020aba93a42e","sha256":"d90aada3c08871cd42799aea941a9d3c94ce72ad6cd63220e4b8478321754ddd","sha512":"b39853d1b782f62b105bd1906b20b1b663b6379846c90c80190643b64419a9abd856ace0caf56890f6c184835aa120a58426e6e6641d294dc2bf57250c80656c","ssdeep":"","tlshash":"201138463b97223dc94882f7d47328e0f350a641eecf21b3ac02a8928e750e40b63d4d","first_seen":"2025-11-07T18:09:04.97932Z","last_seen":"2026-03-02T16:38:16.060503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps/3e0ec7074dfa3b8ca226.css","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps/3e0ec7074dfa3b8ca226.css HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: text/css\r\nx-nginx-request-id: 714433eaf0d3c1a5\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nvary: Accept-Encoding\r\nexpires: Tue, 02 Mar 2027 22:20:47 GMT\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\netag: W/\"0575330e55cb49e69c2375bff2c0cade\"\r\nlast-modified: Mon, 16 Feb 2026 07:26:24 GMT\r\ncache-control: public, max-age=31556952\r\ncontent-encoding: br\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-strm-log-split: 3\r\nx-request-id: b7270ab75e555300\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2181,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2181), with no line terminators","md5":"0575330e55cb49e69c2375bff2c0cade","sha1":"24f9a9037581ca4102422e601d0a4017f8ee6bdc","sha256":"16b8ea597e69471e8dffe60e686b03f30d307fc332346d5c753974bcab74c241","sha512":"6187887fbe16a2259ce305c27fc2642ed422bd4a20ab9d9f23e92a72d832ce6907349c3a4f08245557ab88d93311725439ce8fb2191dea36e40099f082801a4d","ssdeep":"","tlshash":"d141dc3148413126f2269f7e5ee0abac5a39eb538d330acd3514e043c7cff59126995b","first_seen":"2025-12-05T17:24:00.561099Z","last_seen":"2026-03-20T05:26:31.867647Z","times_seen":1441,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/css/owl.theme.css","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /css/owl.theme.css HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 06:40:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699fead6-460\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1120), with no line terminators","md5":"7e759b2b8baa461314bf8b17f1e7378c","sha1":"93727461a78f67713419cee6437be46cca2d9b51","sha256":"f9950b990e79a5dd9c99abb89ebe3bee4300a643b42e0dd500fce5634daed29d","sha512":"d375da0312daa4b71fd8bb04f0f0d4dd4524ea8a99382321e736fe19ca88e4c59023b07d261176685b5f81895f91d720708de86343818892ade8ca3baec1268e","ssdeep":"","tlshash":"c02187e4d64c026c207ac2047a08cecb618db2b3a21905fbe0ceb934e386d41396f389","first_seen":"2024-08-20T14:35:53.055878Z","last_seen":"2026-05-06T08:55:09.166972Z","times_seen":27,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 12:49:41 GMT\r\nexpires: Tue, 02 Mar 2027 12:49:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 13666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T21:10:28.750205Z","times_seen":63627,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":386,"dns":3,"connect":37,"send":0,"wait":8,"receive":2,"ssl":349},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 02:03:48 GMT\r\nexpires: Fri, 26 Feb 2027 02:03:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 398019\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-12T14:06:02.320207Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 12:49:41 GMT\r\nexpires: Tue, 02 Mar 2027 12:49:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 13666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T21:10:28.750205Z","times_seen":63627,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":37,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14180\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 08:31:43 GMT\r\nexpires: Sat, 27 Feb 2027 08:31:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:42:49 GMT\r\ncontent-type: font/woff2\r\nage: 288344\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14180, version 1.0","md5":"2b3745d2f49a437d0f85a1d00eaca003","sha1":"43c7f253a60b5e58651fab107d9d1970b06de836","sha256":"b514997508ffc723a0087d6d85c7972bd0f180cd4b190325be978cb87025df36","sha512":"8ef2746d8d20b46552433902673eb639089d65f1394c3dd67c505a0de60ccf17a3405a3bb12b826d420f26461d0dacc864a6cf33393c0802e650b4a31fe7d619","ssdeep":"384:v4bIi3Ux88OhMXzGcLruiMuyBTZvYSYeoeEwIGzJbpw+:gbIi3PzhMX7L641BmIGzJbpb","tlshash":"b852c0b7b3048072f1a79273d759894aee3ba6f343b0b094003604cd59275b18f9aceb","first_seen":"2025-09-11T17:07:37.6714Z","last_seen":"2026-08-12T21:32:46.933597Z","times_seen":27815,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7876\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 17:55:46 GMT\r\nexpires: Wed, 24 Feb 2027 17:55:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:41 GMT\r\ncontent-type: font/woff2\r\nage: 513701\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7876,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7876, version 1.0","md5":"34144ab96dc42f6c816ccb5f7904d076","sha1":"1a26fb2d25428664d9a77b49cd354d59bc0510e8","sha256":"c7c0156d5a425af173817ffd3be8d652d0d622a71e0cd17c994e56a0de855a0b","sha512":"898272ac594ca2a9f7416113d73b87a852afe7ac6ffbfc4187e343ba4c35575df306d3d42e9e360dca5497392afd882fabdf27fcf314c2d6f2486ff721c35d86","ssdeep":"192:U8vM6dQMZU3IoG7ARrChWUhV2RfHeH+jBtQVtK1pGDrR:UL6hxoGM4wUP0fHVjBtQVfF","tlshash":"26f19f8e9e6393a3402893644c25acc7b9efc7d26282465958df50b2ff2954c712cb5f","first_seen":"2025-09-20T08:50:26.825778Z","last_seen":"2026-08-12T09:58:27.734709Z","times_seen":241,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/map-widget-base/64e04586c0e70079baca.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/map-widget-base/64e04586c0e70079baca.yandex.ru.js HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=31556952\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Tue, 02 Mar 2027 22:20:19 GMT\r\nx-nginx-request-id: 7c35ef99b23abb93\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nlast-modified: Thu, 19 Feb 2026 07:24:53 GMT\r\ncontent-encoding: br\r\netag: W/\"82d4e3af8feaf2680c45ac5ffbaa3201\"\r\nx-strm-log-split: 7\r\nx-request-id: 7e9566904629c8c7\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124929,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"82d4e3af8feaf2680c45ac5ffbaa3201","sha1":"4e9b6f21c157dca9c8f01aab4a3de55f2749969e","sha256":"a536e9877b195e4dfce0ea4b223ef90a097f188cf1fb871f20f0a12cabdf0704","sha512":"616d2164bcc1057e5c649c54b37312f1e45fb8e09eac3594d0e16a2408c1d0c0783ac50f0662ed5f1abd536f12679d682994f6e597d2a2e3f2b54ba07a4ca26c","ssdeep":"1536:YVJu+zNDe7pU++RbAPs6d7GaZh3lQyXsxDgw1uMh5Uua00bvdrX1EJWnMF6GtMtj:YVJdAU+HbMyXcgwl5UJ0UxFoQ","tlshash":"71c309c97592f06557f365a8c13f140bf23a2929184cc064f7e6d8e52cb988e913bf6e","first_seen":"2026-01-20T11:46:52.35251Z","last_seen":"2026-03-03T11:25:48.155341Z","times_seen":546,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":82,"dns":1,"connect":35,"send":0,"wait":24,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps-vector/e5b0c1d27159dffd48ea.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps-vector/e5b0c1d27159dffd48ea.yandex.ru.js HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Tue, 02 Mar 2027 22:21:04 GMT\r\netag: W/\"f40efb4fd4058a73c45db78e7b0c38bd\"\r\nx-nginx-request-id: 2ae5c3909aac543a\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 27 Feb 2026 07:23:28 GMT\r\ncache-control: public, max-age=31556952\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-strm-log-split: 1\r\nx-request-id: 9fb997a452e35381\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":431820,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35887)","md5":"f40efb4fd4058a73c45db78e7b0c38bd","sha1":"7e9bcc0f5c838c084366b82ab3107e8366af4cac","sha256":"663184fe0ecb0ceb28fd5ee3e2adbd760c199a793299b70340fa921dd7c23c8f","sha512":"8211a3604d2290e02639c0fcb5c9e5ee9d78e2462a75f2386cb249a50f9695edd90df3005a66b8f55c5c48bb797ac2fd226b4e2548ff948a0ba8faeb123f148d","ssdeep":"3072:pcM8czmyPPZyy4ALSshI2qngqPANdttix5uM0b8f83uB9N8/TxpOh2QeP2h2zYIc:2sd5UANK5uMFf83uBo/TxlP8Da9Kx4K","tlshash":"c0941ae92316b51747cad1a7a03e0403e31564d0a80e412cb65ce5ef7aded8533b9fba","first_seen":"2026-02-27T19:07:55.571176Z","last_seen":"2026-03-16T03:07:41.370603Z","times_seen":220,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.fitvids.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/jquery.fitvids.