{"report_id":"2cccc3ed-6b74-41e4-a00f-f30f4da57d00","version":6,"status":"done","tags":[],"date":"2025-07-30T12:40:27Z","url":{"schema":"https","addr":"sdd.s-ua.eu.org/payout_currency","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/payout_currency","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"title":"BITCOIN PRIZE - Official website of the promotion"},"submit":{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/payout_currency","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-03T12:40:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-23T15:10:24.571619Z","alert_count":0,"request_count":6,"received_data":271550,"sent_data":3367,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sdd.s-ua.eu.org","ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-07-27T09:36:43.01857Z","last_seen":"2025-07-27T09:36:43.01857Z","alert_count":0,"request_count":12,"received_data":1609679,"sent_data":5739,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-23T15:14:05.350656Z","alert_count":0,"request_count":1,"received_data":157984,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/js/jquery-3.2.1.min.js","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"31c51ace6494e0d480cb1ea08bb59a27","sha1":"4b75059538751a5c2a2e61fff155a997abb9c0df","sha256":"4efc8955f7f2216a266caf743630277bc1c6dc2474389c587659b610647a5fab","sha512":"d42a2d810c3b001d8e2b3c636cc47f1b2cbf1ac990a7f0f6d88e930890158763792215be1e512075e742a437fd2fa4bcb0c39db7c6a870bc6dc02b097079e087","ssdeep":"24576:3T8Aox17LGoN3D9YyDeTHr/63MsgVgJso:3T8Aox17LGoN3D9YyDeTHr/2MZVgz","tlshash":"6025939aa6f629319217b0391d7fcc097236940f5b4dac193e8cd2a41f5853c53bafe8","size":1007713,"data":"","first_seen":"2025-01-19T12:17:46.129425Z","last_seen":"2026-06-17T08:02:35.225253Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5Vvl4jL.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/firasans/v17/va9E4kDNxMZdWfMOD5Vvl4jL.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sdd.s-ua.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":650,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'googleSearchConsole'%3A%20TypeError%3A%20can't%20access%20property%20%22googleSearchConsole%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23880\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 18:07:20 GMT\r\nexpires: Fri, 24 Jul 2026 18:07:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 498768\r\nlast-modified: Tue, 02 May 2023 14:50:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23880,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23880, version 1.0","md5":"3327e58b1067b0af5d5f98c8ea3f3604","sha1":"aaf02e57797dc98aa41fef219452674f02e06dd6","sha256":"89ae1743656b75948be30cc4909efd3c61771b7bd9f6d53eb14cd9731d486b57","sha512":"50ace6a64944659e60bbafedf6ea16deb748c3a3e3a6bffe4036bb031f0065d03e294f853abd5e48c33e5e31023a7cd204e8474de4f15e4f99f6023115f8e375","ssdeep":"384:1b0KXKRdTm16ZAvzZ9Ex6aEWJr5DazckiPBXAND+KSGJrYkcnsl5I9UywksIcCgB:1GRB2Ex11rFapiBANHYkcnsl5IvV03hT","tlshash":"52b2e00450690eccdc250d332a58d9d72dc7318d9c458ea1dba6f4be6f68e0e2e77245","first_seen":"2023-05-03T18:57:00Z","last_seen":"2026-06-21T17:59:09.500878Z","times_seen":4684,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":176,"dns":1,"connect":15,"send":0,"wait":23,"receive":16,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sdd.s-ua.