{"report_id":"28ee0e90-9c91-4c36-aa43-19b19c9b441f","version":0,"status":"done","tags":[],"date":"2026-07-14T19:44:38Z","url":{"schema":"http","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":0,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"title":"Везунчик (2026) смотреть онлайн исторический боевик в HD","dom":{"size":54527,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4779)","md5":"2fc1561d3a74c0caab2798ff604de481","sha1":"03c6dad38ddae03b1241bfd366b24b6e591a0bbf","sha256":"d948dc8fda960e550fb78d04232391e98dc4d71c5aee6bc3550458d517cf7094","sha512":"3457cd591af2ad0aad2fbbacbe00d09cfcb421517d17a8a2ac7032a310581715adf0474426309b7790386b9e06645457f297220f0656a2eb0c7bf0c24deda2c4","ssdeep":"1536:Hr9vWyYwSVb85lVHs3Lgh3ol3rEhHmYvsr/RvCCP:HHGAHPol8HY/9CE","tlshash":"6d33d671518e30bf2523f486e5087b0e34a580bfbe6b434566a8797e7ae3875c63930d","dom_hash":"domhashed83b64826fa875868c1222504a8d0cd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":0,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T19:44:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"vezunchik-onlayn.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tevtons-as.stloadi.live","ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-08-07","domain_rank":0,"first_seen":"2025-09-14T08:54:12.970404Z","last_seen":"2026-07-12T13:09:28.44627Z","alert_count":0,"request_count":8,"received_data":2983201,"sent_data":4946,"comment":"","tags":null,"fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}]},{"fqdn":"videoroll.net","ip":{"addr":"185.253.32.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2015-03-31","domain_rank":150386,"first_seen":"2015-11-17T06:44:09Z","last_seen":"2026-07-11T18:08:19.037215Z","alert_count":0,"request_count":2,"received_data":64930,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vezunchik-onlayn.buzz","ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-07-14T19:44:41.719511Z","last_seen":"2026-07-14T19:44:41.719511Z","alert_count":3,"request_count":3,"received_data":56912,"sent_data":1497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]}]},{"fqdn":"6c-97-be-r504.vkvideo.cloud","ip":{"addr":"103.73.34.230","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"domain_registered":"2026-05-15","domain_rank":0,"first_seen":"2026-05-30T11:20:19.113957Z","last_seen":"2026-07-05T16:31:10.181527Z","alert_count":0,"request_count":1,"received_data":419,"sent_data":2485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.plyr.io","ip":{"addr":"172.67.69.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-02-16","domain_rank":65563,"first_seen":"2015-03-05T06:48:14Z","last_seen":"2026-07-10T07:50:49.32672Z","alert_count":0,"request_count":1,"received_data":2581,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"avatars.mds.yandex.net","ip":{"addr":"87.250.247.182","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":37773,"first_seen":"2014-12-15T11:43:59Z","last_seen":"2026-07-10T14:41:38.383551Z","alert_count":0,"request_count":1,"received_data":166438,"sent_data":614,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"echo.websocket.org","ip":{"addr":"66.241.124.119","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"domain_registered":"2008-07-09","domain_rank":567940,"first_seen":"2017-01-30T11:04:05Z","last_seen":"2026-07-11T18:12:38.029128Z","alert_count":0,"request_count":1,"received_data":278,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"allohatv.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":1804425,"first_seen":"2020-06-02T08:45:55Z","last_seen":"2026-07-12T13:09:28.893742Z","alert_count":0,"request_count":1,"received_data":1746,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2026-07-09T09:46:47.165548Z","alert_count":0,"request_count":1,"received_data":303,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":12006,"sent_data":588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tevtons-as.stravers.live","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-12T08:56:58.066823Z","last_seen":"2026-07-12T13:09:29.684353Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":647,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":8,"received_data":336200,"sent_data":4512,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-07-14T21:01:06.748223Z","times_seen":181164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/js/rmp-vast.min.js?v=2.45","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4a464d83bd585966fb7f0e500e26288","sha1":"e8b134c54f00211942932a87aa1ff6d00087b61e","sha256":"060523082dc56582d3187369ce7313a5e7ddf974e22a3c4b8b63e20832d21ae2","sha512":"e429304ee28339cb811b56b61f02eff893a845a23cbbb777ac8270b4931bcedbb410a3dbab83d1df3ac46f3853363bf93485d2da26b8c95a99e6c0e924f82f39","ssdeep":"6144:Q4ksiMaq7xacZq1lVvOeOy+la1Muib5+4HvS:Qjsa1l/OS","tlshash":"352429897a82f0b51af614e0547b420bf1360a2a35064464faa8ece57d7cd8f7277f78","size":219152,"data":"","first_seen":"2026-06-11T22:18:06.507922Z","last_seen":"2026-07-14T20:56:23.604579Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3db1cafdc57cb388572191650adaf43d","sha1":"c71595c453468cf9e9e687e54a090db4c27d2190","sha256":"676304e9eb562e4e16423c11316d8b8896a9ddf4e1eb691f38a2b1ad3a8e9c7a","sha512":"bd0610b0b88f90a0be292ebd07a7f1aa48ebcec175eb9d9764fded0ee7826d88d149330b896506e4e7d9f793a5283d564e86d9b6de594e4bd546a5b8f8b1fef2","ssdeep":"","tlshash":"24c0801831557f9f219bd530d51b5145a300b7613c10f1f4c1a19950bc1358541c9c09","size":166,"data":"","first_seen":"2026-03-12T23:51:29.644Z","last_seen":"2026-07-14T20:56:23.605726Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ede71f5e637c0a6af3959798ad11418","sha1":"920ab3c71aeb453146621249f3ba775b02f05b58","sha256":"78c69390b89105ab7cc1b078f8e9c82f133031770a3c2812914290831ab29dad","sha512":"a0c54a3901c74b8fac0b95f50aefe995c648076b0ad28aea6f9f615797646170fe9e58be97ce71b451a3143395aaf8ab5eda1ee51b936da22bb1933799886bbb","ssdeep":"","tlshash":"19f05ce0ca8b242a47200118dd99cc8ba4fc48ee1109c8effc0c60306a9673c401a9ec","size":463,"data":"","first_seen":"2026-06-07T04:02:19.015149Z","last_seen":"2026-07-14T20:56:23.606641Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3428b995681c0781e33b326c7eb46df6","sha1":"db6a534