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feacb-96d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2413,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (593)","md5":"550720f2f600cc8ae7f406ff4696c71d","sha1":"c015df39d7a1d1b7d42372a93da4b3b9ffd9ed2c","sha256":"a262e6c8251a2c6bea9f176d0771de75a775f5c69dda09efea3e89e3bf4cb0c5","sha512":"bc07c3766db3bf87669341771afbdfc8f2e4143d1522a026628eb32a90b67891c6e22962b7c567785d5507d595d78702eb984850cb9514ebbd20db04f510e275","ssdeep":"","tlshash":"744195753250a93d86c920df582f124c6109c4b403eba46cb0b6e9d9dd1ca4d25394fe","first_seen":"2025-07-05T13:16:51.031489Z","last_seen":"2026-03-02T16:38:16.065049Z","times_seen":3,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/waypoints.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/waypoints.min.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feacc-1f6c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7808)","md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-08-12T18:35:25.732492Z","times_seen":12660,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/subscribe.jpg","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/subscribe.jpg HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/css/style.css?1772469446\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73196\r\nlast-modified: Thu, 26 Feb 2026 06:40:17 GMT\r\netag: \"699fead1-11dec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=3264, bps=182, PhotometricInterpretation=RGB, manufacturer=FUJIFILM, model=X-Pro1, orientation=upper-left, width=4896], baseline, precision 8, 1920x1152, components 3","md5":"bca46bbfc6073e71755699e8a5ccc6ac","sha1":"3c7b179f138509a2f57b5f37d8dc2a1798c5135a","sha256":"33f326039603a34540c40bdd391fd2f5b75b39c996410daef346b8a4d859b301","sha512":"0c7fe11f4ab036ce246d6f4b5e4756000c19c3390d8b0dcb504de4b994b2ed2631447f919c583a5183b1643b5b79a79c39b81cfc3eac3c546a30c12a10f6dd1d","ssdeep":"1536:jeaHvBbttBXn+7PTdMpxHPC1LnvO/OLfU75MoA+6:iaJJt0vdMpxvCRmmLY5MoAh","tlshash":"0463bf3adf445aa7c8d8573591ab4b14bf7308fc6a224203eb0c20296dbf744fd99a91","first_seen":"2023-11-28T10:18:56Z","last_seen":"2026-03-02T16:38:16.066499Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 12:49:41 GMT\r\nexpires: Tue, 02 Mar 2027 12:49:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 13666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T21:10:28.750205Z","times_seen":63627,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":176,"dns":16,"connect":36,"send":0,"wait":8,"receive":2,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/home/fonts/ys/4/text-heavy.woff2","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/4/text-heavy.woff2 HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yandex.ru/\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49032\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=31556952\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\netag: \"8c08e5d5e2c5e0b92274e398736d7e27\"\r\ntiming-allow-origin: *\r\nlast-modified: Thu, 26 Jan 2023 10:28:54 GMT\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nx-nginx-request-id: 3bc5df9b5923024e\r\nexpires: Tue, 02 Mar 2027 21:10:16 GMT\r\nx-strm-log-split: 7\r\nx-request-id: 469e7e10b34a6a71\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49032, version 1.0","md5":"8c08e5d5e2c5e0b92274e398736d7e27","sha1":"c00f0f114185d5998311d22e5602baa6456ae7f9","sha256":"b8935381e20655984d82b1b619c58e11df80dbbb552294a0a41f9257e85d96be","sha512":"91a79eb88b1799ca390a1e2d406993a036c72a62041eed631092e78d28907401d04175df770a9337d407bd2a876e287c828c45acbbf27a6ac68947584905e401","ssdeep":"768:IvTs45GsUibqNfssGbHo6vNX7B1NT7De5gYA3wZdgjo7kDXUX8ILE+rBRo2jRE:WTH5GTiCfssb2nNTneJhcU7kDXUXLQAE","tlshash":"c423f1ed410d260ddbc85b361bc143a5e8676e39da3e36c96b1bb73ac6c40424f4d8b2","first_seen":"2025-07-03T18:40:48.699281Z","last_seen":"2026-08-12T19:54:05.317658Z","times_seen":2825,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=621\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=621\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 16047\r\ncache-control: max-age=7654321\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nset-cookie: _yasc=6o3lTnYAceVZuiIIN3pif0wcwTLqdXm+a4oOQxgtAMEdEZJmBRaaLHYGnF2u5Q==; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=dx1Gc9Oc7cYE4U2RaFP4MZFdKQL5dje7H8TYp2qcNOOkw9I+y0lNR2DQNm2EHFr5kw7mP9063/TObmAIagoCeDaVBnc=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8636480851772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=7740680501772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\netag: \"bf2fd62ac3b82a50b26ae5990ed6a53c\"\r\nx-l7-hostname: tq5nsndnrv4ps6gb.vla.yp-c.yandex.net\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"bf2fd62ac3b82a50b26ae5990ed6a53c","sha1":"b012643a1d1f6dec1304a909a4a033d85271f0f7","sha256":"2598d23bac3cd3b15788390255a3b566ee905d714ea19cb807f6ef12b75fc623","sha512":"cb5acd6bb8411b5f21762875ae3bc299bd601d0fbc459e4f0ee86df0a326599e37a7a4a03c56ed7173dd6c0ea20e963009dc869ae840acc44227f5be353d43d1","ssdeep":"384:mbqrZlvr/aW+7cE6NOPrXv5hHSjEAKy+Z8QibaRpl7:m+r3v2NT6+rXSj76g+F","tlshash":"4972d1fd15706be5b12c000b708568ee2eed815ccdaeb561e4ef6594023f242d535baf","first_seen":"2026-03-02T16:38:16.068002Z","last_seen":"2026-03-02T16:38:16.068002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":161,"dns":9,"connect":46,"send":0,"wait":154,"receive":1,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/css/bootstrap.min.css","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 06:40:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699fead5-187b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100276,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65366)","md5":"2533e8736638e8b774d2735c915a37c5","sha1":"95c2c5d8e23145a13ef89806260c41ec0dda3dce","sha256":"56f6ed9e5b4fcf89b3ebf236682ab230c9d3e5c23c1eeb6cbac0e8fbbe1418b5","sha512":"3766fd583186aac7d0e44a9c4f131d6401aedaec400fc5a8d61980cb87fcaf7e1711da5e11fda742019ca88fc7799bcb614b68d9e917f3979a1f1eb2840437db","ssdeep":"768:reB72vDPZJF1Y13kGxw+snfkzaTbZb3PDNCMpm0Fr89YjMDdQJaB:i6p1Y13NwTk+5PC4891DV","tlshash":"66a3c6a0f21031da7323c55a71d0ed872219b092e5674fb7f26f25d88f896ca1763f1a","first_seen":"2025-11-07T18:09:05.007763Z","last_seen":"2026-03-02T16:38:16.068842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/smoothscroll.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/smoothscroll.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feacc-126d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4717,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (807)","md5":"aa69f359746603fa54e7c277a79ec253","sha1":"82dfdbcba129e94de4c5fa304710bdc740b722a5","sha256":"4e1444401ea8cfe684564c33f965b92aaa635f1c573f5bc3ab73e6d9de20fc4c","sha512":"c4dd1c628f267b89d48252b1161d73c5198da2180df7fbfa7ade5e92b57ce7d644974fa330a63225772f413f2fb762640443413c156cb84dd2aac2675ccafc0c","ssdeep":"96:qzoo+w/gt8yDhEYyzsVVTd196SEufi+/8E/pkKQ+9dyiTK+Qfd2qx:M+wYSyDhEHGAafi+/8E/pTHyiTK+S2u","tlshash":"1ea195753b03756653ca6b78516fa30c26310042aa4fded76925c868ed34e7128c7f2e","first_seen":"2023-10-16T11:32:09Z","last_seen":"2026-03-20T19:45:59.303255Z","times_seen":6,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.ajaxchimp.langs.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/jquery.ajaxchimp.langs.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feaca-efc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3836,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"99f45c34618bcd47bd5d1b8c471ceecc","sha1":"35b12c56df8b0b78731e00cca1fcf117b0ac587a","sha256":"d04d29d58b9e217ae2802d3ca331f4514469c1f842831aed7a72a0ceb9d13d2d","sha512":"7ce8d2e1cf4350796d660c6eb7823f4e9211e4c1e294dd260c2707298e1276c75056eb7540abafe488b31e4062cb45e2b78bab9ef92c300e542bc11804a2b73f","ssdeep":"","tlshash":"7f8163bc50e132822a870167738a6163b4d4409b1c6a760cb85f436e1fddc9d3e7c6e6","first_seen":"2023-03-08T22:56:13Z","last_seen":"2026-07-19T10:15:38.483765Z","times_seen":24,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps/e41d25534028ebc3b8e9.