{"report_id":"352efb64-2215-4872-8aa3-6a99f1631cee","version":6,"status":"done","tags":[],"date":"2025-09-23T08:25:26Z","url":{"schema":"http","addr":"christianworldtshirts.net/rexevnnvfoyr.php","fqdn":"christianworldtshirts.net","domain":"christianworldtshirts.net","tld":"net"},"ip":{"addr":"151.244.237.20","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"title":"Google"},"submit":{"url":{"schema":"http","addr":"christianworldtshirts.net/rexevnnvfoyr.php","fqdn":"christianworldtshirts.net","domain":"christianworldtshirts.net","tld":"net"},"ip":{"addr":"151.244.237.20","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T08:25:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"mein.eister.de-firmenadresse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"hm.ru","ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"1999-08-02","domain_rank":4134341,"first_seen":"2015-05-29T13:36:41Z","last_seen":"2025-09-21T22:36:03.625562Z","alert_count":44,"request_count":11,"received_data":436847,"sent_data":5195,"comment":"","tags":null,"fingerprints":[{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-09-21T22:11:34.484141Z","alert_count":0,"request_count":2,"received_data":226971,"sent_data":1071,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ogads-pa.clients6.google.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":508,"first_seen":"2025-03-25T10:27:20.769449Z","last_seen":"2025-09-21T22:22:46.94828Z","alert_count":0,"request_count":2,"received_data":1293,"sent_data":1732,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"google.com","ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1,"first_seen":"2013-10-02T17:25:49Z","last_seen":"2025-09-21T23:34:37.549727Z","alert_count":0,"request_count":1,"received_data":159877,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":1,"received_data":40351,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"csp.withgoogle.com","ip":{"addr":"216.58.207.209","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4614,"first_seen":"2015-10-29T09:31:36Z","last_seen":"2025-09-21T22:11:34.988953Z","alert_count":0,"request_count":1,"received_data":1679,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":1,"received_data":311320,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-21T22:11:30.527953Z","alert_count":0,"request_count":23,"received_data":1760531,"sent_data":33065,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"play.google.com","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":48,"first_seen":"2013-05-30T23:24:35Z","last_seen":"2025-09-21T22:11:34.458343Z","alert_count":0,"request_count":1,"received_data":597,"sent_data":982,"comment":"","tags":null,"fingerprints":null},{"fqdn":"christianworldtshirts.net","ip":{"addr":"151.244.237.20","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2024-09-28","domain_rank":2836598,"first_seen":"2025-09-23T08:25:28.204914Z","last_seen":"2025-09-23T08:25:28.204914Z","alert_count":0,"request_count":1,"received_data":3346,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"mein.eister.de-firmenadresse.com","ip":{"addr":"185.238.2.37","port":443,"asn":200313,"as":"IT WEB