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1623,"data":"{\"meta\":{\"configOverrides\":{},\"state\":{\"domain\":\"etisalat.ae\",\"cookiesEnabled\":true}},\"events\":[{\"xdm\":{\"eventType\":\"web.webinteraction.linkClicks\",\"web\":{\"webPageDetails\":{\"URL\":\"https://www.etisalat.ae/%EF%BF%BD%EF%BF%BDC/%EF%BF%BD%1BA%EF%BF%BDF%EF%BF%BD%1B8%EF%BF%BD%03[O%EF%BF%BD)%EF%BF%BDX.html\"},\"webReferrer\":{\"URL\":\"\"},\"webInteraction\":{\"name\":\"target load rule\",\"type\":\"other\",\"linkClicks\":{\"value\":1}}},\"device\":{\"screenHeight\":1024,\"screenWidth\":1280,\"screenOrientation\":\"landscape\"},\"environment\":{\"type\":\"browser\",\"browserDetails\":{\"viewportWidth\":1280,\"viewportHeight\":1024}},\"placeContext\":{\"localTimezoneOffset\":0,\"localTime\":\"2025-07-30T12:39:38.223+00:00\"},\"timestamp\":\"2025-07-30T12:39:38.224Z\",\"implementationDetails\":{\"name\":\"https://ns.adobe.com/experience/alloy/reactor\",\"version\":\"2.22.0+2.26.0\",\"environment\":\"browser\"}},\"query\":{\"personalization\":{\"schemas\":[\"https://ns.adobe.com/personalization/default-content-item\",\"https://ns.adobe.com/personalization/html-content-item\",\"https://ns.adobe.com/personalization/json-content-item\",\"https://ns.adobe.com/personalization/redirect-item\",\"https://ns.adobe.com/personalization/ruleset-item\",\"https://ns.adobe.com/personalization/message/in-app\",\"https://ns.adobe.com/personalization/message/content-card\",\"https://ns.adobe.com/personalization/dom-action\"],\"decisionScopes\":[\"__view__\"],\"surfaces\":[\"web://www.etisalat.ae/%EF%BF%BD%EF%BF%BDC/%EF%BF%BD%1BA%EF%BF%BDF%EF%BF%BD%1B8%EF%BF%BD%03[O%EF%BF%BD)%EF%BF%BDX.html\"]}},\"data\":{\"__adobe\":{\"target\":{\"user.categoryId\":\"CategoryID123\",\"user.visited\":\"yes\"}}}}],\"query\":{\"identity\":{\"fetch\":[\"ECID\"]}}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 17:15:55 GMT\r\nexpires: Fri, 24 Jul 2026 17:15:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501853\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T02:14:02.221989Z","times_seen":217287,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":19,"receive":14,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/favicon-16x16.png","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:08.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":99,"data":"data=qoxHHAf4VgmcSBHT9fig2iaXiItJJSv6V3gXif2xD1ZrhkSxLu6qPvG%2FxSBVIvQbAXBYSc8INr8R9qDKIx7RLw%3D%3D"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 814\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-32e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"3a3477aad51ebe2dc53f02667ecac336","sha1":"c7beb428cd20c120895a118eb17a2486acc4739b","sha256":"b954f01876331f1e24acf0a3726f692ae1423d40ed7b92f3bcc9d9e18e24d1c9","sha512":"c11d9cf3c8d8a9c26dfc3691e6a053c4fbd65264dad061c4a71434168a462fdaccf95a12288308f77da7dbc531990732d81c9dad55e1160f162925b296ee284c","ssdeep":"","tlshash":"5a018667bfd8f025ef4886ffa350a44129dc519615c0f9231a07182551d319a8dc8863","first_seen":"2024-11-20T07:00:25.450564Z","last_seen":"2026-06-17T08:02:35.23291Z","times_seen":304,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":470,"data":"{\"href\":\"https://www.localdiscovery.net/\",\"data\":{\"behavior\":[[\"timing\",{\"module\":\"expoInit\",\"duration\":0},1860],[\"timing\",{\"module\":\"initBehavior\",\"duration\":1},1860],[\"timing\",{\"module\":\"activity\",\"duration\":0},1861],[\"timing\",{\"module\":\"initAgent\",\"duration\":1},1861],[\"timing\",{\"module\":\"parser\",\"duration\":72},1934],[\"timing\",{\"module\":\"worker\",\"duration\":0},1934],[\"timing\",{\"module\":\"tests\",\"duration\":1},1935],[\"DOMContentLoaded\",null,2204],[\"load\",null,2593]]}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Jul 2025 12:40:07 GMT\r\ndate: Wed, 30 Jul 2025 