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/ymaps/e41d25534028ebc3b8e9.yandex.ru.js HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"581bb7a94d1535032a1b2131d2fe7835\"\r\ncache-control: public, max-age=31556952\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-nginx-request-id: a21ef02624be4513\r\ncontent-encoding: br\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Tue, 02 Mar 2027 22:21:03 GMT\r\ntiming-allow-origin: *\r\nlast-modified: Mon, 16 Feb 2026 07:26:24 GMT\r\nx-strm-log-split: 2\r\nx-request-id: d8f5c502e820bec7\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210591,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"581bb7a94d1535032a1b2131d2fe7835","sha1":"d5ef27f65659b6ef801ea65f0a547ae2298db693","sha256":"eb0b3fe6e5d2147ac4994a08a241ccaa90673f48f5122151b00e3bbdda056577","sha512":"5a969b4a4455c4b706fe38a714d773a6d1f516d520ad7a5d5e1edd8f430956a8388c186cd933eff145af8fd955fa8708b3998b16a89aa868c7864da789157861","ssdeep":"3072:iqDgzzZibv9tR+cRhdqkkQpE5M1n/mxePdJrdEOkSfVj:iqDgzzAnjqkQ5mn/mxePdJrdEOVj","tlshash":"1224e68eb141b41582c7a276513f080bb236a596550e842cf269e8ff3dbc858763bf7d","first_seen":"2026-02-18T18:39:03.082667Z","last_seen":"2026-04-13T09:29:25.24171Z","times_seen":646,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=622\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=622\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 17488\r\netag: \"fc37b5fac02e1f7d166215feb9be1670\"\r\nset-cookie: _yasc=+c3YApnQxc2TpsDyJ5iq3Ije2kj7Dygl6oNnkQPzc7dZ1rX8eE5hKvpSC7BbGeI=; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=+T4R05mR2nFPWw6wv/bhx9S4Q6y1hM7fkg74IWExj/FP+l3uEb0Fz/Mrg2uLo9sbkf/LI9yDyO4jN01nG81eS4n0Zew=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=3425593811772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=3239964561772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\nx-l7-hostname: ci75jxxharwretnw.vla.yp-c.yandex.net\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\ncache-control: max-age=7654321\r\ncontent-type: image/png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"fc37b5fac02e1f7d166215feb9be1670","sha1":"a61a8c4fa53750f105b433b4035d8ab70f672936","sha256":"6db234a0c6566c6231441fe3567da4b4a3611a6768cd63a2cdde4b321b1cb107","sha512":"85a957d4df721c95a58a033e86ac66977bc28f63af65fc3b6c0cf8e1c88d3c27c9e8be565d78fc6f723ddabab6dc9ae344d96375227b336b1606515abb821bcd","ssdeep":"384:7Fa4xHdyuQv+bmqjzaaeR2cKoTPVncDLjXDi7SR0TinGewi:pa4xoWbhi2cKoTu7XDi74Gni","tlshash":"5772d1491e5b0256e4cee6416710735c9fb0c63adf1c72c2aa80eb5f73600996878bc6","first_seen":"2026-03-02T16:38:16.072304Z","last_seen":"2026-03-02T16:38:16.072304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":138,"dns":11,"connect":43,"send":0,"wait":85,"receive":2,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/css/animate.css","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 06:40:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699fead5-aff9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45049,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (43901)","md5":"1b75dddc667b49cf9d056d72af5507c8","sha1":"33f8e5c955198aebdf5269c518ca67134dfac536","sha256":"d884ce28502ec8d10368712d3ce06bb9bbb0661dfc01cebd0b43f6f10c9ac88b","sha512":"2bccfbaab719cdad3bc5c4c88a73c6ed7462cea1a565ba35c4e06bb4f7159212bc246d2fd828822b941645b7ee0e41edf6937c0be0d60b633640d01a8763b3c8","ssdeep":"768:FmICp2kLx8dPwG1ZAIkKDJ3bys5XrHeY01Tv:FHwG1ZAIkKDJ3bys5XrHeY01Tv","tlshash":"9e13b5aa4ce0228554260e15cbdc8fa84b3cc76764b25cef3356784bc745bad23de627","first_seen":"2023-05-14T07:50:04Z","last_seen":"2026-08-10T20:39:51.904943Z","times_seen":163,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/wow.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/wow.min.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feacc-1baa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7082,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7052)","md5":"5fa2e4b6acb5db11843b66b812040de3","sha1":"13895175fe8fc3bb341af017a197ce8599e59451","sha256":"36a88df037dc6c940450a9e251a34c9321d76d894d3d1734ee8cede45028d84c","sha512":"0c42509738a3d6f2f111a34b3e84c34bbb09f25c438f548acff4e51850bb8d7c69e1b0900062651182703df37941fc6b37d819809de16143c1edd1799b28a0b4","ssdeep":"96:0PV6GqKyR6TYATHFMLzuCvp5OVEE1f3e1gJ1IHImBaokbl:0PVfSW2PuCnOVEEd3eiJmHILoe","tlshash":"82e175c9bb877032c357a1f6873f0506b33a59ada028047cb6a885e53d78c59523bf78","first_seen":"2023-03-07T12:01:54Z","last_seen":"2026-08-10T20:57:37.688625Z","times_seen":1424,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/css/style.css?1772469446","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /css/style.css?1772469446 HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 06:40:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699fead6-36ef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14063,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14063), with no line terminators","md5":"448ce2dbadf7ac74ade512ea7401b27c","sha1":"351f9a661a3e71d08497c6c7a6f6ab9e80e81355","sha256":"61825b9d1f51e16b10db3731aa74c8be908eed1c27209233adf9e91661c72d9f","sha512":"1bed761ffc46925d34bd0f647d1eec4ac9f9dbcdae895dab345d78f16ed25ee52ba7ec3dfdca8fe2916e407bdd76b0fce72395937aeb867171f1d75265f8ca03","ssdeep":"192:3QuKxccp3YgTUhUkqwbALlPtnbhap9sBZ8u9fPUht1XsB:3ZKxccp3PkqwbALlPtbop9uPUht1XsB","tlshash":"e0524622b659311df027cab5a2c1a8d475349503fa570fbefa713926c7b20de2223b4d","first_seen":"2025-11-07T18:09:05.018321Z","last_seen":"2026-03-02T16:38:16.074087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/gerl.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/gerl.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 86549\r\nlast-modified: Thu, 26 Feb 2026 06:40:14 GMT\r\netag: \"699feace-15215\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 466 x 600, 8-bit colormap, non-interlaced","md5":"2bfe3f2e59c1e7fc4cd5eec785ab898c","sha1":"7b256ba855483fe12069ef4cc77339c80c8703a8","sha256":"557b1fa06c85f3a9847c341a1915dadcb31ab3f4aa23a7794b1110afe1198a9c","sha512":"c5d4de0b9b646c5f785cea002607a8c03e651ea06655c8fb386fca1e53bf3896eb7ee2bfc8ce97136468e5312e7564c00825f8f45cd9695a919afce79b94fac3","ssdeep":"1536:U4/FqTuO1FRPRFHhTcHa/JI8MtcuEO+ZPy+cc6gxQpyzvqcd9:zdqT7PxcsMtcRXFy89y47qcd9","tlshash":"448302e1d0c3ea46f17b975d5933cc107a1c0d1c55ce90601c8b897ff6a736b8aa92ae","first_seen":"2025-11-07T18:09:05.015952Z","last_seen":"2026-03-02T16:38:16.074961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/female.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/female.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 37589\r\nlast-modified: Thu, 26 Feb 2026 06:40:14 GMT\r\netag: \"699feace-92d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 334 x 592, 8-bit colormap, non-interlaced","md5":"999416cfab5fb7405217b5381f0d09df","sha1":"e1ab4ffb563782080de50cb05a9b1ac65ea2952b","sha256":"3535251f2f05b6654b6e6d0c22b3b1f806dcfa4d08b4d2f83ae3384b8766635c","sha512":"e412d97a1ac43b32939b92ef96935a5cab434a243a61e0ef563813db74aa86836d9b5e6f88e557cb5f16b51b067222eed44e01c865d477eb9fdc8907e2f7e963","ssdeep":"768:3O600Tj+oQz3j1YJ/kP7YXl2bra0OVvViv05cesof3x1HF00eev0E:3O6zTSbj1y/kj82bra0ivVi8cdof3DHJ","tlshash":"e8f2f1554a9eed74f17552f4c2229c8024450902ee7a743ab77df32fc2a59f18172cd7","first_seen":"2025-11-07T18:09:04.980341Z","last_seen":"2026-03-02T16:38:16.075792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/static/v54/icons/core/logo-24.svg","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/front-maps-static/maps-front-maps/static/v54/icons/core/logo-24.svg HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yandex.ru/\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"dfa85f8fef0925f34b0b5d39ad8ff1d3\"\r\nvary: Accept-Encoding\r\nx-nginx-request-id: 2bd2bbf926936274\r\nexpires: Tue, 02 Mar 2027 22:16:08 GMT\r\nlast-modified: Wed, 11 Feb 2026 07:24:39 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\ncache-control: public, max-age=31556952\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-strm-log-split: 0\r\nx-request-id: 70e83a316f0d4be7\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dfa85f8fef0925f34b0b5d39ad8ff1d3","sha1":"c731c0d80e45f91887e7977dd33b881e9ddbf6a2","sha256":"43ad36a2b4f48f493636bca3828bcee921ff89f3a6e73a09918886284d631b4f","sha512":"cf4491be7e9e3e5d46859b6ce03731084f354193a8395d2f2b916dd69324f34a79b73a1c56a524942d21da0dd8a3972d14547725c5a39bb54617afbe4ec7af71","ssdeep":"","tlshash":"afe0d8d18e9b44ddd686893d472a6149c35ff5767b4402ac8a0e9328d8054b1a90e828","first_seen":"2023-04-20T15:52:59Z","last_seen":"2026-03-26T08:45:37.92533Z","times_seen":2467,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=620\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=620\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 16300\r\nset-cookie: _yasc=zTO6yKSTNkhMRqynLfsuaOZJhFw93WQgv70TAR2x0qUEEHA6/nvpcjmHS2p34Gw=; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=XvEBetSl0tIh9hDamDK9pfKA/ZTESbhW0sh3IkXr4GzGOjA4L4DhKnQt+AIGl7pDJQaMbrpDmSwaxJVhFxEfrbRbZcg=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=4148403521772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=3973346491772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\nvary: Origin\r\nx-l7-hostname: cdlr45a2cu4mkllr.klg.yp-c.yandex.net\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\netag: \"116329909f9e65a80c598b4e53fd3401\"\r\ncache-control: max-age=7654321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"116329909f9e65a80c598b4e53fd3401","sha1":"b1ff856415fd8f85fe3bbdf5c5dc812fbb89f622","sha256":"7d8b7aea5a2650e868b2e35c9d59aefa457d52be2a989c4669a25bb670b761b6","sha512":"2a0ca275a985bdd76548e8bec4c9a1efff0785a43287481bc66e402121154bad1de4ebca820825ae98b16935e903e3f231a7b22d7e226eed1f0c70ac4c998524","ssdeep":"384:97DKV7dzOVYWazG9bolen5jo58Qu10JKDDC43BP:9DK/zOVpsG9EAWDs0yCAl","tlshash":"6372d0cdbb7ab2a211ae509097168115d4818378cf6ff0793f23f3d635ada94d07c299","first_seen":"2026-03-02T16:38:16.077069Z","last_seen":"2026-03-02T16:38:16.077069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":143,"dns":7,"connect":45,"send":0,"wait":101,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/fun_bg.jpg","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/fun_bg.jpg HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/css/style.css?1772469446\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 248336\r\nlast-modified: Thu, 26 Feb 2026 06:40:14 GMT\r\netag: \"699feace-3ca10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"8de016e448c4a763f838575b8b5a6bab","sha1":"58d8272561289b52c8132bbb57084f940f966c32","sha256":"6ee06c778d46ef4f226bd6e3900cf7a3c9fb12990cec5ee7b60d99d85ec7cb03","sha512":"0fa1a4d0213933a53aa85e2a000e6dfb53050c7c6808cf187991573d3f8dd4e46fef4045e536c220d2b584b691626ea4bf0e9e71ec6ddf07aefced28061f0f4e","ssdeep":"6144:1tlVaki852kRUOoYxF8JGA1XyWthefK57wxQlODQq8zJ:1tlVakj5JuYAR/hDRI8q6","tlshash":"123423807e753638de316b5a2315cb29fc194d9d896e1e8fd070db0126fe9858da6383","first_seen":"2025-11-07T18:09:05.006707Z","last_seen":"2026-03-02T16:38:16.077912Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14792\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 02:03:59 GMT\r\nexpires: Fri, 26 Feb 2027 02:03:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:45 GMT\r\ncontent-type: font/woff2\r\nage: 398008\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14792, version 1.0","md5":"c37aa11e5024b0f8908f3742c9a0d9b9","sha1":"b2ccee72f93c83b0be62da9e8bfa77943c481500","sha256":"46d6a0984aa795b764141232671160e61bdcc49e900de67ca6b35bae25b1ebdd","sha512":"dc3f2e177666b9666b0e51399f4e6600246f56865c92ce8a204c2407818b3fa038abb794341cb9d16781451db487aabc1a84e5262619fad90e6886e11fa3e699","ssdeep":"384:XZs0UC5sLGL2sZJCnfayiBoJdSpMzgZqO46EegOHBKagapO:X2C5sLsBmfqSJgMzgUPegOHBRnO","tlshash":"4d62d07198885687b0f5b7348e2f2a6f66f3514028685312acc3fc6cdb5bd4670279ca","first_seen":"2025-09-11T20:37:14.108754Z","last_seen":"2026-08-12T21:56:17.064289Z","times_seen":31782,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: default-src 'self';connect-src 'self' yastatic.net *.yastatic.net *.yandex.net *.yandex.ru *.yandex.com *.yandex-team.ru yandex.ru yandex.ua yandex.com.tr yandex.com yandex.kz yandex.uz mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru yandexmetrica.com:*;frame-src data: blob: https://yandex.ru *.yandex.ru https://*.yandex.net;img-src 'self' data: yastatic.net *.yastatic.net https://yandex.ru *.yandex.ru https://*.yandex.net *.yandex.net *.yandex.com *.yandex-team.ru mc.yandex.ru mc.yandex.az mc.yandex.ua mc.yandex.com.tr mc.yandex.co.il mc.yandex.com mc.yandex.com.am mc.yandex.com.ge mc.yandex.uz mc.yandex.by mc.yandex.kz mc.yandex.kg mc.yandex.fr mc.yandex.tj mc.yandex.lv mc.yandex.lt mc.yandex.md mc.yandex.tm mc.yandex.ee yandex.ru yandex.ua yandex.com.tr yandex.com yandex.kz yandex.uz mc.webvisor.com mc.webvisor.org mc.admetrica.ru;script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net *.yastatic.net *.yandex.net *.yandex.ru *.yandex.com *.yandex-team.ru https://*.yandex.net https://*.yandex.ru mc.yandex.az mc.yandex.by mc.yandex.co.il mc.yandex.com.am mc.yandex.com.ge mc.yandex.com.tr mc.yandex.ee mc.yandex.fr mc.yandex.kg mc.yandex.kz mc.yandex.lt mc.yandex.lv mc.yandex.md mc.yandex.tj mc.yandex.tm mc.yandex.uz mc.webvisor.com mc.webvisor.org yandex.ru 'nonce-79474c2997604a0dae588ad23d3d76c0';child-src 'self' data: blob: mc.yandex.ru yandex.st *.yandex.net *.yandex.ru *.yandex.com *.yandex-team.ru https://*.yandex.net https://*.yandex.ru;style-src 'self' blob: 'unsafe-inline' yandex.st yastatic.net *.yastatic.net yastat.net;font-src data: yandex.st *.yandex.net *.yandex.ru *.yandex.com *.yandex-team.ru yastatic.net *.yastatic.net;media-src data: yastatic.net *.yastatic.net *.yandex.net *.yandex.ru yandex.st yastat.net;report-to csp-endpoint\r\ncontent-type: text/html; charset=utf-8\r\nx-yandex-req-id: 1772469448100057-611622044779837408-balancer-l7leveler-kubr-yp-sas-249-BAL\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private, proxy-revalidate\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Wed, 01 Mar 2028 16:37:28 GMT; SameSite=None; Secure\nis_gdpr_b=CKKGRxCT9wIYAQ==; Path=/; Domain=.yandex.ru; Expires=Wed, 01 Mar 2028 16:37:28 GMT; SameSite=None; Secure\n_yasc=By3xHAihbCsS1zEkhaqqY53qKoep6t7R3B9Hp05ivMCPG4eog5dEUjs8iWo2YA==; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:28 GMT; secure\npi=NwHBJa8FzAIXSWYHabmiY4QyD9+C6hyte6Fq3yJMV/PCrjl/uyR6KU+0km2MU1UEOZQwRAblSHbciiqp/r0JyrBHS7Q=; Expires=Wed, 01-Mar-2028 16:37:28 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=IHt++dlO8gBE3fjOaGLydReF2XVyrUVKSdJu4gSttctLjQbcJSbdD9+qZwXu8UVEKBTypXmI4LCr40qPZkiPBK2IzY0=; Expires=Wed, 01-Mar-2028 16:37:28 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7798374081772469448; Expires=Wed, 01-Mar-2028 16:37:28 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=4248149821772469448; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:28 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YMj5ls0GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Tue, 06 Apr 2027 16:37:28 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nreporting-endpoints: default=\"/map-widget/v1/api/browser-report?from=map-widget\u0026project=maps\u0026yandexuid=7798374081772469448\", csp-endpoint=\"https://csp.yandex.net/csp?from=map-widget\u0026project=maps\u0026yandexuid=7798374081772469448\"\r\nx-req-id: 1772469448100057-611622044779837408-balancer-l7leveler-kubr-yp-sas-249-BAL\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":184946,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"df20b5dcc17be6b4564a365b26547923","sha1":"4bccbd3dbf7691d40498768c51f93c4d2b9bca07","sha256":"9e91c7733c0aee7ef824419cc29cbcf2fdd50dc9737bf075b920900c8e5a187c","sha512":"84f3acb2959f635648b9cc815b211ce156f1c0cf53e882f13e62191b4ab7fe1367ec590fa39222badaaccf1e7487cc2c32a862de437b716c7251b945c4b2cfd0","ssdeep":"3072:IeUFyCHT5fr91a4uVjAwx0xlTf0QVu8BkJGT5fr91a4uVjAwx0xlTf0QVu8BkJf:9kT5fr91a4uVjAwx0xlTf0QVu8JT5fr8","tlshash":"a604f8f081107e75a61bd21edb88decc3134c103ec611acbbf58b4a985dd2daa95e727","first_seen":"2026-03-02T16:38:16.082446Z","last_seen":"2026-03-02T16:38:16.082446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":166,"dns":14,"connect":48,"send":0,"wait":81,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/home/fonts/ys/4/text-regular.woff2","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/4/text-regular.woff2 HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yandex.ru/\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41636\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\ntiming-allow-origin: *\r\netag: \"983547e564a3ba0efe51527722fbbb4f\"\r\nlast-modified: Thu, 26 Jan 2023 10:29:02 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-nginx-request-id: e6a3fc4dbe4aef6e\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Tue, 02 Mar 2027 22:21:30 GMT\r\ncache-control: public, max-age=31556952\r\nvary: Accept-Encoding\r\nx-strm-log-split: 2\r\nx-request-id: c5ddee04b8b804c7\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41636, version 1.0","md5":"983547e564a3ba0efe51527722fbbb4f","sha1":"2138d7f2c1cbbca359da86372e37692299893f57","sha256":"5895185cf878a38cd172286ed97976e6ab620b2c5fd7f7810f9c9d2f7169da6d","sha512":"edef11dc8612b701db7c94d43fd032ee08a13adecfe93c5fda527cba8ffa5ccdea6b8fa107d35a5979bfdddb2832dd4fcc42cb99095186d620b6717cb7bbc6b8","ssdeep":"768:XSYp/ALKyL5k6G+3bF1yBVki2H9iM4HrDvGd1df9K/MsyvUe:XSMy9lrLyBVoQM4LDefdfw/BId","tlshash":"f81302db26419ffe5c6b3efc1c66b0cd1404160b8c7b7e8a73659747d085317baaa888","first_seen":"2023-08-18T07:07:20Z","last_seen":"2026-08-12T19:54:05.371255Z","times_seen":3469,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/client_2.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/client_2.