LTD","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-09-22","domain_rank":0,"first_seen":"2025-09-23T07:25:16.002657Z","last_seen":"2025-09-23T07:25:16.002657Z","alert_count":1,"request_count":1,"received_data":159316,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/rs=ACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q/m=lOO0Vd,sy8p,P6sQOc?xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a20a2a92242a89fa8856486d5f3ceb2d","sha1":"73432c56e54468780b74ba2ab9d035f7ddc8f4b0","sha256":"f5c2529758615098e731f1c3b86db1c4434cab8a067a10112f19adaaf68b61ae","sha512":"424fb9525f74304ba5076da0a7ed3ac13e43bc56ad7236a97d0eaa0391bb2a84eab7ff738e11246a0678403446e1a21fd185f0b87a99b6992148b560376317c9","ssdeep":"","tlshash":"6c21711831e2b1930a62f5e0247f104bb27ff8adb49c855cf16c3dcabee64818a59335","size":1395,"data":"","first_seen":"2025-09-23T03:02:13.188721Z","last_seen":"2025-09-23T20:58:05.0722Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/mRxRRA","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c80687d8ce78d1730a4b6a0f3ee2d724","sha1":"05630f817b2bb686fe4e8c9a5b159b6517c89bde","sha256":"a697af15bb127252173289fa7de6160ed7d4970620efd7c978a8e82a7ad8d8b3","sha512":"ba0e3e22217fde56fe53d677fb70eae7a8be6b3fa876f51debc4721f5bd7668138b59e651ba1871d0cc8aa9e51edcf9543edb25e9472c99b1825d357ca3b9e3d","ssdeep":"","tlshash":"69c002d30ded7045c7e811c078f92544d209632e7f4aca84ecfc6d1044d6660d648345","size":173,"data":"","first_seen":"2024-01-25T08:12:13Z","last_seen":"2026-02-18T09:43:06.881897Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/clipboard.min.js","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc02313247d0d49169881c6ff36f00c","sha1":"7759eeb2bca89174e708a6ff6f3d8b4945e958e4","sha256":"cf65c435a3159b9e389f8fbb06730922c7949184d4ca4c860edda53144738d55","sha512":"d642c7e5a1219b6428c9e092d86adc82cbd570697bece090d81c01aed1e3408c803e87a95ce2168c2c9b3e65135b51d0964714565b7f38a6e842e586a05a2b10","ssdeep":"192:L2ToHWHQ4LygI+GlfHQ4LyQB3153pPN7rnoWtBTwuLJvqo5kAssU:LrHsc+GLfB33JhoWtBT9LJSo9U","tlshash":"ee22a66cb280b1b14ae770a9403f424bf3729469709a90d4b239d8f1adb8dce5467f3d","size":10753,"data":"","first_seen":"2023-04-05T13:40:28Z","last_seen":"2026-04-05T07:31:31.678444Z","times_seen":2501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/rs=ACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q/m=sy1fr,P10Owf,sy128,gSZvdb,syz6,WlNQGd,syuh,syue,syud,DPreE,syz8,syz7,nabPbb,syz4,syz2,syki,syoa,CnSW2d,syyy,syyv,syyx,nRwWne,syz1,fXO0xe?xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f54253c1c1e8f590bb3903284c5e1142","sha1":"e3e6b0930a25cacba6a193794a2323aca82ccf07","sha256":"31ba1d012123d5fb9da69457d8bef1e167f2c0195280e2947eb3e1fae1e1127f","sha512":"8cba5be43354c3b4438128e9bcd58874838991b7459f2d46ee3e96fc8106450f1214ec4d00337c991b7f29f991e33b05b131fe16ef530734d94a24c3fb69ff69","ssdeep":"768:PSH5WZoX6Zi1bKHqOFMdJxF/rDyxxGE2UmQ2P5vdFmlbGtPr0SiqAD9qIjRVyIXB:XoXr1bK3lBSajEpHAz","tlshash":"d9c2e8b472b170235274f4e9403b024ea33eb499b549516cbd6c8de27cf088a59b7fb9","size":28114,"data":"","first_seen":"2025-09-23T03:02:13.18523Z","last_seen":"2025-09-23T20:58:05.078079Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a86bc8f95bb891d615dfe3878748ccc","sha1":"320b87eb8383b2a00f7683e7f134d8c59251aeff","sha256":"67d3bf0009cf8aa8856fb534790a3b4c42b2caf44563e5d7519816dad7bbccd1","sha512":"2d06056dedc12f90bf46fcd491cc77ad453afd8210b765b5092ed8ebcb4b555974bc4c534d110cf4dc9a3d2c735294712353fe7b63320992ea2dae9aa969f601","ssdeep":"","tlshash":"68d0c9aef104b691151a69396d3fb294a83635237d80d441055a94429ce6b8e1455ca9","size":199,"data":"","first_seen":"2024-05-18T13:24:22Z","last_seen":"2026-04-05T11:56:48.718897Z","times_seen":62287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/tz.js?1698406877","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