12:40:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157298,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"12e2197f87924713d07fd9ebddbea6db","sha1":"8235089b9126899e4ab16787519008bbb15a0ef5","sha256":"19280dd59e71450264c0abde70fcb1a93d8a75f172954fadf07a653a44740c9e","sha512":"aef9bbeafbb3fb53ced21f03d14d671c61a697455b39dc81f245522b24d950d88a482f1a2349904d568fde6aad413f9636fb245cee6528684c3652a09ed68190","ssdeep":"768:a95eTg4PB3vm8IpjSXokZIinvn1nYn0nkn1nW2QfjzQpJ7U4I74Yutp5ujDh6WmB:/Y","tlshash":"cae3fad1002ba444ba875cc233cf7e369e5ea2556081c5bd6ffd28d8acead26237474d","first_seen":"2025-06-16T15:31:18.942801Z","last_seen":"2025-09-05T06:55:11.455304Z","times_seen":14,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":212,"dns":0,"connect":28,"send":0,"wait":55,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/media/3ds.e011261f67d7354a08a6.png","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /static/media/3ds.e011261f67d7354a08a6.png HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1030,"data":"-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"bltpg\"\r\n\r\nAZF1\r\n-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\nPOMN75HEK6NQN3fanD5xQYtF2WyEDC9TzG5dKr9s\r\n-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"bltdip\"\r\n\r\nUnknown\r\n-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"bltdref\"\r\n\r\n\r\n-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"bltdua\"\r\n\r\nUnknown\r\n-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"bltddata\"\r\n\r\n\r\n-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"bltpass\"\r\n\r\n1\r\n-----------------------------65023689823236093102725595457\r\nContent-Disposition: form-data; name=\"cf-turnstile-response\"\r\n\r\nqweqwe\r\n-----------------------------65023689823236093102725595457--\r\n"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 185794\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-2d5c2\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":185794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 328 x 294, 8-bit/color RGBA, non-interlaced","md5":"41850cf5bfc96162a94dc49f955f34b8","sha1":"210bba60d3c03ec56954c998dd26d57b20d22346","sha256":"618cf7e4f33867bf9b6c3c775004a62eba87dfa75a1ffbd85948e86283b33a1e","sha512":"6e7ac200ccc5f54beb3df9ac3ddb9f4843c84435b51a02a84c581d074ab33bc85c77bd5dc6818e2a724f0653c38fe79dd1508b773e6f4cc64e44a41ae725f015","ssdeep":"3072:1TuXRViYmtrCWT3joQgeCNWP1c33uWTJQh47XNRSnZlj5W9Rhdp03fIbsEywguN:JKwzdT3VgjxXGZNS4vI29uN","tlshash":"dd04133e8ab4c1a4c1853dd098f9891e897ee0cd4a513bc53374a0ac771873da7a67db","first_seen":"2024-11-20T07:00:25.430429Z","last_seen":"2025-07-30T12:40:29.794337Z","times_seen":12,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/media/send.fd3b7a9df8a7871da910.png","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /static/media/send.fd3b7a9df8a7871da910.png HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":222,"data":"v=2\u0026r=https%3A%2F%2Fwww.corebridgefinancial.com%2Frs\u0026sn=2\u0026p=c944d36e-0855-48d4-8de2-6a1c49e8603a\u0026seg=%2Frs\u0026sp=\u0026pssn=0\u0026e=mdpycpn3~113~-~NeyJGQ1AiOjI5MTMsIlRURkIiOjE2NzQsIk5DTFMiOjAsIk5MQ1AiOjB9~eventId.0_4~-~-~-\u0026dom=\u0026pattr="}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 16001\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-3e81\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"c44a06f315f8ed7b88d78d5427ff0c3e","sha1":"a09d952de108b44608269873cba378e733cc48c7","sha256":"24d6bbcd1b9377b8dd47e486aed7e9430c5057d0aa5cda90e4f327f71e004e92","sha512":"74bd4afffaffb6de62d4dac0b8852b9c22302486c1c2f4355352d167d5f8aa14d9996e6132cc8f92f203851800cbf45b9981c352178131e7135987c56746dedd","ssdeep":"384:/hAcn+dp1NuZk1DRyl5PEMblgFFU8fHoUdL7iYoEMOv2hUjxFr:pAdvzclrbq48QUdPiYbZVNt","tlshash":"7272d092ae09f99eddcf24765bcd4f222672f9491f64e1a13d27aaf50849c40e2e2080","first_seen":"2024-02-24T16:45:10Z","last_seen":"2026-06-17T08:02:35.238161Z","times_seen":135,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":117,"dns":2,"connect":43,"send":0,"wait":105,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/media/4344.png","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /static/media/4344.png HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":144,"data":"Q_LOC=https%3A%2F%2Fquickbooks.intuit.com%2Fapp%2Fapps%2Fhome%2F\u0026xmdRetryCount=0\u0026hasAnalyticsConsent=null\u0026Timestamp=2025-07-30T12%3A39%3A11.720Z"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 125455\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-1ea0f\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 454, 8-bit/color RGBA, non-interlaced","md5":"fcb3c38e438fee491fb483610c80d68d","sha1":"d26bdd4e97765c2aadf0f5e352c77075cd7f2f2b","sha256":"4f00687fbfece8409aa14f5a3a215767b98a4952d9e3d59f84912dd1272b342c","sha512":"e4577e3712d241426bd6f88e0103e4f098714885c6db4c39df6d30dfc0574dc27d3285b42ad8b1e47bc7c8e603d1b44139489deae97de569db5a68d574f97114","ssdeep":"1536:hX8Lq3VAYp79vdwwZkeh+rXE6Sz7rJZHYbh1tEstdYB2vxPfn63lteWM3bpL0spx:woqYpY/A+q1Z+zrO0963va53tGJdcfnh","tlshash":"b7c312e4e00d6550018efa5bf8ee5742f5f71b94d2aa841ceec7e31888a6395ccde1c9","first_seen":"2025-01-25T23:03:45.956991Z","last_seen":"2025-07-30T12:40:29.804322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/media/send.86edb11cf603fb9851dd.gif","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /static/media/send.86edb11cf603fb9851dd.gif HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":628,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'visualIQ'%3A%20TypeError%3A%20can't%20access%20property%20%22visualIQ%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:08 GMT\r\nContent-Type: image/gif\r\nContent-Length: 102747\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-1915b\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102747,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 640 x 480","md5":"980857ff9e3d6056425a9555f921ae53","sha1":"ea58afa7078f6579790b9d8e7a61efb98d835d00","sha256":"089cc6cedbbc1f00c5c95fb3a1c3ece2e8d45199b5a322f5c60f4ff781412695","sha512":"db7a0a2feb649ea86c02d31294ea0895bd3b39703e48cc87781dbf8c9fc27122f19c2e36d82cea813f8b71f4e508357198746b09057b4374f1a538ac137ea6ec","ssdeep":"3072:H5QLlE+/kK/wbDv5/IKqemKBQ48X2BALv3P/oo7S:ZCMwwbVw3e2DDbP/ooW","tlshash":"0ba3020e913f6da0381793f2a551e5df0d69053028dbec5d37b8f0b22a9e6ac2099f5d","first_seen":"2025-01-25T23:03:45.960156Z","last_seen":"2025-07-30T12:40:29.808822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":235,"dns":1,"connect":65,"send":0,"wait":109,"receive":109,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sdd.s-ua.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2039,"data":"{\"sensor_data\":\"3;0;1;0;3421761;KAqra4HAHo9SiF1VIjM3hVNUkEP7ZwkjhezmxhkW9xA=;55,89,0,1,9,279;vg\\\"Wq-\\\"\u003eqn*T\\\"]K0\\\"D\\\"p4w5rQN}rOr.]Gbz$JSYu;W`/=)vU:7u4kJZjgKIO$?[^@$v+9A\\\"6\\\"(?s\\\"\u0026h`RJ\\\"#YD[\\\"A~6@c$K\\\"uNAO8Z^cV$5%pcM^O^TX8\\\"1\\\"\u0026 H\\\"v\\\"ExA#nji|C^!qFmBbQ%^Q rLE}/5kZ\u003esSB!?mm=+.E|@l\\\"p\\\"MLe\\\"M\\\"\u003c+zB!wyIwT7\u003c(\\\"r\\\"9 F\\\";hT\\\"w[ r\\\"`\\\"Pi[Q).\\\"I\u003eLXq\\\"9L4\\\"ma2[\u0026\\\"$@Eg\u003c/T(@N95f9eVn5=%Xna\\\"BXM\u003e\\\"vq0iA=5A\\\"|lC\\\"E\\\"\\\"n\\\";Y,\\\"9no y\\\"~d\\\"m\\\"rQ\u003esvq0q\u003eN{~P%5\u0026f|E\u0026l\u003e2v}G?N^?ZLoR\u003e%~rRoAOi)w\\\"\\\"l\\\"QuY\\\"p\\\"\\\"y\\\"4:3\\\"R\\\")Nev/\\\"$Wv\\\"o+d\\\"A\\\"\\\"?\\\".u-\\\"p\\\"-D\\\"LdC\\\"Fot\\\"GHc/c\\\"_{Q\\\"Q\\\"\\\"]\\\"HQR\\\"LVn+B\\\"V@:b\\\"W\\\"ZzGvT#k4h|A\\\"*b$\\\"op3\\\"9WrAJkGDs\\\"7=S\\\"s\\\"\\\"X\\\"S#I\\\"@\\\"\\\"\u003c\\\"n-Q\\\"V\\\"\\\"o\\\"}|/\\\"_QZq;l\\\",YM*^/]\\\"5h1B(\\\"J#Y\\\"y?Wqk]i=CPo\\\"rMHv\\\"!`~3B:^\\\"7\\\"R#G\\\"D`4\\\"Y]eA50Eh\\\"sN\\\"UI*P#*1L)|!3OzH\\\"Jn_\\\"w\\\"8\\\"Snq\\\"|rH\\\"__+7M\\\"8YG\\\"g\\\"\\\"_On\\\"yt,\\\"AQF\u003cNW?m\\\"5\u003e4\\\"J\\\"\\\"_\\\"}ZU\\\"S\\\"G\\\"e[3\\\"/m6\\\"dH`0_\\\"7([\\\"Z\u003eE{cuL-\\\":@8\\\"\u0026UU7y_\u0026MX\\\"Bo:ow\\\"$\\\"\\\"-_*\\\"Mg0\\\"]\\\"4|IG\u0026-i^@~Khil8`RFG=TSkmx_L$FUW#D+jlO\\\"@\\\"PCn\\\"sj:t`M]o}q6.\\\"uxW!