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 11653\r\nlast-modified: Thu, 26 Feb 2026 06:40:13 GMT\r\netag: \"699feacd-2d85\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 134, 8-bit colormap, non-interlaced","md5":"1ff1fbfbbd492980dfda9b435ee9c2ee","sha1":"5d0b522f68c535839310a22a227bdc495bf0fb64","sha256":"5caeef1658141ad86366aa785533d4b81944e67fcd71e18a08fd04f47d262ace","sha512":"0e490d609c267dc9863f4d539c131ebb02414f9684fc645f90bb72cc8049eaea4a02b9ce77467e61cdb3ed2c024dafd4dfee31b1eff5fa96c70ed031d378aa8e","ssdeep":"192:URdhfLvAbCa1MZ0mvtyZnyaKqFfZ2kIMhyBxxQY5C3ZXaTeEPY6xvcLhnqNn/SVv:UXFcmvEKqFh5sfJC1aKYbxvu+K","tlshash":"c332d096b959fef10a88c77d5c6d2953a4b23c04b49d706793069a014f30af6fc316de","first_seen":"2025-11-07T18:09:04.98575Z","last_seen":"2026-03-02T16:38:16.084639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feacb-1787d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96381,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-08-12T21:39:35.233998Z","times_seen":31955,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.counterup.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/jquery.counterup.min.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feaca-42b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T20:21:56.808241Z","times_seen":13072,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 02:03:48 GMT\r\nexpires: Fri, 26 Feb 2027 02:03:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 398019\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-12T14:06:02.320207Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":157,"dns":7,"connect":37,"send":0,"wait":8,"receive":1,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 02:03:48 GMT\r\nexpires: Fri, 26 Feb 2027 02:03:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 398019\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-12T14:06:02.320207Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 18:06:55 GMT\r\nexpires: Wed, 24 Feb 2027 18:06:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:54 GMT\r\ncontent-type: font/woff2\r\nage: 513032\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14724, version 1.0","md5":"b8be966e335e865e3c73faa8cce0ed35","sha1":"d0cd995e87f5bfb0206759b83e5ef25676d0edd8","sha256":"06b675a649489d21b7fd33f19b1c6d37e8bd778ded07ecfec26bbc8f11e694f4","sha512":"2257e0a09a86666b280d44ae551a33d17a6072043a2c38f0bb905847b66217809870c8cd6ab3a6ebce3e04b2ff79bedd11f1b18c7d65c231f8c9f21ed8a26e5e","ssdeep":"384:wK2JDEZSzIQA8yHGXMXvQDxyrGCQYamlyFlGWD:zrB8y0zKmYasKh","tlshash":"f962c0d2c64154daea05b9b35f612538bc99bf462054fd0796cbe41df7230a8fe382e2","first_seen":"2025-09-11T17:07:37.682239Z","last_seen":"2026-08-12T21:56:16.999493Z","times_seen":52749,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/home/fonts/ys/4/text-medium.woff2","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/4/text-medium.woff2 HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yandex.ru/\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49548\r\netag: \"4c97e746b33e4d1b01efd393c8a8e3ef\"\r\nvary: Accept-Encoding\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nlast-modified: Thu, 26 Jan 2023 10:28:59 GMT\r\ncache-control: public, max-age=31556952\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Tue, 02 Mar 2027 22:09:37 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-nginx-request-id: c497541ac72ba384\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 3\r\nx-request-id: f6c058c087231a52\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49548, version 1.0","md5":"4c97e746b33e4d1b01efd393c8a8e3ef","sha1":"709d949bd520e6071cfb6f1b5984aed773684bd0","sha256":"b3cd587a747007fc5a365ceec5daa964c559e4862ae70aa98f5d0e1849d5ddf0","sha512":"5627b679b36c8c677a44b680611d6192808564df47d6d1f8e306c95361b71564ff2ebc5dbecaf55197db1c7274853171052cc2f8c0472759be26d7d03f193149","ssdeep":"768:Sxrl1KfIu1N2gobTaFLJW8axrJbuaABIo5wDJs9nCoux5CwjRHixwz0ri6yq:cr3K1N2gEWza9JC3I/ICB7jIxM0ris","tlshash":"6323f146286522cadb536b125e68a9f751208b63e4746eb2dec2ff2ccd97cd4c3c7640","first_seen":"2024-01-04T18:17:32Z","last_seen":"2026-08-12T19:54:05.293469Z","times_seen":3141,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/jquery.parallax-1.1.3.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/jquery.parallax-1.1.3.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 925\r\nlast-modified: Thu, 26 Feb 2026 06:40:11 GMT\r\netag: \"699feacb-39d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":925,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (430)","md5":"785489701fec57db6cbc77ee18dba5ab","sha1":"a0c4d3ff09db501c71429aa733b2b28a80e3543f","sha256":"5589473adf0e44c3fb2c32f14e18c24757f7af26afa44cd16c0a014b0352f20a","sha512":"2e93a10abbd7dc95bc96679c396637f41548c716de9bcff7d783845552c8638e277cfebc6f9d34010606688bfc84c9050a84b070ded905c33d3db72130affb24","ssdeep":"","tlshash":"8f11ba34bb107045cc7a712b0b3bf30ab212364108028234d239e4dc6eeda4bb86ac68","first_seen":"2024-10-16T10:36:40.005274Z","last_seen":"2026-04-30T23:05:28.461229Z","times_seen":12,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 02:03:48 GMT\r\nexpires: Fri, 26 Feb 2027 02:03:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 398019\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-12T14:06:02.320207Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":127,"dns":7,"connect":37,"send":0,"wait":35,"receive":1,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/fonts/fontawesome-webfont.woff?v=4.2.0","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\ncontent-type: font/woff\r\ncontent-length: 90412\r\nlast-modified: Thu, 26 Feb 2026 06:40:19 GMT\r\netag: \"699fead3-1612c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90412,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 90412, version 1.0","md5":"c8ddf1e5e5bf3682bc7bebf30f394148","sha1":"6d7e6a5fc802b13694d8820fc0138037c0977d2e","sha256":"adbc4f95eb6d7f2738959cf0ecbc374672fce47e856050a8e9791f457623ac2c","sha512":"6d465acf39b4cdb365bfdc32ea06637a9f14ed1c1508353a7e0627b6b88efe8acca77accad3a4bf3f8eafeb638b7867ec98ea6be3338e63af4067ec3f6c5fa18","ssdeep":"1536:Vx1QuVD2cALyUabwF3A+3PY27krILOlnRO6kvBdbfDc5RX061lxpo1v:VVVD25LyUakfYckr3lnlkvXrc5RkSx+l","tlshash":"e1931223577224cdd242a8a48bc0f67f9439008b08c5bec05cf5dba5defdad6cd26990","first_seen":"2023-04-08T03:04:49Z","last_seen":"2026-08-08T23:28:36.160587Z","times_seen":1267,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maps.yastatic.net/s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/map-widget-app/fec9d41075f93aaa0ebe.yandex.ru.js","fqdn":"maps.yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:28.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/front-maps-static/maps-front-maps/build/client/map-widget/chunks/map-widget-app/fec9d41075f93aaa0ebe.yandex.ru.js HTTP/1.1\r\nHost: maps.yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://yandex.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nx-nginx-request-id: d8002f8138dd632a\r\ntiming-allow-origin: *\r\nlast-modified: Fri, 27 Feb 2026 07:23:26 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\netag: W/\"e2bbc0558f6000bffa1653f94a66237e\"\r\ncache-control: public, max-age=31556952\r\ncontent-encoding: br\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Tue, 02 Mar 2027 22:10:08 GMT\r\nx-strm-log-split: 1\r\nx-request-id: 361a3c099b17cc74\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":536202,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65497), with no line terminators","md5":"e2bbc0558f6000bffa1653f94a66237e","sha1":"92eb96e4892d5fc716674e11110cf76ab14fcac7","sha256":"b3478a72bea27d77a7de9e3a48e3935bf827b92f14d2ec0701852b8ecbda2e82","sha512":"4ca41b081538905b69d0d137a702e2dee1a862344445169fd4602a0d8a399e7bcfbedfbc42fc5401928df912be1c5c67742cbc691c5d220aa59b91908d390658","ssdeep":"6144:5HbemjHJR10cJFc4pA//2iFyH37sR2U2hoKOkxqZHq9Lf:5HdjHJR10cJ7pA//2iFK37m29GKOkxb5","tlshash":"08b4f7c9f095b06846d32abac26f150ab37a3e4da40d8510b266d8d83d7d95c723ff39","first_seen":"2026-02-27T19:07:55.517313Z","last_seen":"2026-03-03T08:25:09.541453Z","times_seen":50,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":127,"dns":1,"connect":30,"send":0,"wait":14,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=621\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=621\u0026y=318\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 11767\r\naccess-control-allow-origin: *\r\nx-l7-hostname: n5yqznuqjogcvkm7.sas.yp-c.yandex.net\r\ncontent-type: image/png\r\netag: \"e9a569253077b9160f1759097d5904b4\"\r\nvary: Origin\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\ncache-control: max-age=7654321\r\nset-cookie: _yasc=dRJsxglkxPVQ6pMVF0P50/qJTOpGoIiPcumxUpg45LuYR1fSvyF1ZxnxqaYq0K4=; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=OwNztq8MwihiI/gg21NLemL6JBJbNIgxudPCeBuP9G//0pGSqn2EpzLoS7tsPddHxEyQigCpvyboiLZ8woqSjg2Ea38=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=6508821041772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=4772920431772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"e9a569253077b9160f1759097d5904b4","sha1":"be45389570b74cee697bb2a7318b7348b64f3a1d","sha256":"52b052e98d1ec2a7b84a4e665ef8e59865cb6d6076396303966de86537442a85","sha512":"f384a6c86351f740589cf76d207f924d22ab82a35fb486007204db4e303bdade9eb0738a4d5832a538526e41e864a59b878a78615ae24be5073e43354c724762","ssdeep":"192:EU+XoCjvBiVJUBJ4ANMECyA10g5Ev9s2hWYbmpMUpnz7X5+Glms:EZ4OivUuYAmgyv97ZbmpMUpnz7YGlR","tlshash":"ca32cf79d27679f7ced353b7a51279b8c25a571241168c0a468b4bef3e0205c1a3ce1b","first_seen":"2026-03-02T16:38:16.089708Z","last_seen":"2026-03-15T18:03:00.802451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":155,"dns":8,"connect":50,"send":0,"wait":150,"receive":2,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/mail-gerl.