dc6eb64bddf510962dfae7b8de18c5793","sha256":"46c2019e1ab11f6cbd83695be9c0c7b2b68c3895a2e041f4838482f66e6e221f","sha512":"a8d585c9a12f29917a528a2a3a0a19d4609973697768f5de64fc2343c599e270bba12f6ae05044abd9722d9b3a509f8245de4014bb38306bf6d6cfbb76c9fad3","ssdeep":"","tlshash":"4101413202531a3820936562f7306b82b4f180affa1713d140aa3b1e53db8070af23de","size":815,"data":"","first_seen":"2024-12-13T20:56:38.541359Z","last_seen":"2026-07-14T20:56:23.607232Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a04bccbe5855f650e602976c75a2dffb","sha1":"78ef3013f73b54599702a50f68995e0a2ab01a94","sha256":"94af3e8d007fdae56bf37092fb4daa4a4be672b244de5773c0a34dd43fd32ec3","sha512":"f4e2e94ab2b498988dd89aa781c3e805b44dbeb98a661fbeabf5216cb86525205ece2845f95e2094e8551b565589073fd1d73342a8c1d802b7dedc566168ae51","ssdeep":"","tlshash":"def0c0ba079643455a2e1e005a4e2714f73203075f69a1d67b9c45491f5f01ddaea186","size":558,"data":"","first_seen":"2026-07-14T19:44:46.898217Z","last_seen":"2026-07-14T19:44:46.898217Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fde629009e2c20310adb366f34fb95e","sha1":"26bc3a514f2eda41a0d0dae66954af8e394b53a3","sha256":"3116ecc39d5609fd1a8dfbd6f181e2c328b6e39961a00614a1d5ccfb34fcf232","sha512":"1acd52a5f010c4f2adc55cc3fd84793f79f2d2b5450363d75d13eb48284feb30a25e24c07ccb451fed3dbc04f426fbcc9a05625fce030f8c7458d79665c6afbe","ssdeep":"","tlshash":"97311f6650c40e2d89da5745d6f93c4c65ac5112e404ef3bcd9e8f8fc2ea8e8a387327","size":1636,"data":"","first_seen":"2026-07-14T19:44:46.899257Z","last_seen":"2026-07-14T19:44:46.899257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-14T21:18:52.980523Z","times_seen":774824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"bccc62c0bb98f459be36e24f62b2a596","sha1":"04684ed8065ab19d1e654553800bfa5c3ab1887a","sha256":"fe175147bbcd5a9dde31d87cf1ce1ebc55d75439ffebee1688a988a05f415813","sha512":"b925e1892e198a928a79681cdddedbe459cbccde8bccb94cc59076f8d12f939e812ee1acf9d1c5e521c700ef896bc7a8c027fc5cd5266f490d2e8734dec6a2b7","ssdeep":"","tlshash":"9ce0c0e63c889024c37603a46323650eb046143d284fac21c64d8c812961caa185f18c","size":354,"data":"","first_seen":"2026-07-14T19:44:46.900746Z","last_seen":"2026-07-14T19:44:46.900746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"49b4e1589e376eaebe071754ec57cf8a","sha1":"d9daffcf37c3a21e9482c066865a9fb2af14d545","sha256":"88bfad94a9db04932675bb72c369a9c23580df7fdbcf2dba6e192f307529866d","sha512":"b9b4c34bd8978012caa52d930fdbbbed8df8261fa53aadb934eea8735a153146104c59543340ba1c7ab5b59ffb83996bf684e9824d8d24a6088329ac174f3c8c","ssdeep":"","tlshash":"c3a0228333aa28280a8e20bf0aa0a28e222080003ccac0302c0c02088880f03303c288","size":70,"data":"","first_seen":"2026-07-14T19:44:46.901735Z","last_seen":"2026-07-14T19:44:46.901735Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"b780840c150c6c83fbd6eaba33de7f4c","sha1":"33d00367f2cc8827bfefe6e4b3fdebd6e30b81ff","sha256":"3da19c0b6b6c4c7a97c76220d32a593cd53dfe5e679dbe8c625706602d2deaf2","sha512":"51da5832cbd6268b648d5b6da4d1bf83b387ebfc4ab5fafa1fa6b98a0efca408c197e84d32d35ceed6fea3a1f4ffb1a52da75cb518e66073350500ae6f3c9a47","ssdeep":"","tlshash":"ee51fe9fb88336a06db714fe939f4214313aa813088ad450bc9cd1851fa9a4a47277ec","size":3034,"data":"","first_seen":"2026-07-14T19:44:46.90263Z","last_seen":"2026-07-14T19:44:46.90263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"133d34ac9d05c5598ecba666b2a155c9","sha1":"0645a66fc0e20fc342736ef0c003dfe8321a2dc1","sha256":"238f04022d51d45a6bbf484557758cdc0c485ab31c9bafdb305c87e277e4248c","sha512":"3b02fd18d40a2360cbcbb79c673be6311473ad32005f9b3f7a4170b67e9d866f432f8d54f08249c8ac34351033ed815c36196296055bb38557ceb40f8b5a5eaf","ssdeep":"","tlshash":"6ae02d23a206848c898711f3380c104a090ee8361fa43f299091193cbcf67aa6b7f23c","size":318,"data":"","first_seen":"2026-07-14T19:44:46.903614Z","last_seen":"2026-07-14T20:53:33.34468Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/build/app.1216f2e9.js","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"77b19fa590acd03adc5d516e565a57a4","sha1":"850fbb3f7762aab268198c78e7b4847a0daf9d08","sha256":"c2a4d570e4a4b7482fdadaf532f6ef94b2b333132b204f6766ceb1f2d5cbc9b1","sha512":"28ffbf10490621c7f614c9ddefd7add44c96f4cb01779b13404c5503d2caa5fbd8c5a2252445d59dec0cac641cb566212accf1d9d1ed73339188bc81204c09b2","ssdeep":"12288:iqz8rQ7HvEnAz97ERTXuymigUc4hRM7E56B4LBBtc4tUqxJgANr0ber0TnfmGVqE:iqzAQYnaJeTXuymiRT0c62CqD+er0TfR","tlshash":"c3d4d6c43b81f8158557a2b6332b9ae7e029cdd1d28c4c9cf2057cbcf9ac614f96ab54","size":609204,"data":"","first_seen":"2026-07-04T03:40:44.085064Z","last_seen":"2026-07-14T20:56:23.599664Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/build/401.3853f8e4.js","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"95049c3b21e2994180a3319084b2efca","sha1":"dbbaa502b6153df3b093d3172fc718d2a3faf672","sha256":"828c39e7e640e8bfc7af919979d28be2e3e72e1e3304d527a3ebad6a587302dd","sha512":"ce425c75f9e04433f911037e9cffcd47e324373e9f207334534a4ca94ce59aa48b6c490e9c4b05b3fd026d13b7bae221804c1826c85c07f9f2107b0bbba48449","ssdeep":"49152:On/TTPbHmURpeG7kWsauDBzYnbcHa+Ffj7xwkF6hDiCrAR1KE5uGOzyJU:U","tlshash":"6c95fcc53b81f450856be6bb37276ae5d12e9c81938ccc4cf1287c9cfaa4b04e96d764","size":2061697,"data":"","first_seen":"2026-07-04T03:40:44.109897Z","last_seen":"2026-07-14T20:56:23.616227Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allohatv.github.io/replace.js","fqdn":"allohatv.github.io","domain":"allohatv.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebb3106d07f98abf757a898743c74072","sha1":"f7f874aeb511ebf429f48582036acc43f09c7d19","sha256":"c8e90f7e01b2168f57b60badc8aafa6e779f2305380a1b3b03977c3bc13ba27e","sha512":"6a830007ca827baaa672d61925a7bf29f1977ff9ae4fcfd61e856dddb3adcba41b9216761a9aee1fbc509b7967b231eb3c0fd2dfc74a16e66503f90cd305f3b6","ssdeep":"","tlshash":"9f11cec3fa7fc8d7002470b6c85850ad2d7c55b6a12b2443bec48969a0a065c41b39da","size":1019,"data":"","first_seen":"2026-05-23T05:54:34.147584Z","last_seen":"2026-07-14T20:56:23.601259Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/js/vid_vpaut_script.js","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"185.253.32.