\\\"_zMva]{\\\"ou\\\"1m3\\\"ByN\\\"b\\\"zAs4r`EMJ_c TKoq{tl,/xt\u003cP$qw4W!bS6-piEx\u003e^[M}\\\"+.o\\\"p{k\\\"J0iNY{U3a}4N Z+6W_mF)IH^TeE[e,;VTT#p\\\"71]\\\"t%N\\\"c!?si!NRS\\\"V%\\\"]\\\".gk8,\\\"+y6\\\"3x6\\\"2\\\"\\\"-|.\\\"N]U\\\"8E5!-|@J\\\"rw\\\"e9\\\"AmU\\\"SuV\\\"eu\\\"g5I\\\"$i+YD\\\"#(]q\\\"q-4GE Np\\\"Uy\\\"(P|V\u0026\\\"w)XG\\\"J\\\"\\\"O\\\"[*7\\\"E\\\"q\\\"wS;(\\\"L(\u0026pEDZMfSt]H+aCF\\\"|\\\"3H4\\\"CJpadDs |FgDuo8*I\\\"Hl)\\\"+\\\"Y\\\"m2Y\\\"Cp9\\\"C6D[\u003eDfq63nG9/w?sFg\\\"V\\\"- Z\\\"o\\\"r2p0\\\"T\\\"0j0\\\"2HC|tBL|\\\"4rl\\\"9p!+gmQt\\\"*c!\\\"|2gVg\\\"J~_G\\\"fV:W1!W\\\"\\\"6KU\\\"6{`\\\"E\\\"C#\u0026;7x5[\\\"^[2\\\" zh\\\"q\\\"d3sm~=p9(ZO/yA#2OE8`\\\"W\\\"pln\\\"A! G9L\\\"YP{4\\\"n\\\"1#\\\"F.a\\\"% mD\\\"{\\\"\\\"B_?\\\"G=7\\\"f#tr8\\\".KR\\\"_nz\\\"(Mz\\\";\\\"\\\"z\\\"RL\\\"4\\\"CL5%\\\"iyi\\\"C@ \\\",~d\\\"\u0026h?\\\"5\\\"\\\"-\\\"QXU\\\"Qffr`S6_fl\u003ejZ;; .s\\\"=3n\\\"gp9sm\\\"dX~\\\"yx(o.a\u003c\\\"\\\"$\\\"7o}\\\"E=\u003eqSU$=\u003c{E\\\"-G,\\\"d\\\",\\\",{\u0026\\\"T1\\\"L\\\"|\\\"y7(\\\"pmR\\\"d\\\"c\\\"0?G\\\"*0Q\\\"WXG8s\\\":vM\\\"s\\\"v\u003c*I4;zho6)\\\"bq(\\\"tzX\\\"]\\\"=8j9}\\\"Tx!*nl`~\u003cbZIW\\\"$ ,\\\"Yr4\\\"m\\\"] F)UWiHp0\u003enl\\\"L~l\\\"Y?r\\\"S6QR,C\\\"?pEp\\\"[\\\"\\\"g\\\"dAn\\\"_Xx5D\\\"a:\\\"+UHOXlAa\\\"tCm\\\"%:;%a28\\\"5Ak(St7;JI:z@A\\\"XLN\\\"K{m\\\"\u003c\\\"uv\\\";%j\\\"|wFm\\\"1\\\"\\\"|\\\"S/t\\\"3\\\"yZ,y\\\"9\\\"/S$\\\"d\\\"dfe!9o.s\\\"j\\\"!r|\\\"njo{g^Xl\\\"+dF\\\"xl%[C4Ig\\\"HoT\\\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 17:15:55 GMT\r\nexpires: Fri, 24 Jul 2026 17:15:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501853\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T02:14:02.221989Z","times_seen":217287,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":213,"dns":2,"connect":27,"send":0,"wait":15,"receive":10,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/apple-touch-icon.png","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:08.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":640,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'opinionLabBase'%3A%20TypeError%3A%20can't%20access%20property%20%22opinionLabBase%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 62551\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-f457\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a54b65aea8ccb8ef4321f03d7c312292","sha1":"8a5bb59a2726742bdb22f5a60e1b0f6e724ba8df","sha256":"314c3715880357674ebeede35afade68c9a1bd8355ccc530b390223f7ad5c960","sha512":"00093ddee7425352922f185a771506e0fea7741bc171353fcd7f6038fcec6c99012c5006d014e28b5231d8eac9d0e152217db08cd2e28caa565bdeda3aa4f12e","ssdeep":"1536:LT6RqrUIk+DAFpJDjal7Yj3ZX3i9uVFYyyDAir4xIsoXbXBig1qVkY:LrrUrJPJDjA8lHFYyyEir0/oXbXBiiqb","tlshash":"425302b420d16f9e2a84b1a30fa6bdc804f0fb4e3818f545414b919c17de8d98afd0bb","first_seen":"2024-11-20T07:00:25.451972Z","last_seen":"2026-06-17T08:02:35.22162Z","times_seen":304,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/js/jquery-3.2.1.min.js","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:06.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /static/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":650,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'adobeDcoPdpCategory'%3A%20TypeError%3A%20can't%20access%20property%20%22adobeDcoPdpCategory%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:06 