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/mail-gerl.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 61360\r\nlast-modified: Thu, 26 Feb 2026 06:40:15 GMT\r\netag: \"699feacf-efb0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 848 x 400, 8-bit colormap, non-interlaced","md5":"914055d38e821a4b97f025497f59633e","sha1":"d67e7cc2137fbec8dee5ce5e533989a8e74e119e","sha256":"5f6115c2e445fc9087f4ab4a43f9ce80f11a712d8700671b13b9303d801cf670","sha512":"2f9eabbeacdd39f5d8d8b5a88b4971f5b931a5f346bb80cc28cdc79ac9418844d0bea41b7670f602135394182c93b8cc9c535d4c4cd718251a9c851a9098be26","ssdeep":"1536:/Rv/ux57LCVFgB7uNq0Ba/zAgN+k2C8Nu1G:/Z/iXBiN7DC8Nh","tlshash":"d153027883e1bd3283139a47f743a86d6c7ba0574af68158b73db422a3cac9c6f55121","first_seen":"2025-11-07T18:09:05.021557Z","last_seen":"2026-03-02T16:38:16.090753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/home.jpg","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/home.jpg HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/css/style.css?1772469446\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 203504\r\nlast-modified: Thu, 26 Feb 2026 06:40:15 GMT\r\netag: \"699feacf-31af0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203504,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1212, components 3","md5":"f80e9a34d4469099f0e7b1a32821c420","sha1":"9f8855446dd1eac4625925d38bb12d3e06580534","sha256":"6cffc1b36a3820c7de804e7df91cb59060bbd11164affd0e19a8b9f23593a14e","sha512":"c65156a04c4623a0bd868ec3818ee27ebef589887282f164e6be5421fa2c0520ffecdfa58fc4e24b5f48af129b19ea7d439a93832ccd5c5931730928af16408d","ssdeep":"3072:SBA850gRBa6OPwx6J7M583artr9EVYWzf2N2Xak3tLiSzk2DP8T4MnethV+wsNpF:qayXVx6J45GMTEwN2Xasnzpj8cm0nsNv","tlshash":"c41422a60f62182df8aebf745355dfcb29f784aac145e0862d4e5ac4527e128fd8f031","first_seen":"2025-11-07T18:09:04.982057Z","last_seen":"2026-03-02T16:38:16.092195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 12:49:41 GMT\r\nexpires: Tue, 02 Mar 2027 12:49:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 13666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T21:10:28.750205Z","times_seen":63627,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":324,"dns":7,"connect":37,"send":0,"wait":8,"receive":3,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCkIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 02:03:48 GMT\r\nexpires: Fri, 26 Feb 2027 02:03:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:02:55 GMT\r\ncontent-type: font/woff2\r\nage: 398019\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25864, version 1.0","md5":"7d930c3ad34795a762739aa13fca14c7","sha1":"e0e0ffa753785e486825363286d85286eca13dd4","sha256":"ac99ad1c437b60ef445a7c13c958d4d574ef98050de2ccf182ba6ccdb3bfbdfd","sha512":"32343b9e36101cb0b21a9f3eeb07f1ec190dc82ae9fdd092d4d305cd533308a0456126c34d0f76687f0483192ff10fcf6a9b2a10652eb22ea71918b86c3e23f8","ssdeep":"384:GIZmFjEbDcnw4TNhneUV5NUdgBtHET46ReIatMtrbkhZ4weW8FSET78gXOxRnBKz:XlXe5xfbUdg7eQIatqnKyCITAnBi88Zp","tlshash":"c0c2e1eaa6090f9b5a3c8271b71cb3a0ea57e11fb5b40e228d95d1fdb1d7115030e6b3","first_seen":"2025-09-12T04:50:20.840249Z","last_seen":"2026-08-12T14:06:02.320207Z","times_seen":1232,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T16:37:26.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 12234\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"FitVids.JS","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":55110,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (740)","md5":"9275afa1e4fca58b71b55ba7cd2ee927","sha1":"6484ac7ffcac3327c83204acae743426363d7d57","sha256":"b82f5783ac462fbd09a03e0fb7f4c1bc5b9d948eb4b4e6f0d57d6ca8eb051b8d","sha512":"487200268434dd36fb8d83df0d0071601ae7b77caba7881d3d94df8e1da15e27fc817cd512a4cf6e59aa9484dba54e778a715e95135dd3f39211d24aff04520d","ssdeep":"384:B+30oomFID4UDXlJFkctcVugH++++++++++++++EfwVdq3mfHtO7QysFoAbCzra3:BKomuPlvvyCG5y7VFQDvFldZIlg","tlshash":"8833531056fd646b00429096f9647e0b7ee299bfae2f025131bc0eae3fe3f55c917249","first_seen":"2026-03-02T16:38:16.09341Z","last_seen":"2026-03-02T16:38:16.09341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":103,"dns":41,"connect":29,"send":0,"wait":31,"receive":20,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/css/owl.carousel.css","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /css/owl.carousel.css HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 06:40:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699fead5-44f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1103), with no line terminators","md5":"6a3c8f7c553d23c6d8f2a0ff795967b3","sha1":"4284c239ae24f80b1e21783d66b6871343e3e2d0","sha256":"a9e5f7d4a04e858b09c4291aa6121d2f9d5d64432d7137285ae62c6f5aa97e96","sha512":"14ee155c541fcf8182ae8a44ba0f6a28574a095a037360b0bf55f1afb7084c15c1feff664865f6efed11011e3503637bb4121ff9035182f6184ec9eb0523f3ba","ssdeep":"","tlshash":"9e116bf41216356e502f831a56daae49183dd662de23060e675fea0503c7e2e613fbce","first_seen":"2025-11-07T18:09:05.012344Z","last_seen":"2026-03-02T16:38:16.095065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/home.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/home.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 133\r\nlast-modified: Thu, 26 Feb 2026 06:40:14 GMT\r\netag: \"699feace-85\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 653, 1-bit colormap, non-interlaced","md5":"c27075ed057316661d2112d41990b8ac","sha1":"ded677d25de398f55dc4e46913c1df99b0c58a0d","sha256":"0a75bc557b37ce984cafb3227876886995c1a8a89914799b15fecf8a6b27f310","sha512":"fd4bc7476b1e31d752631db5714b8b6d26503c13a52add08db3d0cef091df2a883775237e5f32ad3b2ce234cc58a604feb668d79c2bbd6c8eded4f4b560a2524","ssdeep":"","tlshash":"8dc012c3b3008cb4dd250533c5dc8d46eb300234e02a058a1681543c3850358c7c064a","first_seen":"2025-11-07T18:09:04.995894Z","last_seen":"2026-03-02T16:38:16.09931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/bootstrap.min.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feaca-71b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29110,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28941)","md5":"ba847811448ef90d98d272aeccef2a95","sha1":"5814e91bb6276f4de8b7951c965f2f190a03978d","sha256":"898d05a17f2cfc5120ddcdba47a885c378c0b466f30f0700e502757e24b403a1","sha512":"bced99d9331614757643273441a2b8921103382949ab0e510f386c453ec2a2359da39680d8a169e6bcbe7531844eaf5f598560f0d133d3fa3a9f6c7502b148df","ssdeep":"768:jryxMjJYkskKzykVtCb+9C8agZMdyKHfivbOCtFKH:3HbjZC7w","tlshash":"f1d26506b2303161079fb2f5515f020b733a6a7ee906907c38b99ae63d79c587167f39","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-08-12T18:29:45.131745Z","times_seen":29109,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-maps.yandex.ru/services/constructor/1.0/js/?um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec\u0026width=100%\u0026height=315\u0026lang=ru_RU\u0026scroll=true","fqdn":"api-maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.134","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-maps.