"84347a3dd3e119114d74c1cc70bcf26c","sha1":"c13b0821631b49d28e71762acf4cf027dcd02d50","sha256":"d56fe15aba1228c507d96ba072971b9511de98f625d30af15bb3f159eb0f2e20","sha512":"cb127366c502f49b6164df2bc68a5795bad9db3f6f591769388832b55b60e8dc31f0ab7ab45a6d4d358023c1e59851e66ad2c7ea76443434f6c875b25a7c874f","ssdeep":"","tlshash":"8bd075c0a0fc0c381dae42142c3ef289cb42bc11de0320f1800c0002c8c07102d2e031","size":267,"data":"","first_seen":"2023-10-28T16:23:11Z","last_seen":"2026-04-04T09:30:56.509508Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/common.js?1697227642","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cadc7dab077a41ce763dac55257ed504","sha1":"e14fcdddad9b09d7e3c9b7525df6080212489eb2","sha256":"10ca9d07667cb8049fdae6e78df01fc91b9e06e0817dec01eed87e7458d95118","sha512":"24cee516934fa2f7da51e1ca586be659cb589f84ca450c864078b9356b4be136b1ad5cd339c109ab7f8f3c93e26a80c2fbda6f3c9b4bc3a2660f137d7427c285","ssdeep":"","tlshash":"c28004341cdc500000173150141f550c5551743011431040450cf0504d1c53c030f70d","size":36,"data":"","first_seen":"2023-03-07T01:16:12Z","last_seen":"2026-04-04T09:30:56.51265Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/jquery-3.4.1.min.js","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-05T11:47:12.601716Z","times_seen":115217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dfe4eae33cace2f3fef4f16b0d22364","sha1":"8bd02535f5534d56816913e04a261751224afff7","sha256":"181217aeed0277001fddd9c378229a7702bd14ba5164e593293ffa03f009478b","sha512":"b185636898889276cdaad10502ff7c05e4bacb22ec8592a2833d6b061c64f30b5f551a5392d532cb3cc82de7214eb1088f95d06a349885491f32680bf5093ac7","ssdeep":"","tlshash":"ca70008c8000028082e0000c03022a2222000a2008e2020083aa28a33082e032288088","size":23,"data":"","first_seen":"2024-11-22T19:38:42.458021Z","last_seen":"2026-04-05T11:51:38.082249Z","times_seen":71704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/js/k=og.asy.en_US.xdaaj6YnHo4.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTtQ5KqMUe9ZZ3VbLCPKwfHKza0Jqg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11f8a7ee8285d3d4442642c511f7869","sha1":"3996bcc49b6fc673832bda294a54072d40517e10","sha256":"a206cd88703ad48fd0a40de902dfc60e43d42735787b6a0bea3d61ffa5d8852b","sha512":"b74b14b724da6700bd89ee957aaec3fba0b3d293449aac0b488cb2453681de81af9379a8483b065d112915f86ec1bddbbd07c07f60b75a372de5bf2c99131406","ssdeep":"6144:YUBDhiFdRsot8CFLfy5sHfjXUPMRN1+pj7JJvBuqS5UeBJtpXIgEm7T+m1NORNqi:YUBDhijRReCFLfy6HfjXUPMRN1+pXJJf","tlshash":"e3241a9c7262706782a6f4d6403b0046b26ab466f44d8cacb69cdde2aef4d4511f7f3c","size":219693,"data":"","first_seen":"2025-09-16T05:07:22.060452Z","last_seen":"2026-01-27T04:21:16.957832Z","times_seen":1513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAgAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=1/ed=1/dg=3/br=1/rs=ACT90oEe0AxqoGEKWXxdtyhNpHaL8Yjpzg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;Du7NI:C6zLgf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GEkGdd:e1RzQd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,xD8Kp;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:M8uRWb;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UYRIEb:WuNepf;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;iySzae:a6xXfd;jJj2G:kF2o2b;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mWzs9c:fz5ukf;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:gsJLOc,j9Yuyc,kJ6Ooc,wJMPhe;pXdRYb:JKoKVe;pj82le:ww04Df;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