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"144da03485fc806913b4286900ae909b","sha1":"3df4f5063c7fd918c8b5d299016dcf6b5ffb9ca5","sha256":"d88cef1f1d292fec236db3fca852f5e085d354ec363564f19e91a08a6d358901","sha512":"9d6d66a13f42f01780df727350b35f5b229d85f779122b8f3387084eeb7de7ddb54e90d57098876dca2c6fb7310b5b52f40cf6fd1e5382578b3e55089d194151","ssdeep":"1536:hW8PfZun7tsppWnpNWekFSLpc9o6SoYYTtGC:4sCmhYLpmpGC","tlshash":"ca53b43b691104774efa573fab3a514cfd325627434282183c6da5842f78f94b9b2fa8","size":64364,"data":"","first_seen":"2026-06-30T17:11:15.723047Z","last_seen":"2026-07-14T20:56:23.591629Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/build/runtime.99537932.js","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"14eedb143c5e4e68b1431b0b13a21b07","sha1":"429710a40403413f2be6e60a2e3baffc5870ee1e","sha256":"a129054faa0fa6d4af2d93206ab1d3f5d926237d003a35665b65c5f3523d9b30","sha512":"6b016cdc3abdcea85a693f6fbc699f625f93818cb2a0abdb2efeaa1750d0188fd0a2b7ddb4e06999e1983710011e97085e001aab14e5bfca541cb28465ec4adc","ssdeep":"96:FmiJ1ent0WB4M5yyx3tybeFYnz5gv1RfB4mr4AvAMP:FmW+t0WB4wft+e2netor0AMP","tlshash":"91913fcc3a81f4d0829bf6bb6a3be4e5f22e9dc453886408f2147690fc31829d55bf59","size":4221,"data":"","first_seen":"2026-07-04T03:40:44.088626Z","last_seen":"2026-07-14T20:56:23.599083Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"test ready","filename":"https://tevtons-as.stloadi.live/build/app.1216f2e9.js","line_number":1,"column_number":36613}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.454Z","timestamp":1784058248454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:26:14 GMT\r\nexpires: Fri, 09 Jul 2027 04:26:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 487074\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-14T20:47:16.856869Z","times_seen":22468,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":55,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-kinopoisk-image/4486454/9e5e44de-07b5-493f-b433-dbd3092c8b1e/600x900","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.182","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.227Z","timestamp":1784058248227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 13 Feb 2026 09:05:51 GMT","end":"Thu, 13 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"84:9B:2F:AA:CF:63:F3:90:FE:59:59:9D:83:F7:93:96:CE:10:FA:1F","sha256":"9F:59:E9:29:CA:59:D8:A4:45:0E:57:DF:BD:47:38:51:71:AB:EF:B1:1F:EA:EE:53:74:C2:BA:00:B2:83:F9:B8"}}},"request":{"raw":"GET /get-kinopoisk-image/4486454/9e5e44de-07b5-493f-b433-dbd3092c8b1e/600x900 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 165850\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nlast-modified: Fri, 22 May 2026 06:43:40 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: 7cd076bc9d529ea6\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=VLA\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165850,"size_decoded":166438,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x889, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba02009babf08ad1c677f68be537d525","sha1":"982a3db27b86fa182d625e20549ae8a96c694455","sha256":"465369973383b90a0a59dcbeb9bf0d6ecce32887fa4e806d9c5b8f8b0ef3ea0f","sha512":"39d8b43fc9886782b9caddcd55e842780589ccdc54c0322f2c68016b31f401cbaea8ee3242264772222ba1e7cb0ac427e7ba697cf616ee7e7a82ce64c93a17e1","ssdeep":"3072:PWpB3dLqqrJ9oxY0rmcI7MmNqwda9WfD7cZ3q6MGYF9VeBu35yiI8o2:PWv3tJox7m7McqoakmrxcyiIE","tlshash":"20f312549bc8010912931ac4aa32e5f2d5e1cec9e9950236c2e72f77b08e905f6aff35","first_seen":"2026-07-14T19:44:46.87031Z","last_seen":"2026-07-14T19:44:46.87031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":2,"connect":47,"send":0,"wait":96,"receive":122,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.439Z","timestamp":1784058248439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:26:14 GMT\r\nexpires: Fri, 09 Jul 2027 04:26:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 487074\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-14T20:47:16.856869Z","times_seen":22468,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":51,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/bnsi/movies/1491827","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:10.162Z","timestamp":1784058250162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"POST /bnsi/movies/1491827 HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nBorth: 452eeea7ab99e9254bf610d220bca1efb5d9e394f693459e8ec20e46806ffff0|dl9xTHNaOEFkcVl8MTc4NDA1ODI1NXxtOUxkRW5tYk5CZWlpSWNieHZoMTE1cmV6aTNEcHJzUEpDeEV0YWZyOTMw\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 73\r\nOrigin: https://tevtons-as.stloadi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":73,"data":"token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\u0026av1=true\u0026autoplay=0\u0026audio=\u0026subtitle="}},"response":{"raw":"HTTP/3 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:10 GMT\r\ncontent-type: application/json\r\nborth: IRpQxpRm4uUtBc5x1KFqkVoNkkG2lVET1WEZBdAwRVJ8dlZM845n525oeSTcSllU3TDzHHHEebMSdZedNMMUUMSa\r\ncache-control: no-cache, private\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":15789,"size_decoded":12117,"mime_type":"application/json","magic":"JSON text data","md5":"51383059a3429f8ec1b989098395737b","sha1":"a36092707f39f4082b0572253133f5a0a84e01e6","sha256":"3e4950837a9fc5099099c7f170f26c58a737ae9a03e63405b19451b70f1b934a","sha512":"6179e9c7fb9ceab1359fbc3146848bd6b32cbfb11d2ee78ab86327ad8c1ecda00c361cca46afc42d5b647b93926f9f797c7fa3ac87b1d0400dfb207ae9eda059","ssdeep":"384:HKEBbXGNGA9B91NTNoukK+P3xnkSkMlt3x23CRy/+zvaT2woRRxY:HKElGUA9B91NTNlk3P3JkSkMlt3cCE/l","tlshash":"2362c03997de97642543f0de8ea325c78aebdf87dbac008612cb59162eb35cc101d5d0","first_seen":"2026-07-14T19:44:46.871627Z","last_seen":"2026-07-14T19:44:46.871627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.456Z","timestamp":1784058248456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 06:06:35 GMT\r\nexpires: Fri, 09 Jul 2027 06:06:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481053\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-14T21:29:44.50011Z","times_seen":26126,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":28,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.641Z","timestamp":1784058248641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"GET /?