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 22 Feb 2026 21:07:06 GMT","end":"Tue, 18 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"97:EE:6F:D3:D0:51:AE:C0:15:50:2F:39:AE:1A:04:02:72:E7:36:F7","sha256":"5C:59:AD:EB:A7:20:C7:6C:67:AC:68:FD:59:BD:7F:F9:61:B3:9A:F5:EF:47:22:01:E5:7A:C8:E2:6C:57:E8:97"}}},"request":{"raw":"GET /services/constructor/1.0/js/?um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec\u0026width=100%\u0026height=315\u0026lang=ru_RU\u0026scroll=true HTTP/1.1\r\nHost: api-maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-start-time: 1772469447821983\r\nx-req-id: 1772469447821983-11690960104302630683-ikvj6jbq4rp5qcnl-BAL\r\ncontent-type: application/javascript; charset=utf-8\r\nx-frame-options: DENY\r\netag: W/\"62b5-9mHfXWG0rOPnQh5o/H6P1mVByQg\"\r\nvary: Accept-Encoding\r\nset-cookie: _yasc=E+RZktagbkWa0u7/JtK5Hz9WN5Dn8825f3dgFYl0HoH+fqmcz/yobaIVuxD6+Q==; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:27 GMT; secure\ni=c7Qm3uObeahkkCxREwOWzTx9z0e2yOckwUJNwtKq3nA4A8AUKKUi55VMD5CWt4BEGmmqyPGrBP7JumceBrl7Ju4T+Cg=; Expires=Wed, 01-Mar-2028 16:37:27 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=9249429791772469447; Expires=Wed, 01-Mar-2028 16:37:27 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=3624745111772469447; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:27 GMT; SameSite=None; Secure; HttpOnly\r\nx-content-type-options: nosniff, nosniff\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25269,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25269), with no line terminators","md5":"155f18357c0e253fd992d7807b86ae46","sha1":"f661df5d61b4ace3e7421e68fc7e8fd66541c908","sha256":"46c9eeabc79f7f0fcfee7fe49765c2caf55369a88f422a2a3cce518de5f5026a","sha512":"7ad425563598271cb20ad095939b21bd190a10a81bcb066def090a077bf4e822f6701ab8fc15c3407eeddb9dfb6c46341e71c147e0559208adee9811169202b5","ssdeep":"384:ibVGoYbc31ansaj/BP+U22WNIO2dmJ/yx4VB7dJwunlnetJd/0w:EnhS/T5IemUIhdqKB8d","tlshash":"14b2218af6c1b4d607e7a4a6022f650fb0b71a55b94ed8c09365c1e4ec7c94f8027f6e","first_seen":"2025-11-07T18:09:04.987041Z","last_seen":"2026-03-02T16:38:16.10204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":171,"dns":57,"connect":28,"send":0,"wait":46,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/favicon.svg","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 06:39:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feaa5-2cc07\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7073f335978edf588d5a57281c4f9b0","sha1":"797f224af1bc102c0dcb0e9a5a24654fdf1aa6db","sha256":"73db23a0206f785e87e93e78d86f59ce1a5369f97eba904592cdc2857846eeab","sha512":"a2380a5e3bd993f4bc3834608e356adc4ce8924a816ee57ee9e47c11cce752b0361aac32f117391975ffc97d3dc43711b689869f06510cdcd40c0be9c707ad05","ssdeep":"3072:eWxHROjvyr7wFuaJrQAbg1aUm9LGo25kmhXF6fhLsYTIP9OgwuRIgX/A:eWqGr0FuaJ0GUm9LGo2VXWhgJwgHRIgo","tlshash":"6904123d7c759f23b182f26664cdfd99255086db84a4f00d32c935b3a186211babd93e","first_seen":"2025-11-07T18:09:05.024069Z","last_seen":"2026-03-27T22:03:57.303812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=619\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=619\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 18082\r\ncache-control: max-age=7654321\r\netag: \"82201e8ae15687c241a436464e9fab6b\"\r\nvary: Origin\r\naccess-control-allow-origin: *\r\nset-cookie: _yasc=lELQXP3BNNyQ+qeyYySUlyguVVnvgvz0CffxB/YufUqdeqIi3nG4MbJ49bTdNVE=; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=axglu/jy+GfTAO2MRqr3Lk6XO7r+eZwwRgn7w51W7uC7Nd9nhOhR8IgTKnvCtBtAKG6U4QXU7FTpuk1B/zcSWSXYILk=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=3706701901772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=7034847641772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\ncontent-type: image/png\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\nx-l7-hostname: xn3do77crrb4zzon.sas.yp-c.yandex.net\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"82201e8ae15687c241a436464e9fab6b","sha1":"7ce8ff47c6f60619439a9fbaea1b1ef6ea484290","sha256":"2bd6d8c315c346a41c8d7691e934d737be4a6dfd75707d17a21b211f3a4fbb9c","sha512":"3bb39237582a1ebe0ec2875153ebb521fe90062d24bf267d57a5e8e615edf9c237febc485ea4f996ad8020192e480c5058b7230204691419a1de72103a35e485","ssdeep":"384:ROhtJJoIhAnomBFvN3P1NAGtjC+gcXRCb9LjOVqQxQCvyUX+vdn5kQusf3ieI9G2:svmBRtFVCgm8BxbyUuAQus/G4u","tlshash":"5f82e1d7834ef612abbad0f09e0548ef075dfd92191cfb7348800ea895c4524be26d2b","first_seen":"2026-03-02T16:38:16.109022Z","last_seen":"2026-03-02T16:38:16.109022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":138,"dns":8,"connect":50,"send":0,"wait":147,"receive":2,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/map-widget/v1/build/client/worker/gltf_decoder.worker/7f6d4dfc66f1b71a0acb.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yandex.ru/map-widget/v1/build/client/worker/content_provider.worker/679d85664d88c24dc7f6.js","date":"2026-03-02T16:37:29.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /map-widget/v1/build/client/worker/gltf_decoder.worker/7f6d4dfc66f1b71a0acb.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/map-widget/v1/build/client/worker/content_provider.worker/679d85664d88c24dc7f6.js\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\nx-yandex-req-id: 1772469449859739-18435505257249052242-balancer-l7leveler-kubr-yp-sas-249-BAL\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-nginx-request-id: e99c5117fce0eb01\r\netag: W/\"72f828f8fa778d210606b124bd199be8\"\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Wed, 01 Mar 2028 16:37:29 GMT; SameSite=None; Secure\nis_gdpr_b=CKKGRxCT9wIYAQ==; Path=/; Domain=.yandex.ru; Expires=Wed, 01 Mar 2028 16:37:29 GMT; SameSite=None; Secure\n_yasc=TS7UMPal+F57+4Ocgh6q2cEVnWi45JGhe6TRR1a8LTtYOBnpMLc9oZKHSl8Quw==; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\npi=1cgAU9/IDsQzugt7Ak1Xm7iYC9cQvi9rXXH/nYgZgppSVQpHXV5HbcJPJszhq5H09J0gw2uoW5ms4FW9WJADt278Q6c=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=CjrTfiXeBg33Sksc2f2BbH+DTP6W3PdArZ5U1+q8kX2q2UxUeGEQzOLtgEUQK1q+8eqJvyiHCOumeygwtluLCfpQS3M=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=3490522421772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=964534001772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YMn5ls0GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Tue, 06 Apr 2027 16:37:29 GMT; SameSite=None; Secure\r\nlast-modified: Mon, 16 Feb 2026 07:25:42 GMT\r\ncontent-encoding: br\r\nx-xss-protection: 1; mode=block\r\nx-amz-request-id: a92bcd3b3a51cfde\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-type: application/javascript; charset=utf-8\r\nx-req-id: 1772469449859739-18435505257249052242-balancer-l7leveler-kubr-yp-sas-249-BAL\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":656201,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"72f828f8fa778d210606b124bd199be8","sha1":"36a6c9d8cb9e243bd7a2c2840dedc5b95295bc7a","sha256":"34bb7ca3e29bf5897d793459e097946f204ce3cfed57c06041993182ad0fc638","sha512":"95df092b12b26c5df3976df6931400deb1f3afa785fff4e472cf8ba35760a285a33949cbc52486dc9338aa3db397a89654c835a8cb55bcafaf676381b41749c9","ssdeep":"6144:1FeGZYa8yYz7G56cfEz7MLrWeTcxCCKzNzZz3zWzg/6947my0JCHFg50SSwKwcBn:JSuwYn7wtC","tlshash":"f4d49456701eb47a2bee0e335ce731db02247f39e168e51a92fcf654e5351ab70a180e","first_seen":"2026-02-18T18:39:03.047989Z","last_seen":"2026-04-03T06:46:04.184646Z","times_seen":522,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/logo.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 71482\r\nlast-modified: Thu, 26 Feb 2026 06:40:15 GMT\r\netag: \"699feacf-1173a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 350, 8-bit colormap, non-interlaced","md5":"d11772b29ca984a681b30fccdefc1bf2","sha1":"d787e54a28de4fd7316f1be65a4c1acfc51e1168","sha256":"dbb4deaeccc8700993e10e4f0184f71d5061739d024f84057f897ab038e93642","sha512":"0be7f73439cc484c9a092d6beb7ee4791b49c9c496ca8530e80eaadb187ba8a1947c810dc5fa0941825a69e9afc78f723061056ff5d85d54de74f56884f0d4b9","ssdeep":"1536:QgsxpjAx3FwbEOwb9uNlow9YS2JhYHDvCE9oIZt/v89L0/xjI2EmmEWfU:QgLcNew2SGhYjvCE9oIZt/Mg7WM","tlshash":"236302aa96c55c0741ba7432139d0f64cb3e9b5d18cc1aff4a5083dda30a8d588eb99f","first_seen":"2025-11-07T18:09:05.008618Z","last_seen":"2026-03-02T16:38:16.110515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/owl.carousel.js","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/owl.carousel.js HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feacb-7243\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29251,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2675)","md5":"835cc64a4fa3646144950746b3a21dbf","sha1":"89d29a4b09ff80c617339b298c98e0348efe4d5c","sha256":"df88de601eed6e1c24e1dbe8a76004e73e7fc9907e9d2bd36685898f3c4cf303","sha512":"0a293b2d480de4a0c9fa9b48cacebf76f481e8b566893e64cd112ccfdceda9411747456c38de53ccda1fec2fd6344331fa854b2226cb88cd2c53a5c15215bf61","ssdeep":"384:jLTyXBJ02qa1Q6Uq1+R0K7e105B2WzbitlDgoIiPT97bJ:X2XBNqYQ6CoWBFz2fDgod/","tlshash":"eed2521a32223f0a49db33fe55ab150d2135ee71990141c9f16a0adb3a6f589f133b7e","first_seen":"2025-05-24T05:40:50.835455Z","last_seen":"2026-07-31T15:50:45.55687Z","times_seen":30,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/js/script.js?69a5bcc69a9b4","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /js/script.js?69a5bcc69a9b4 HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 06:40:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699feacc-1573\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5491,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2723)","md5":"8cc3a6c9be2ceb26a172134a82759cad","sha1":"426d47ec78355e21d600f9053b0a21515a0d5c99","sha256":"82fd73495de3e769f44936ce425caddbfd3acf423ce6124b8277998ba55404bd","sha512":"4e3b7fbbba65a88b3fdbd4c17b04cb776f8fed7dd392a948ea6742ff07ce94763a88a3b8afabcaacb96c0ab7b881ea276fb545ccadfface8a30e2588b50628c8","ssdeep":"96:/8E5s+Jnw5QCHFz+7t74HJU7UUQo4rvXm58aVgbVkwkBCtXm58aVgbVkwkBCpyB6:/8EqcwBFz+7t7PAa4LXmZVgbVRWeXmZS","tlshash":"85b1d15e32b2b1cd56f710bd707a77c459026cb68d18a1e7e8e4a4b0096de47fd22f0a","first_seen":"2025-11-07T18:09:05.02234Z","last_seen":"2026-03-02T16:38:16.116052Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"core-renderer-tiles.maps.yandex.ru/tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=622\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled","fqdn":"core-renderer-tiles.maps.