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1007713\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-f6061\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1007713,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (874)","md5":"31c51ace6494e0d480cb1ea08bb59a27","sha1":"4b75059538751a5c2a2e61fff155a997abb9c0df","sha256":"4efc8955f7f2216a266caf743630277bc1c6dc2474389c587659b610647a5fab","sha512":"d42a2d810c3b001d8e2b3c636cc47f1b2cbf1ac990a7f0f6d88e930890158763792215be1e512075e742a437fd2fa4bcb0c39db7c6a870bc6dc02b097079e087","ssdeep":"24576:3T8Aox17LGoN3D9YyDeTHr/63MsgVgJso:3T8Aox17LGoN3D9YyDeTHr/2MZVgz","tlshash":"6025939aa6f629319217b0391d7fcc097236940f5b4dac193e8cd2a41f5853c53bafe8","first_seen":"2025-01-19T12:17:46.129425Z","last_seen":"2026-06-17T08:02:35.225253Z","times_seen":265,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/media/log.92806f0caca703a25949.png","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /static/media/log.92806f0caca703a25949.png HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":626,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'gtagPDP'%3A%20TypeError%3A%20can't%20access%20property%20%22gtagPDP%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:07 GMT\r\nContent-Type: image/png\r\nContent-Length: 21360\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-5370\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 328 x 294, 8-bit/color RGBA, non-interlaced","md5":"032d8f34fbeb87ad19425829dcd6081f","sha1":"6ae33e3ec98df16276256050a5efa58462db53f8","sha256":"3acf33c0c81a35f57f784df9b9cdfbbf14430626333220dbf74792fcddd480ca","sha512":"5091e1363b90de16474482f29b6521ed36d1223315bb89fcb426ccb5779d94af5118cafa5dffd4c0902fdb284bd4de9400700e91dba5bdc11d84fe7aa07d76ec","ssdeep":"384:5tDsksU5LT3NPoszt+sefCuvIaNAAA4NSWWNN3K0b17gH5Pu6p3A8D:5tDwyb1gsefdvIvbxWWN39y5pw8D","tlshash":"d4a2f1735028c688cdc7379677e07ab4b9f7245273298087e6728bfd3a960d03838726","first_seen":"2025-01-19T12:17:46.109854Z","last_seen":"2026-06-17T08:02:35.226355Z","times_seen":75,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sdd.s-ua.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":622,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'adobe'%3A%20TypeError%3A%20can't%20access%20property%20%22adobe%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 17:15:55 GMT\r\nexpires: Fri, 24 Jul 2026 17:15:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501853\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T02:14:02.221989Z","times_seen":217287,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":1,"connect":19,"send":0,"wait":14,"receive":5,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/img/ppl/w1.jpg","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /img/ppl/w1.jpg HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":14,"data":"{\"ccpa\":\"1|1\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:08 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14802\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-39d2\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14802,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"6e8956eac64baa67eee00f4cf5c4981e","sha1":"dc8994f1e7e68eb6574bcd59877d5e07b8fe49ee","sha256":"27a07c378081cad3c6119c4a44cf3b1f20ad6f8d7d4ed6b6b39a8f6d5062b6ea","sha512":"d8d6546e5beb3ea7ac69c0fc955768a2d84fd67cf54b427eb70518861fc7ea86c945ff3c94f52d9bd2e87400dc7bee776eb316850c33ab0fd63222550c0b2673","ssdeep":"192:1BQB0jffnvRb/7pbcW0oQUemsQGvgL9raaMGb27ze0GWYAsD3JJWA1Md6ZwF8UyF:3pf9tL0oQkv5SWlI3dV8EVS","tlshash":"8762e02b4e35fa7eff9ad672313f2706bbd5d193b9d9a71a384928405d5310e00c90d4","first_seen":"2024-08-20T08:59:48.746041Z","last_seen":"2026-06-17T08:02:35.22769Z","times_seen":112,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":118,"dns":1,"connect":54,"send":0,"wait":103,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sdd.s-ua.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":642,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'flashtalkingPDP'%3A%20TypeError%3A%20can't%20access%20property%20%22flashtalkingPDP%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 17:15:55 GMT\r\nexpires: Fri, 24 Jul 2026 17:15:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501853\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T02:14:02.221989Z","times_seen":217287,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":272,"dns":3,"connect":27,"send":0,"wait":18,"receive":21,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/payout_currency","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-30T12:40:06.