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vezunchik-onlayn.buzz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":11726,"size_decoded":4891,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (861)","md5":"621585b1dbc4159fdb849158f80e258c","sha1":"37b51b9f0ea872c678cbe4c0cc27e568f7081f50","sha256":"514ab08ab9c9755ef1924b8691b257de6786be61c4dd1d84999f623a79c9cb06","sha512":"fd4bba8dc6bb510da2814fd6901c632ea5f3cc8da80ce3b41782eeed3fc1ff66cd6d0eaf7f56682ce9b3790a33a568165f7696dd2027356812622b4f90f18635","ssdeep":"192:suNG06m4sBN+0IwYJZI4zJARoiCKMN7DiE3+J02Nt:HNG04pwY3I4zCRHCKMN7DiE3+K2H","tlshash":"3532fa7040dc3e2e01068553ed78fb0e34be80fbe9595255babd0bb61bc6c94d61b60d","first_seen":"2026-07-14T19:44:46.87349Z","last_seen":"2026-07-14T19:44:46.87349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":43,"connect":28,"send":0,"wait":90,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://echo.websocket.org/","fqdn":"echo.websocket.org","domain":"websocket.org","tld":"org"},"ip":{"addr":"66.241.124.119","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:10.066Z","timestamp":1784058250066,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"echo.websocket.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 23:25:32 GMT","end":"Fri, 11 Sep 2026 23:25:31 GMT"},"fingerprint":{"sha1":"AC:1C:32:44:AB:EF:9B:0B:B5:38:1E:25:98:18:81:A4:70:A3:BB:7F","sha256":"D0:A4:20:80:CD:23:D8:E5:F8:F3:C6:5D:27:6E:F2:D0:61:88:8F:2D:90:1B:24:5A:33:27:88:78:99:1E:71:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: echo.websocket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tevtons-as.stloadi.live\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DI0P2D3OfgtCaaMqBEOfbQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nupgrade: websocket\r\nconnection: Upgrade\r\nsec-websocket-accept: nKtsdvEipFYj2wczBbXGBKwjOC8=\r\ndate: Tue, 14 Jul 2026 19:44:10 GMT\r\nserver: Fly/6db84cd2 (2026-07-07)\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KXH2H0WG6XB5FXGHJYSA2881-arn\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":0,"size_decoded":278,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T21:18:27.063199Z","times_seen":17247749,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":37,"connect":40,"send":0,"wait":88,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/js/vid_vpaut_script.js","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"185.253.32.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.219Z","timestamp":1784058248219,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"videoroll.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 21 Jul 2025 09:28:20 GMT","end":"Sat, 22 Aug 2026 09:28:19 GMT"},"fingerprint":{"sha1":"8C:AF:96:78:0B:F3:EF:64:90:78:DE:97:85:F6:B1:B7:1F:AC:AA:90","sha256":"78:57:71:F6:CA:D5:2F:2F:80:0E:A0:CE:05:D4:6B:4D:B6:B0:2C:B9:05:91:B1:0B:60:BA:97:EC:69:E3:42:C8"}}},"request":{"raw":"GET /js/vid_vpaut_script.js HTTP/1.1\r\nHost: videoroll.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 14 Jul 2026 19:44:08 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 64364\r\nLast-Modified: Tue, 30 Jun 2026 08:31:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a437ec9-fb6c\"\r\nExpires: Tue, 14 Jul 2026 20:44:08 GMT\r\nCache-Control: max-age=3600, public, max-age=3600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64364,"size_decoded":64734,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8591), with CRLF line terminators","md5":"144da03485fc806913b4286900ae909b","sha1":"3df4f5063c7fd918c8b5d299016dcf6b5ffb9ca5","sha256":"d88cef1f1d292fec236db3fca852f5e085d354ec363564f19e91a08a6d358901","sha512":"9d6d66a13f42f01780df727350b35f5b229d85f779122b8f3387084eeb7de7ddb54e90d57098876dca2c6fb7310b5b52f40cf6fd1e5382578b3e55089d194151","ssdeep":"1536:hW8PfZun7tsppWnpNWekFSLpc9o6SoYYTtGC:4sCmhYLpmpGC","tlshash":"ca53b43b691104774efa573fab3a514cfd325627434282183c6da5842f78f94b9b2fa8","first_seen":"2026-06-30T17:11:15.723047Z","last_seen":"2026-07-14T20:56:23.591629Z","times_seen":38,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":3,"connect":28,"send":0,"wait":56,"receive":29,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.442Z","timestamp":1784058248442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:26:14 GMT\r\nexpires: Fri, 09 Jul 2027 04:26:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 487074\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-14T20:47:16.856869Z","times_seen":22468,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":43,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/vpaut_option_get.php?pl_id=46856","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"185.253.32.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.466Z","timestamp":1784058248466,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"videoroll.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 21 Jul 2025 09:28:20 GMT","end":"Sat, 22 Aug 2026 09:28:19 GMT"},"fingerprint":{"sha1":"8C:AF:96:78:0B:F3:EF:64:90:78:DE:97:85:F6:B1:B7:1F:AC:AA:90","sha256":"78:57:71:F6:CA:D5:2F:2F:80:0E:A0:CE:05:D4:6B:4D:B6:B0:2C:B9:05:91:B1:0B:60:BA:97:EC:69:E3:42:C8"}}},"request":{"raw":"GET /vpaut_option_get.php?pl_id=46856 HTTP/1.1\r\nHost: videoroll.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 14 Jul 2026 19:44:08 GMT\r\nContent-Type: text/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":196,"mime_type":"text/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-14T21:17:08.755472Z","times_seen":739267,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":34,"send":0,"wait":49,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T19:44:07.386Z","timestamp":1784058247386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vezunchik-onlayn.buzz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 18:16:26 GMT","end":"Sat, 10 Oct 2026 18:16:25 GMT"},"fingerprint":{"sha1":"9F:DA:51:BB:85:56:83:D4:18:11:08:57:99:FB:E4:01:FB:14:74:83","sha256":"56:B4:7F:FC:D8:F3:35:7E:9E:72:8C:62:EF:5C:14:50:43:44:F6:2E:A1:6E:FF:77:9B:12:8E:55:D2:7F:6D:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vezunchik-onlayn.