:hjoqoe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tH4IIe:Ymry6;tbg2ob:nMC03e;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zB3wie:WtgrP;zOsCQe:Ko78Df;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2900a7948c6e3888ad68742c468f5ba","sha1":"e28fa67c8fa961ec0dd166949f273928bae8518d","sha256":"8c051b74416523d0a94af679b167926019bef99f5110cf6204361e821b2e1449","sha512":"fe3bfbb16d31bcb31744c224051f414149f8427aa51c48b4ae5dc49494c8a2ca3bacb01c793d7ba9a3ea77ad56c9283358949550cb7799a3bca0c98106080c74","ssdeep":"24576:sjf9+Un/lPv4+V3P3zjwdwBfpCXzqYy7jb6NWg3+i7JO/x0STr7Ac46UDt5r1J1W:sjf9+Un/lPv4+VPzjwdwBfpCXzqYy7jH","tlshash":"f0150b9933a7b19392a2f5d4403f114af3bab891f44d88acf598dcd67db188540f6b38","size":958285,"data":"","first_seen":"2025-09-23T08:25:33.74976Z","last_seen":"2025-09-23T08:25:33.74976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/ck=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/ujg=1/rs=ACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA/m=sy1k0,syu3,sy1jt,sy1jy,sy1jx,b6knsb,sy1jo,sy1jn,sy1f2,syyu,syed,sycl,sycj,sy9o,sycn,JKoKVe,pXdRYb,sy237,sy9p,sy9m,sy8g,O1Gjze,TtcOte,wR5FRb,kQvlef,syeb,sye8,sye4,sye3,sybk,sye2,syce,sye1,sye0,sydz,sydw,sydq,sydo,syag,syae,syaa,sya4,sya5,sy9w,sy9v,sy9u,sydu,sydn,sydm,sydl,syd9,sydi,sycz,sycq,sycr,sydh,sybd,syd7,sydg,sycu,sycv,syde,syct,sydd,sycd,sycw,syco,syd6,sydb,syd5,syda,syd4,syd3,sycs,syd1,syd0,sycy,sycx,syd8,sycp,syci,sy9t,sy7u,zbML3c,gskBEc,sy19h,s980lf,syus,loL8vb,syvg,syvf,syve,ms4mZb,syt3,B2qlPe,syyq,NzU6V,sy12d,sy12c,zGLm3b,sy1iz,sy1iy,sy1ix,sy19s,sy19t,DhPYme,sy1kg,sy1ki,sy1jh,sy1jf,sy1kh,sy1jg,sy1kl,sy1kk,sy1ke,sy1kf,KHourd,MpJwZc,UUJqVe,sy95,sOXFj,sy94,qTnoBf,oGtAuc,NJ1rfe,sy9f,q0xTif,y05UD,PPhKqf,sy15l,sy1bq,sy1c9,sy1ca,sy1by,sy176,sy15k,sy15j,sy15i,syf5,sy1bx,sy1cc,sy15g,sy16w,sy1c8,sy165,sy1c7,sy15z,sy1bz,sy16y,sy1bm,sy1br,sy1bn,sy174,sy175,sy1c0,sy15q,sy1bv,sy1bu,sy1bs,symp,symn,syo5,sy1bt,syts,sy1bi,sy1c2,sy1bo,sy1bh,sy1bl,sy1bk,sy1bj,sy1bg,sy181,sy1bp,sy1bd,sy178,sy179,epYOx?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"607761d132076685f41dd3d504d1268b","sha1":"b77d4139fd6972704d81024e8082d8e787df423c","sha256":"0494ee70f0156879feecc45caafb00049ebb465637fb0b8221681b186edd299f","sha512":"6a817a9db63cd9d726291a8c757bc518566ccb0d0a6ce17a45fd1722a412a4576114954029a62bc7b630eb48b222461ef8cce0681b91419d7f5fc92366a91d44","ssdeep":"6144:jc53tF7YF+JLXJ06HAZfWTlwrmS/RksLxVS1g4bfSNqNrXR5NWezPDF45hJjzT/g:jc53t2F+JLXJ06HAZfGlwrmS/RksLxVy","tlshash":"4c34eb9972e3b0533366b994716b024a736f7952f14884acb4f8d8b1bdf054a06f2f78","size":239457,"data":"","first_seen":"2025-09-23T03:02:13.236129Z","last_seen":"2025-09-23T20:58:05.067414Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/bootstrap.bundle.min.js","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5334e475209f965b4862f3bedf32618","sha1":"fac45259046dd90b16d251739108002d67a00b54","sha256":"394156ee114ed3faf968419340ecfd17f69740eb7e4f0a88d59e1f6d5bf0c34e","sha512":"738c1384f3c2326bb8c6c56e7c91e8928800f57e246b9f1ccbd70461fe6dd78ef04b0d19a38ddfc1d4f2fc80b4935a0bc5771494fbd664c9c3f1b7bad6cc16ee","ssdeep":"768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKk:ua+OOkSs2Q5CXnFOpc6RvFvVGGZ5","tlshash":"0473d64a3244b47202afa167907f460fb33768daa50e811cb55da8ed2d7cd993267f3c","size":80698,"data":"","first_seen":"2023-03-07T01:07:09Z","last_seen":"2026-04-05T09:19:49.15754Z","times_seen":1999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/sandbox%20