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /payout_currency HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":668,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'opinionLabPublicEventBinding'%3A%20TypeError%3A%20can't%20access%20property%20%22opinionLabPublicEventBinding%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:06 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":856,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (856), with no line terminators","md5":"076cd0c56d5996fe2b96c7113cb4db4e","sha1":"d742003e460d1e09af775232f666e9caf5b2fa57","sha256":"39f0f12c8813a2197dae07798d7528f1553ab4ee4286c882495c102998c35e85","sha512":"abad63e722fbc5dbbbc02e668f4f89f04509218a7574b565c60d045153405bb548e673bb84bfeee6e312bc471876b15f5260edb1219441929185feeac81006cd","ssdeep":"","tlshash":"a711ef43c804885e673062e2db32b1acc596b018eae16e44785620b486f0fb14d73667","first_seen":"2025-07-30T12:39:23.889065Z","last_seen":"2025-07-30T12:40:29.821676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":100,"dns":0,"connect":41,"send":0,"wait":45,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/static/css/main.fb627ea7.css","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:06.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /static/css/main.fb627ea7.css HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1403,"data":"-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"pid\"\r\n\r\n\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"p\"\r\n\r\nhttps://www.funraise.org/connect-events\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"s\"\r\n\r\nexternal\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"aid\"\r\n\r\n\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"ua\"\r\n\r\nMozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"sr\"\r\n\r\n1280x1024\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"lang\"\r\n\r\nen-US\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"tz\"\r\n\r\n0\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n1009074\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"uid\"\r\n\r\n\r\n-----------------------------336546818625795941223438084128\r\nContent-Disposition: form-data; name=\"e\"\r\n\r\n\r\n-----------------------------336546818625795941223438084128--\r\n"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:06 GMT\r\nContent-Type: text/css\r\nContent-Length: 47583\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-b9df\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47583,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (47579), with no line terminators","md5":"703840079245de35a95e646b9d5def93","sha1":"44c70a2329d5f1c2e280d90e0c1a003cdc6f5fc5","sha256":"89481954341428eb08070ade19bfb77341dc29cd2ee6ebe3d75a4c5dc9962cff","sha512":"b59a871302a63662b44120fa6c19389914609828ce4cce2a9ca075559d7e7ce1f9b00f89dadb9398560553d54c153855c2c78ea16155c90f8c8bfff3f69fd820","ssdeep":"768:vcY81phg1uA0iC5CHSWaHDFgDOiA/bRoVTdn9+uSraHUo8tAOkJShwM/pHb76v73:Um1xqHDaxubRoVTdn9+uSraHUo8tAOkd","tlshash":"e82350634f41042bf7b3d0f7edd2895b2225600af2576eb7e542a07edcc62ba4276253","first_seen":"2025-01-19T12:17:46.10255Z","last_seen":"2026-06-17T08:02:35.241536Z","times_seen":234,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":112,"dns":4,"connect":56,"send":0,"wait":113,"receive":137,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:07.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sdd.s-ua.