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 14 Jul 2026 19:44:07 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]}],"data":{"size":54357,"size_decoded":19948,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4779)","md5":"d17ab2b961d3afe6b877996cd42d3bf2","sha1":"0f581d8356f7f96340044642e8231f8fab4f67f0","sha256":"9d67fc7ee80283a8a0ebb1c88ca032704a2be92b172c7d067df996989feaf436","sha512":"06c9e360a4077fe3c94f41af5ee9aa143148f019e854182836653bd8834c3116428cc3728da2ca21b46517f5a35698a4ecf6eb13b04c647537cd19e69a5d624a","ssdeep":"1536:Ir9vWyiwSAx+5lVHs3Lgh3ol3rEhHmYvsr/RNCCt:IHfUHPol8HY/3Cg","tlshash":"b433c771518e30bf2523f486e5087b0e34a580bf7e6b435666a8793e7ae3875c63930d","first_seen":"2026-07-14T19:44:46.876463Z","last_seen":"2026-07-14T19:44:46.876463Z","times_seen":1,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":226,"connect":25,"send":0,"wait":24,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"vezunchik-onlayn.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.437Z","timestamp":1784058248437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 06:06:35 GMT\r\nexpires: Fri, 09 Jul 2027 06:06:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481053\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-14T21:29:44.50011Z","times_seen":26126,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":18,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.449Z","timestamp":1784058248449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:26:14 GMT\r\nexpires: Fri, 09 Jul 2027 04:26:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 487074\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-14T20:47:16.856869Z","times_seen":22468,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":55,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/build/runtime.99537932.js","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:08.960Z","timestamp":1784058248960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"GET /build/runtime.99537932.js HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Jul 2026 20:34:13 GMT\r\netag: W/\"6a481cc5-107d\"\r\nexpires: Thu, 01 Oct 2026 20:37:54 GMT\r\ncache-control: max-age=7776000\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":4221,"size_decoded":2400,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4221), with no line terminators","md5":"14eedb143c5e4e68b1431b0b13a21b07","sha1":"429710a40403413f2be6e60a2e3baffc5870ee1e","sha256":"a129054faa0fa6d4af2d93206ab1d3f5d926237d003a35665b65c5f3523d9b30","sha512":"6b016cdc3abdcea85a693f6fbc699f625f93818cb2a0abdb2efeaa1750d0188fd0a2b7ddb4e06999e1983710011e97085e001aab14e5bfca541cb28465ec4adc","ssdeep":"96:FmiJ1ent0WB4M5yyx3tybeFYnz5gv1RfB4mr4AvAMP:FmW+t0WB4wft+e2netor0AMP","tlshash":"91913fcc3a81f4d0829bf6bb6a3be4e5f22e9dc453886408f2147690fc31829d55bf59","first_seen":"2026-07-04T03:40:44.088626Z","last_seen":"2026-07-14T20:56:23.599083Z","times_seen":12,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.444Z","timestamp":1784058248444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 06:06:35 GMT\r\nexpires: Fri, 09 Jul 2027 06:06:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481053\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-14T21:29:44.50011Z","times_seen":26126,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":23,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/api/reactions?domain=vezunchik-onlayn.buzz\u0026page=%2F","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.328Z","timestamp":1784058248328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vezunchik-onlayn.buzz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 18:16:26 GMT","end":"Sat, 10 Oct 2026 18:16:25 GMT"},"fingerprint":{"sha1":"9F:DA:51:BB:85:56:83:D4:18:11:08:57:99:FB:E4:01:FB:14:74:83","sha256":"56:B4:7F:FC:D8:F3:35:7E:9E:72:8C:62:EF:5C:14:50:43:44:F6:2E:A1:6E:FF:77:9B:12:8E:55:D2:7F:6D:76"}}},"request":{"raw":"GET /api/reactions?domain=vezunchik-onlayn.buzz\u0026page=%2F HTTP/1.1\r\nHost: vezunchik-onlayn.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 79\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":609,"mime_type":"application/json","magic":"JSON text data","md5":"cbbed385bd7dc7ea4a695cc0c93038d9","sha1":"b1353dc6aa80d4b40b4b5bd5f6cdbe2082d0d4cf","sha256":"5c7a4da69febb5880b02c5a75e6997210b6a432b11aca6301bd929fc72350dbf","sha512":"c0bc17cca636d42cd691a73bc446b93c643146b1d8d9f1fd1fd0dea18bb5022a4c516f97b648d8d9154ffd28edb9f6055956e4921b568a500a9604c796d4e903","ssdeep":"","tlshash":"9ba001ba883a21122761a481041b299288b942656f025755d3bd422d531c6112b41686","first_seen":"2026-06-30T22:39:43.589844Z","last_seen":"2026-07-14T20:56:23.592299Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"vezunchik-onlayn.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.451Z","timestamp":1784058248451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://vezunchik-onlayn.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 06:06:35 GMT\r\nexpires: Fri, 09 Jul 2027 06:06:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481053\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32921,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-14T21:29:44.50011Z","times_seen":26126,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":34,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allohatv.github.io/replace.js","fqdn":"allohatv.github.io","domain":"allohatv.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.217Z","timestamp":1784058248217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /replace.js HTTP/1.1\r\nHost: allohatv.