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.89","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yandex.ru/map-widget/v1/?lang=ru_RU\u0026scroll=true\u0026source=constructor-api\u0026um=constructor%3A3c2c07d346d22386a80f909dfde31316ca49d9f54ab5dc3305fd258ea58394ec","date":"2026-03-02T16:37:29.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.core-renderer-tiles.maps.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 12 Feb 2026 21:15:42 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"01:8F:C2:8B:AA:58:CA:FF:EA:A4:5C:28:54:FF:59:71:F1:83:DB:47","sha256":"23:1E:1D:43:01:AF:88:58:B3:82:3A:89:62:7F:2C:88:B9:E3:F7:84:BC:40:C3:A2:9B:A9:6F:23:87:39:E4:93"}}},"request":{"raw":"GET /tiles?l=map\u0026v=26.03.01-0~b:260210161500~ib:26.03.02-1\u0026x=622\u0026y=319\u0026z=10\u0026scale=1\u0026lang=ru_RU\u0026client_id=yandex-web-maps\u0026experimental_use_metapoi=1\u0026experimental_metapoi_combined_tiles=true\u0026experimental_ranking_mode_name=default-web-ranking\u0026experimental_mm_local_rubricpoi_min_zoom=13\u0026experimental_mm_local_photopoi_min_zoom=13\u0026experimental_mm_photopoi_min_zoom=13\u0026experimental_mm_rubricpoi_min_zoom=13\u0026ads=enabled HTTP/1.1\r\nHost: core-renderer-tiles.maps.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yandex.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 14876\r\nx-l7-hostname: smofz2kh4nepstij.vla.yp-c.yandex.net\r\ndate: Mon, 02 Mar 2026 16:37:29 GMT\r\ncache-control: max-age=7654321\r\ncontent-type: image/png\r\nvary: Origin\r\nset-cookie: _yasc=CfWzxXA4NCviitBYXsgqBapW2u2ABZIgXjRKcbzbKkmToK5cW1elxmFxkA4qzDY=; domain=.yandex.ru; path=/; expires=Thu, 28 Feb 2036 16:37:29 GMT; secure\ni=0s3w+MgkL5/cmgy9vo2iSNBY8w/dXXEt2LNT39Bc6b54yrMqr1JpOqFStC0+zHIa0oj7j4xUy+lmKkiqLv76QJH7OaQ=; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=6810207741772469449; Expires=Wed, 01-Mar-2028 16:37:29 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=4460781871772469449; Path=/; Domain=.yandex.ru; Expires=Tue, 02 Mar 2027 16:37:29 GMT; SameSite=None; Secure; HttpOnly\r\netag: \"40a3e27a7debc95b8a71004bb0dc4da8\"\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"40a3e27a7debc95b8a71004bb0dc4da8","sha1":"03ca0538128415f2d2ad8419b424552aeb8302a9","sha256":"74cbc86fdec5affae466ff3c1c3e1bb628cc4b7ed05f99b00f45c711669d5ef8","sha512":"099d61d51ed4554a15e5d9ff3c1d69e8699410ba0ebec67423d1c8103c7cb3914ff828f4f7ad3955930089bb04216571ba3240db7f03487deb3131d1eb2b9abf","ssdeep":"384:SEC0i+z0cAeO+j9GYnrmdVIp0Sshbzkn/YlQYxx:NC0xAcA8BQvIYScx","tlshash":"a362d07bf15eee10c5c665f38c897b9a4f382504087586f42a7c8621645d74362eb39e","first_seen":"2026-03-02T16:38:16.126221Z","last_seen":"2026-03-02T16:38:16.126221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/css/font-awesome.min.css","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 06:40:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699fead5-55e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21984,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21822)","md5":"feda974a77ea5783b8be673f142b7c88","sha1":"b71d1c7c315b67c614563382d1c2a868ac14d729","sha256":"0fb1bbca73646e8e2b93c82e8d8b219647b13d4b440c48e338290b9a685b8de1","sha512":"e64cd0c0ff8d301c0f6bd9fe60934362dce7be85af57c9c3e1c719e42f8784cf707bc9025b58fd1f341a6deeb27490e3fa8164aed9cc76605323a602544c8220","ssdeep":"192:sq3P/8W+ab2edrKeTUKIErArKlcZJVrJ3ee+cR6waWm215bvfwf5DrkHUa2:Lk5yWeTUK1+KlkJ5de2UWmyTfwYUa2","tlshash":"03a241f8e54c01d66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5faa","first_seen":"2023-04-05T10:40:01Z","last_seen":"2026-08-12T21:31:49.915942Z","times_seen":11914,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 12:49:41 GMT\r\nexpires: Tue, 02 Mar 2027 12:49:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 13666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T21:10:28.750205Z","times_seen":63627,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":123,"dns":1,"connect":19,"send":0,"wait":17,"receive":10,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 12:49:41 GMT\r\nexpires: Tue, 02 Mar 2027 12:49:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 13666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T21:10:28.750205Z","times_seen":63627,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:27.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://passports-kupite.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 12:49:41 GMT\r\nexpires: Tue, 02 Mar 2027 12:49:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 13666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-12T21:10:28.750205Z","times_seen":63627,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:500,600,700,800,900,400,300","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Raleway:500,600,700,800,900,400,300 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 16:37:27 GMT\r\ndate: Mon, 02 Mar 2026 16:37:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12089,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9052dd308be699cf55e49a4099f6e573","sha1":"b442728ddbc7878013331a7b8959be6601c2cd01","sha256":"951f4d8313826043bd9cf51f2931e15185501c5609f27c749cad2949ebb40aea","sha512":"be7d37c38b74e2b8e396686acb421376accc6d7ae0da04e31fb3875fd9fc524f17d1e1e9e23ded50b138b6f4d6a6aade344b6d89e23ba37ceb0c472c87b3209c","ssdeep":"192:3iHT+H1Dl0iaTzH0Dkfi9ToHfDPGi4TtHGD25iDTKH5DpYimTvHYDIjiZTEHjDTp:yzwNYr2tWXCRg3ExsPKBaF","tlshash":"bc429ba10917d400eb476dc663ce3e36ee8e62043047953a9bfd58bcbcaad36139470d","first_seen":"2025-09-11T08:13:25.252045Z","last_seen":"2026-08-12T03:43:03.303822Z","times_seen":653,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":178,"dns":0,"connect":8,"send":0,"wait":38,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"passports-kupite.com/images/client_1.png","fqdn":"passports-kupite.com","domain":"passports-kupite.com","tld":"com"},"ip":{"addr":"188.137.231.44","port":443,"asn":0,"as":"","country":"Bahrain","country_code":"BH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://passports-kupite.com/","date":"2026-03-02T16:37:26.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"passports-kupite.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 05:49:21 GMT","end":"Wed, 27 May 2026 05:49:20 GMT"},"fingerprint":{"sha1":"B5:56:4B:94:55:86:3F:EA:90:10:DC:5D:12:3E:EE:80:01:28:B6:46","sha256":"DD:DA:CA:E4:F7:E9:DA:AA:A9:65:A0:70:45:FA:59:C6:0E:A9:21:AF:B8:E3:A6:12:F3:65:F3:EC:13:28:B6:E1"}}},"request":{"raw":"GET /images/client_1.png HTTP/1.1\r\nHost: passports-kupite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://passports-kupite.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 02 Mar 2026 16:37:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 10222\r\nlast-modified: Thu, 26 Feb 2026 06:40:13 GMT\r\netag: \"699feacd-27ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 134, 8-bit colormap, non-interlaced","md5":"71d67c2b4b657d8f1b40cab97ec66c55","sha1":"0fa5d924f8240f715247a9bdd238142c02149c10","sha256":"ac680d1154b760c3e24ce6ca960ed9fe3a34db6e69418a09b6a021fe818779d6","sha512":"9dcc61295488a80e24a7b46f121a9b26235ac4c6e71174b016765b7b36900c739fede286c1e220bad9ff5c3ac1b1db8f0dad07b75d5d671b2a3dbbc0e2d52441","ssdeep":"192:F5LNivqEIQgdsMOxcwkGQCZ1cja0g9pUI8DETD6qsf7:3xXzQeScwT3Z1F9pUtDEX6qs7","tlshash":"3922c03bc2d34cca23019bd290ac5bc908a5f287a07debf2da6f846c6587657345d85a","first_seen":"2025-11-07T18:09:05.020624Z","last_seen":"2026-03-02T16:38:16.141266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"passports-kupite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}