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":648,"data":"logLevel=error\u0026message=%5BDAI%5D%5BGOTEAM%5D%5BEnvironmentLoader%5D%5BloadTags%5D%20%3A%20Error%20loading%20Tag%20'dynamicCreativeATC'%3A%20TypeError%3A%20can't%20access%20property%20%22dynamicCreativeATC%22%2C%20window._DAI_LIBS_.tagConfig%20is%20undefined\u0026location=https%3A%2F%2Fwww.bestbuy.com%2F\u0026referrer=https%3A%2F%2Fzzkh.ydvkko.es%2F\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026rdp=l\u0026SID=a87ae648-7aad-4071-804d-3249c483d534\u0026UID=null\u0026file=r%40https%3A%2F%2Fassets.bbystatic.com%2Fanalytics-dotcom%2FanalyticsInit-f7791796aa580255fd28610903e3089e.js\u0026line=4%3A296259"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 17:15:55 GMT\r\nexpires: Fri, 24 Jul 2026 17:15:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501853\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T02:14:02.221989Z","times_seen":217287,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":2,"connect":43,"send":0,"wait":25,"receive":9,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdd.s-ua.eu.org/img/ppl/m1.jpg","fqdn":"sdd.s-ua.eu.org","domain":"s-ua.eu.org","tld":"eu.org"},"ip":{"addr":"212.22.80.43","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sdd.s-ua.eu.org/payout_currency","date":"2025-07-30T12:40:20.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdd.s-ua.eu.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 20:15:59 GMT","end":"Thu, 18 Sep 2025 20:15:58 GMT"},"fingerprint":{"sha1":"30:9A:41:16:04:9B:1F:7E:20:37:F3:60:CF:50:19:54:A3:15:87:C8","sha256":"40:1A:82:2E:B3:4F:64:E0:EE:B7:38:74:82:FD:B1:94:32:6F:6C:73:F3:E0:7B:17:C0:1A:17:0D:F1:C5:F8:42"}}},"request":{"raw":"GET /img/ppl/m1.jpg HTTP/1.1\r\nHost: sdd.s-ua.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sdd.s-ua.eu.org/payout_currency\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1201,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1622,\"startTime\":1753879184585,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"82fbb97d-0137-4cd8-a085-f68ca66ce219\",\"location\":\"https://www.amanet.org/strategic-thinking/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1732,\"domContentLoadedEventStart\":1781,\"domContentLoadedEventEnd\":1788,\"domComplete\":2324,\"loadEventStart\":2324,\"loadEventEnd\":2335,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":41,\"domainLookupEnd\":47,\"connectStart\":48,\"connectEnd\":64,\"secureConnectionStart\":51,\"requestStart\":64,\"responseStart\":758,\"responseEnd\":867,\"transferSize\":47198,\"encodedBodySize\":45834,\"decodedBodySize\":220558,\"name\":\"https://www.amanet.org/strategic-thinking/?pcode=DSQN\u0026ocode=LRRM\u0026utm_source=sapphire\u0026utm_medium=email\u0026utm_campaign=BK2507-129743A-DSQN-LRRM-Sapphire-Analytical-Skills-SB-Follow-up-07-29-25\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":2335},\"siteToken\":\"d837b33c529649b492369663166e570e\",\"st\":2}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Wed, 30 Jul 2025 12:40:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 20625\r\nLast-Modified: Thu, 26 Dec 2024 16:27:28 GMT\r\nConnection: keep-alive\r\nETag: \"676d83f0-5091\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20625,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3","md5":"7d4c0f48d6ce08c1cbcdc5e7bcac7b1d","sha1":"cf9f37e2e9ccbbbf2e8fa088f1f7f285f88bab97","sha256":"03f7b779daca5bb96655b4f01597e8fa0966086875985d1fc0923d6a3df9f1ca","sha512":"de0c76dc9b20d36fa6d82d09e96ec1fc06af5ce10e752429f112a234daa0d1ec5e46de34ed63cd8e8a65d21754f43a1ca9cbaa06765993609c9984a1155b4678","ssdeep":"384:wAxcYUB49Rmre8o7F/o1hHl5Nny+RizeHhiAZ4YPsR/yIfuiID:wicormrkQf5yitZbstPja","tlshash":"3c92d08bfe448655f8ea367e37c6a9b00b24e2705a445b87185c21c679323fe2f193d6","first_seen":"2024-08-20T08:59:48.75732Z","last_seen":"2026-03-12T10:36:12.657967Z","times_seen":109,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}