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 22 May 2026 14:14:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a1064bd-3fb\"\r\nexpires: Thu, 25 Jun 2026 11:00:45 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9EDC:1A7564:149B26:162A55:6A3D0805\r\naccept-ranges: bytes\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\nvia: 1.1 varnish\r\nage: 191\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1784058248.251534,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 12117f2e4bb322b3c9c95284e04b884ab55cdad6\r\ncontent-length: 535\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1019,"size_decoded":1262,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"ebb3106d07f98abf757a898743c74072","sha1":"f7f874aeb511ebf429f48582036acc43f09c7d19","sha256":"c8e90f7e01b2168f57b60badc8aafa6e779f2305380a1b3b03977c3bc13ba27e","sha512":"6a830007ca827baaa672d61925a7bf29f1977ff9ae4fcfd61e856dddb3adcba41b9216761a9aee1fbc509b7967b231eb3c0fd2dfc74a16e66503f90cd305f3b6","ssdeep":"","tlshash":"9f11cec3fa7fc8d7002470b6c85850ad2d7c55b6a12b2443bec48969a0a065c41b39da","first_seen":"2026-05-23T05:54:34.147584Z","last_seen":"2026-07-14T20:56:23.601259Z","times_seen":27,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":12,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6c-97-be-r504.vkvideo.cloud/0/mR5FOAu3Qt3opr7N-FZata_rQXM3Pxxy3hgAHZrEKQtFkfgYaimQHh4nj_0A6tOzglaKj0i4zmbyaioMVoxRu8nf7qaTpJ5LyStY86ksOraZqf_sSMmptP9TJ97MbIzZlG-2-4UkYNnKcl4aMedJ7Pntb1GrtHcHVZeOmaRG64pVQWSzLJu4gJI58Lxbhi2YUm0llF8tRT_DBn3-rmpmNOodYz97xk6a6PAqB1ax1D78f8WYD8XDqBv2TzE30K_C95BRhyFYZNCYmh7mMqYseBJcBqnMgmEPikSpCNB7VIQAVdoHpXTBbpPr0OHJ2RwSxNNrU_FztThxVeryHdR-8lxaBSBz2fVYrPQkWXX8lNo5_Jn3F2W6w_4BYMLCFjlS890nfPkHSxhw5fH90YBC7as2Y-2ylz1yZrpZ1EHGclmHQGf8nkIX5yECdHc4XlsjOvxYy2GN1Fw91BDlv-GEB7ffJaUCuPsYwRfm39Cx5hBbK3cmVD8efIRc2uWDxrNZum47Eq4NuwEA5DGbxPIm1afFdTnl1sMyTkRw3537gkXRRKryV6aGA5MhLSySXfhiQTcbFrRwNri0zxn3zQuDJVjdyiIeLiC_DRqzp08Jhukmt-VOYAP4MhDFdhjERXZcPgAP2ZLohOCJWnhEWZEaRxMC_69zfTqVS1xht7ypHfm7toToLZ3J38Ry_OSAY96e3o44zxw0XCX42GDMcE32zDzGUxiawU2sWnUJylY6_LCDR3FEycR75h1MCHRIsOP4FEIAjnamHRav2WcIHfF84RxFpH1XGieBvf9KXAxiNgx5BSmoMIc0--A2mG2ZyI3kBroYrvBOKCo4L0hdAzN0h8wjWAfzY-5qbqVh7ws7PjzQj9VuQIarP5ZRtjKFv7sGcovOaAgXsH6UGhTRcyinWXa84GhuC8aIieJLyR6l4abgRXVUl9QjA9rStoRJ2HIFtD5jn2_gs14g69ffe5f6IQZPhfu0XumTwpKzU_8yVA3cKajyB37O38tFLER2lCd7O7MiN61dfGUqQUDQ1NYkEwGY53kvP4u-ZZ6QfaLHa-0N5UY79b7_bqXeTYC23aeUW9056rGIwmAeluTxYn8vN3bZZFfXs7T0TQM3SVWnAlpR0LjqmJJ3ajIIOuMOMOFUdt7Pm2k0EDrqOYuMYQyKQCpzviKQZjMqWfoJvF4xY4SGs1mbNDhn29hHZ1MLsnwEv6Kl0vGDnk2_l7AhSyRT9lqagcm4mXekm6oau3T4pv7NUIW5tU6Jd6xgmE0jlCDubg2ljms0zxeH9-mKyKroaLIeSTLBAe94zbwzoM60qQ9utN3KkckP-qloCUNmdjiUq3GiDdRSP99DHtYJX51NGUe5XlJWurADrh3lLtfb3hvg4wORzMB5aFU_2Y6_8Hrs8asmtYM3qnGXCMkon4Ox7rCr9hJbcIHi0sDuBs0uk0EY8m1c2G-mjMszXjQbKJNEZhRsR3zkCQw5XLv1-mVAGcYM2Wk2JK34b-oR3okOhLui8CMH7LbIpxYhE8vTPf57IO2Ta97CUVXB6iHZcvnPTnlZ08Hcu0kNqz9EJuNVaX2noQwtKeUHSNdvwjfwzQ2vFNmlG63ptmsR4AojvwW5EA25-7uiLxQNCJiZTvVUMqCs8xXfv5CRdSeevVN8SjS2dpiV2n_saQ3Z2LPsa0wDMTpI5sY8wikJHlz2oOWsSmgDKUrFoWcMfrCEVRwq-hohGFjWrUkp5T3ciYNkGuP9qRi9dQm7_Uhj2YtRBRk_OHjFwnokFdAl-gS2N7CV86z2qld2F9VLwbFGfzOIyEwKR088I2Bi1nE9oMUF2SCgZvwyihHxpQo-CLXTMOn1yJ13uUxgQ00rAqiDOZphD_cD9Urx/master.m3u8","fqdn":"6c-97-be-r504.vkvideo.cloud","domain":"vkvideo.cloud","tld":"cloud"},"ip":{"addr":"103.73.34.230","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:10.417Z","timestamp":1784058250417,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vkvideo.cloud","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 19:05:22 GMT","end":"Thu, 13 Aug 2026 19:05:21 GMT"},"fingerprint":{"sha1":"A2:C2:9C:E3:6E:AF:60:C4:2A:95:73:1D:8F:03:26:AE:1D:03:9D:51","sha256":"EC:04:84:A3:D7:8F:A8:AE:C7:6E:23:3D:D9:8B:EA:05:78:C4:DE:1E:F1:85:70:18:AC:67:1D:F1:5B:65:C6:22"}}},"request":{"raw":"OPTIONS /0/mR5FOAu3Qt3opr7N-FZata_rQXM3Pxxy3hgAHZrEKQtFkfgYaimQHh4nj_0A6tOzglaKj0i4zmbyaioMVoxRu8nf7qaTpJ5LyStY86ksOraZqf_sSMmptP9TJ97MbIzZlG-2-4UkYNnKcl4aMedJ7Pntb1GrtHcHVZeOmaRG64pVQWSzLJu4gJI58Lxbhi2YUm0llF8tRT_DBn3-rmpmNOodYz97xk6a6PAqB1ax1D78f8WYD8XDqBv2TzE30K_C95BRhyFYZNCYmh7mMqYseBJcBqnMgmEPikSpCNB7VIQAVdoHpXTBbpPr0OHJ2RwSxNNrU_FztThxVeryHdR-8lxaBSBz2fVYrPQkWXX8lNo5_Jn3F2W6w_4BYMLCFjlS890nfPkHSxhw5fH90YBC7as2Y-2ylz1yZrpZ1EHGclmHQGf8nkIX5yECdHc4XlsjOvxYy2GN1Fw91BDlv-GEB7ffJaUCuPsYwRfm39Cx5hBbK3cmVD8efIRc2uWDxrNZum47Eq4NuwEA5DGbxPIm1afFdTnl1sMyTkRw3537gkXRRKryV6aGA5MhLSySXfhiQTcbFrRwNri0zxn3zQuDJVjdyiIeLiC_DRqzp08Jhukmt-VOYAP4MhDFdhjERXZcPgAP2ZLohOCJWnhEWZEaRxMC_69zfTqVS1xht7ypHfm7toToLZ3J38Ry_OSAY96e3o44zxw0XCX42GDMcE32zDzGUxiawU2sWnUJylY6_LCDR3FEycR75h1MCHRIsOP4FEIAjnamHRav2WcIHfF84RxFpH1XGieBvf9KXAxiNgx5BSmoMIc0--A2mG2ZyI3kBroYrvBOKCo4L0hdAzN0h8wjWAfzY-5qbqVh7ws7PjzQj9VuQIarP5ZRtjKFv7sGcovOaAgXsH6UGhTRcyinWXa84GhuC8aIieJLyR6l4abgRXVUl9QjA9rStoRJ2HIFtD5jn2_gs14g69ffe5f6IQZPhfu0XumTwpKzU_8yVA3cKajyB37O38tFLER2lCd7O7MiN61dfGUqQUDQ1NYkEwGY53kvP4u-ZZ6QfaLHa-0N5UY79b7_bqXeTYC23aeUW9056rGIwmAeluTxYn8vN3bZZFfXs7T0TQM3SVWnAlpR0LjqmJJ3ajIIOuMOMOFUdt7Pm2k0EDrqOYuMYQyKQCpzviKQZjMqWfoJvF4xY4SGs1mbNDhn29hHZ1MLsnwEv6Kl0vGDnk2_l7AhSyRT9lqagcm4mXekm6oau3T4pv7NUIW5tU6Jd6xgmE0jlCDubg2ljms0zxeH9-mKyKroaLIeSTLBAe94zbwzoM60qQ9utN3KkckP-qloCUNmdjiUq3GiDdRSP99DHtYJX51NGUe5XlJWurADrh3lLtfb3hvg4wORzMB5aFU_2Y6_8Hrs8asmtYM3qnGXCMkon4Ox7rCr9hJbcIHi0sDuBs0uk0EY8m1c2G-mjMszXjQbKJNEZhRsR3zkCQw5XLv1-mVAGcYM2Wk2JK34b-oR3okOhLui8CMH7LbIpxYhE8vTPf57IO2Ta97CUVXB6iHZcvnPTnlZ08Hcu0kNqz9EJuNVaX2noQwtKeUHSNdvwjfwzQ2vFNmlG63ptmsR4AojvwW5EA25-7uiLxQNCJiZTvVUMqCs8xXfv5CRdSeevVN8SjS2dpiV2n_saQ3Z2LPsa0wDMTpI5sY8wikJHlz2oOWsSmgDKUrFoWcMfrCEVRwq-hohGFjWrUkp5T3ciYNkGuP9qRi9dQm7_Uhj2YtRBRk_OHjFwnokFdAl-gS2N7CV86z2qld2F9VLwbFGfzOIyEwKR088I2Bi1nE9oMUF2SCgZvwyihHxpQo-CLXTMOn1yJ13uUxgQ00rAqiDOZphD_cD9Urx/master.m3u8 HTTP/1.1\r\nHost: 6c-97-be-r504.vkvideo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accepts-controls,authorizations\r\nReferer: https://tevtons-as.stloadi.live/\r\nOrigin: https://tevtons-as.stloadi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nDate: Tue, 14 Jul 2026 19:44:10 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Accepts-Controls,Authorizations\r\nAccess-Control-Max-Age: 864000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":419,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T21:18:27.063199Z","times_seen":17247749,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":27,"send":0,"wait":27,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vezunchik-onlayn.buzz/favicon.svg","fqdn":"vezunchik-onlayn.buzz","domain":"vezunchik-onlayn.buzz","tld":"buzz"},"ip":{"addr":"85.136.181.142","port":443,"asn":6739,"as":"Vodafone Ono, S.A.","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.458Z","timestamp":1784058248458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vezunchik-onlayn.buzz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 18:16:26 GMT","end":"Sat, 10 Oct 2026 18:16:25 GMT"},"fingerprint":{"sha1":"9F:DA:51:BB:85:56:83:D4:18:11:08:57:99:FB:E4:01:FB:14:74:83","sha256":"56:B4:7F:FC:D8:F3:35:7E:9E:72:8C:62:EF:5C:14:50:43:44:F6:2E:A1:6E:FF:77:9B:12:8E:55:D2:7F:6D:76"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: vezunchik-onlayn.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1052\r\nlast-modified: Sun, 12 Jul 2026 19:13:17 GMT\r\netag: \"6a53e74d-41c\"\r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1052,"size_decoded":1545,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff6c03a2c2a0a982e38a546d410ea18c","sha1":"6f3db7736e9a83e3b4cf5d772edefc06cb0e29ae","sha256":"ac9e26edefa745c969e7850a0f46c5fbdd4d49b5f044a7681d491e6bfdf9cb7e","sha512":"e6d49ad3469f70b234727a961014396feb5eb65c725e7c2b99d9b987b306e721c6ad261227467992be2b581f1719ed5a1d4534489bf114f267d56d97dc8803b5","ssdeep":"","tlshash":"c31166beaf86e6285843ee51ad311863c66fa168730b13e81179f460f1cb8ccd48d436","first_seen":"2026-05-23T05:54:34.071783Z","last_seen":"2026-07-14T20:56:23.596736Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"vezunchik-onlayn.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/build/app.0942917a.css","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:08.954Z","timestamp":1784058248954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"GET /build/app.0942917a.css HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Jun 2026 11:45:14 GMT\r\netag: W/\"6a2bf14a-c938\"\r\nexpires: Thu, 10 Sep 2026 11:57:01 GMT\r\ncache-control: max-age=7776000\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51512,"size_decoded":8782,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (51508), with no line terminators","md5":"0258ca18bc29601584d54a72d98a808a","sha1":"be5d5315b957f50aed2a901dbc9fa95c11ea41d6","sha256":"4c0ba2aac110353f80d6c591a6420ae9346eaf35e13e57916a65b9f131e3bbe3","sha512":"882115d5ccd718ad7a2a345a879b16a362642709fc42173581152f37118ef78b240657b72a0266b83487db66c0e692f9d41d90e2b1c925ad079004ffbab1dbc9","ssdeep":"384:lF92gW4CJmCJE/0i/2/3/K/I0pL8WWN4uc/7gBI7xtJpmpzqtGrUp/hQxVddcbGA:lL2TJMQd17rVjTc607m4PYf87j","tlshash":"3b334160d5e4c138a81fa3dbfbc1db9d92be8111e9274faefd5474a0c2c6da706a3105","first_seen":"2026-06-16T11:39:57.055349Z","last_seen":"2026-07-14T20:56:23.594927Z","times_seen":24,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/js/rmp-vast.min.js?v=2.45","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:08.958Z","timestamp":1784058248958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"GET /js/rmp-vast.min.js?v=2.45 HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 12:57:49 GMT\r\netag: W/\"6a2ab0cd-35810\"\r\nexpires: Wed, 09 Sep 2026 18:32:29 GMT\r\ncache-control: max-age=7776000\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219152,"size_decoded":60660,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators","md5":"d4a464d83bd585966fb7f0e500e26288","sha1":"e8b134c54f00211942932a87aa1ff6d00087b61e","sha256":"060523082dc56582d3187369ce7313a5e7ddf974e22a3c4b8b63e20832d21ae2","sha512":"e429304ee28339cb811b56b61f02eff893a845a23cbbb777ac8270b4931bcedbb410a3dbab83d1df3ac46f3853363bf93485d2da26b8c95a99e6c0e924f82f39","ssdeep":"6144:Q4ksiMaq7xacZq1lVvOeOy+la1Muib5+4HvS:Qjsa1l/OS","tlshash":"352429897a82f0b51af614e0547b420bf1360a2a35064464faa8ece57d7cd8f7277f78","first_seen":"2026-06-11T22:18:06.507922Z","last_seen":"2026-07-14T20:56:23.604579Z","times_seen":18,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/build/app.1216f2e9.js","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:08.964Z","timestamp":1784058248964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"GET /build/app.1216f2e9.js HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Jul 2026 20:34:13 GMT\r\netag: W/\"6a481cc5-94bc9\"\r\nexpires: Thu, 01 Oct 2026 20:37:54 GMT\r\ncache-control: max-age=7776000\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":609225,"size_decoded":224135,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64813), with no line terminators","md5":"77b19fa590acd03adc5d516e565a57a4","sha1":"850fbb3f7762aab268198c78e7b4847a0daf9d08","sha256":"c2a4d570e4a4b7482fdadaf532f6ef94b2b333132b204f6766ceb1f2d5cbc9b1","sha512":"28ffbf10490621c7f614c9ddefd7add44c96f4cb01779b13404c5503d2caa5fbd8c5a2252445d59dec0cac641cb566212accf1d9d1ed73339188bc81204c09b2","ssdeep":"12288:iqz8rQ7HvEnAz97ERTXuymigUc4hRM7E56B4LBBtc4tUqxJgANr0ber0TnfmGVqE:iqzAQYnaJeTXuymiRT0c62CqD+er0TfR","tlshash":"c3d4d6c43b81f8158557a2b6332b9ae7e029cdd1d28c4c9cf2057cbcf9ac614f96ab54","first_seen":"2026-07-04T03:40:44.085064Z","last_seen":"2026-07-14T20:56:23.599664Z","times_seen":12,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/cekh8i","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:09.793Z","timestamp":1784058249793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"HEAD /cekh8i HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tevtons-as.stloadi.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 \r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Tue, 14 Jul 2026 19:44:09 GMT\r\nserver: sffe\r\ncontent-length: 1567\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":303,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T21:18:27.063199Z","times_seen":17247749,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":24,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/images/allplay.svg","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:09.848Z","timestamp":1784058249848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"GET /images/allplay.svg HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7066\r\nlast-modified: Fri, 29 Nov 2024 12:50:51 GMT\r\netag: \"6749b8ab-1b9a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nbn: mm-11\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":7066,"size_decoded":7443,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3daa334bd35160d1d76cfcf4b2d9f08","sha1":"c669b8fb367a917b28f196ab4bea4c8f305d8e87","sha256":"5a2c227e5264396ece17210c200deab43e9d1c7dfed225ad03a8d93f702a317a","sha512":"6da9be85ca11dc03883af47293c55494f17971ed6e59615bcd07a7def183d66380059c57cdfeb79efc09088dfca924c667a6fd6ab8a995922e5ff1d063695250","ssdeep":"96:ymFIR6RrCIR6RAsqG+se0R135a4eI1A3TwUvB2bI0NSJVUqSnhKfi5aR:ydR6RrhR6R9b1pauZM00JqwyaR","tlshash":"d3e195fec338c6ad9d5b86bddf63609030df61ea70e143a8e1154b7886971cde946a20","first_seen":"2024-12-13T20:56:38.438575Z","last_seen":"2026-07-14T20:56:23.600241Z","times_seen":331,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.plyr.io/static/blank.mp4","fqdn":"cdn.plyr.io","domain":"plyr.io","tld":"io"},"ip":{"addr":"172.67.69.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:10.422Z","timestamp":1784058250422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.plyr.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 03:22:49 GMT","end":"Sat, 03 Oct 2026 04:22:42 GMT"},"fingerprint":{"sha1":"EE:07:F6:C5:69:7A:6D:3D:D8:FA:E3:4E:A8:9B:9E:D4:DB:ED:70:F3","sha256":"B4:BC:C6:E3:CB:C1:09:5C:77:A3:C2:70:73:EB:BA:EE:B9:D8:6D:E5:D7:0C:E6:E0:1A:CA:12:08:58:1F:66:89"}}},"request":{"raw":"GET /static/blank.mp4 HTTP/1.1\r\nHost: cdn.plyr.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nOrigin: https://tevtons-as.stloadi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tevtons-as.stloadi.live/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Tue, 14 Jul 2026 19:44:16 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1777\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZdSKclsicaw1mfbru2%2BY3MWzIfBsQw0pDqiw7GZ%2B%2FH3VD9Hao3fyuwOY2UoARCajxz0ljSHGfobduK1HxyI9DMZI0FVAZKlqSraODEhe2hZTX5oCVWjnGPg6coC\"}]}\r\nserver: cloudflare\r\nage: 7838544\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\netag: \"08fc2557b6c938f1a251e59b016e90e2\"\r\nlast-modified: Thu, 20 Apr 2023 10:33:44 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 0-1776/1777\r\ncf-cache-status: HIT\r\ncf-ray: a1b305691e3556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1777,"size_decoded":2581,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"08fc2557b6c938f1a251e59b016e90e2","sha1":"8d385ebd53fd721167b5ead62fec0ed81a0d9d5a","sha256":"5747997d80825cbafcdbe5ab97d7b5502c06b1aae85fed9610845348b3da4d98","sha512":"c3eb50ad75d54c5548ca7a7309af191641c913569187856d29d4cb822335259961593b36e08a9b20830909a4f0ed2c3147925224a708ea21f61b9f2535017016","ssdeep":"","tlshash":"dc31c6973b9a4408d1500331a8b6030fb30bc330a1de73cbe24246566cefbd08e6192e","first_seen":"2023-04-07T16:26:29Z","last_seen":"2026-07-14T20:56:23.592916Z","times_seen":1116,"resource_available":false,"data":null}},"time_used":6410,"timings":{"blocked":0,"dns":7,"connect":5,"send":0,"wait":10,"receive":0,"ssl":6387},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700;800;900\u0026family=Work+Sans:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.213Z","timestamp":1784058248213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Outfit:wght@400;500;600;700;800;900\u0026family=Work+Sans:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Jul 2026 19:44:08 GMT\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11322,"size_decoded":1356,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9464cd658629beef94f5bdbaa6bb3fb0","sha1":"da9b52c6445b4eb6be797938e0683b7d998e9248","sha256":"412f2c430d5c8338e8f09fbeb88ab3e7ad5d488349d22e4925133c8735f64830","sha512":"ed54c39c205ea50a5b7bd084dfc335a83acafec0365b2a425c00611ab48cfb558425c7b5cc550261fab7545376d633190a692d4abc512e84d97962f2886048e2","ssdeep":"192:zh6OhprhwEhXxhWCh1Wn7V8pOaVRpNJVipEQV/pr3V4G:I6tQ79","tlshash":"4c32ef91046ba114db871dc223ce7e37af5fa2507444d938affe1889acafc1a536670d","first_seen":"2026-07-14T19:44:46.883555Z","last_seen":"2026-07-14T19:44:46.883555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stravers.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","fqdn":"tevtons-as.stravers.live","domain":"stravers.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vezunchik-onlayn.buzz/","date":"2026-07-14T19:44:08.428Z","timestamp":1784058248428,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd HTTP/1.1\r\nHost: tevtons-as.stravers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vezunchik-onlayn.buzz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-14T21:18:27.063199Z","times_seen":17247749,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tevtons-as.stloadi.live/build/401.3853f8e4.js","fqdn":"tevtons-as.stloadi.live","domain":"stloadi.live","tld":"live"},"ip":{"addr":"45.95.201.43","port":443,"asn":205125,"as":"Network Management Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd","date":"2026-07-14T19:44:08.962Z","timestamp":1784058248962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stloadi.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 21:08:07 GMT","end":"Fri, 04 Sep 2026 21:08:06 GMT"},"fingerprint":{"sha1":"AF:97:85:F5:9D:AF:2E:C7:E7:17:C4:31:9B:B6:20:33:30:EC:5C:C6","sha256":"36:38:53:86:63:31:F6:94:2B:65:FD:00:41:E0:F4:EA:37:93:D2:AC:D4:77:D0:7A:5D:73:02:59:75:2E:E7:97"}}},"request":{"raw":"GET /build/401.3853f8e4.js HTTP/1.1\r\nHost: tevtons-as.stloadi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tevtons-as.stloadi.live/?token_movie=eea6816ae5e1742bbef07902a0f2c9\u0026token=L9qabOl8lRE440kXbjJZlGGy6A2mwd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Angie\r\ndate: Tue, 14 Jul 2026 19:44:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Jul 2026 20:34:13 GMT\r\netag: W/\"6a481cc5-1f7581\"\r\nexpires: Thu, 01 Oct 2026 20:37:54 GMT\r\ncache-control: max-age=7776000\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\npn: 11\r\nalt-svc: h3=\":443\"; ma=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":2061697,"size_decoded":803924,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ac292893b1fe10e2ccf49afa98eb6a91","sha1":"8b1687903aa39006bba388cc33b849a4018d340c","sha256":"affc50e040d229a5c44c0feb870d22658c67b4d24cf0d905513cbc97229b7160","sha512":"84d416504391eb3945f91d5b9e6a60f339d062107f51e6f0e1cda93f3ee066745e232686ea17b26c92feecc34188ff10eeb434ec75902322cbb8a607fcc5c717","ssdeep":"24576:CXn/TswPbHmpWRpeG7kWsauDBz+3tnnbTQC:On/TTPbHmURpeG7kWsauDBzYnbcC","tlshash":"f325c8c53781f450c5a7e1ba372ba6e5e12b9cc1a3cc9c5cf21478acfca4b08da65b54","first_seen":"2026-07-04T03:40:44.072066Z","last_seen":"2026-07-14T20:56:23.597339Z","times_seen":12,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}