eval%20code","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T11:47:26.902119Z","times_seen":773788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7d4b54778f1da61d6761f9f14a2c2e6","sha1":"c61cc752b4316d1ca082780e25d2b7c60adbd4a1","sha256":"6e476d7469c79478a258d7557ae3b6ae650e868a03bc2eead0421b7244cd6133","sha512":"9e622852d74c012c7e0f2890725510b626d435d469d8e379f351c1005c25ecfa1f3e8f8de500a69082942b8be572fda81d037285c03533a11a8b448e0d8f8100","ssdeep":"384:B1oc6AfDef6/5qynnPNHqgCGlSRqp7ivtJiosaVCsXgnsWqDEaou3lVlzmf0qM:B1oc6AfDef6/5NnPhlSDvyOhgmIaL3lx","tlshash":"1692c5bbb720743785a3e676516f510e3d336067a94c848861acd4f03db5e9a40a3fee","size":20854,"data":"","first_seen":"2025-09-23T08:25:34.059657Z","last_seen":"2025-09-23T08:25:34.059657Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MKCGGRZS89\u0026cx=c\u0026gtm=4e59j1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b35fb197e412fac5b3687da1394140a","sha1":"3d90375612b9d2a9e22cc93c0eeb6f89594ee8c4","sha256":"ceee635a35d01324879cc14c2e420cf340244aef2be8cc7dfd619587bc808b44","sha512":"ddd25090aa756a784a5d9b0ae64e48f4967de3cd345193e1bd72359709a8201954ee89eb3c41d6f425a5e1a617aef5d59426304c83d14b76ae898083c748ef69","ssdeep":"3072:I55WWgtJ//6sqQwWixZ0nhi6GiJM5kEJIDZTY3sFPVP5zo6hQWuyeufAXyx6vFK7:BuQwWUcGiaJ2EslQLufAXyxUKsVK3JFr","tlshash":"967409cd73d674664393a478907f018ba1bb6892f44cc899f186dce42e74a9a4237f7c","size":360664,"data":"","first_seen":"2025-09-23T02:58:47.139101Z","last_seen":"2025-09-23T08:25:34.07558Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/mRxRRA","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"59ede97739e98c02ab75eadece4b605f","sha1":"513bdbd313a6d8c519d35e33221eacbf1e192eb5","sha256":"8ad6b281b60495549aa1a0ce0a97960b01ea6c3cd0172c0d152d2b41d7dbb176","sha512":"e32c1dc4c47c1ba09c8a1e76458d6a3746eada2ee92fbf7388228674b04953bf8b758bda2c7e40a66c47c91af0f0af88ba085cc49081ffe44166862843b28d35","ssdeep":"","tlshash":"b1e0f19538cc1036c3b502a962ef604f741db539880e7c27c80d484214ba9bf04cfa6c","size":409,"data":"","first_seen":"2023-03-07T01:16:12Z","last_seen":"2026-04-04T09:30:56.524Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f137051e3e27b0df1d945466e115ff5","sha1":"f8feb2a59364823e87209c9b66df19434ed2765b","sha256":"b6acf969c8bde85305c8c5ebc53814b214d41c2569507f9cd8a123056e51a03d","sha512":"ce149664f608a94a15b1e819a5267bfa5e54a15c9e147cb9da874882557160fc3b73caadd112b3d9c4dcc2933664657dbc4bb30894a4bb0293d8d00d1d4cf29e","ssdeep":"192:0w6/EjNJuaSfuyFfsvbuouJfK4BJfuyFfsvbuouJfK4Bv:0w64NJuaSpFfsvKou1BJpFfsvKou1Bv","tlshash":"55f10a7203127d1a5fe273b4657b19083da71a6bd1cce22c29c7a070e4e6c47c95d5a3","size":7728,"data":"","first_seen":"2025-09-23T08:25:34.095841Z","last_seen":"2025-09-23T08:25:34.095841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d697d1adb7de5494d9a8f90c4ebed7e","sha1":"c35a2b907de1c94e4661bcde626dba151db06e6a","sha256":"f1e9cc20d858d13b77230567959772d482e40a37568d8c008edde2684d91ddd6","sha512":"21f1e032602004517146888437dcdd128fd2d6ebb6f7fa0d15c21b011266a287a4e9e453f0523bf0746c61e6b6133456880899c9d646cae283e93e07f9a5be25","ssdeep":"","tlshash":"ca31868bbf6a28fe28a6c590387b79d636319152141cf013c05a513b332adcb94b1deb","size":1686,"data":"","first_seen":"2025-09-23T03:47:56.232951Z","last_seen":"2025-09-23T09:20:55.447603Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"94c2f603bad6c50f62780f7f056ab3c2","sha1":"44bc70ba15154cc557ef9557ae0aa1ecbcdcc87c","sha256":"395a9dbf8ee9f0304366938746009f1243f15d1747ece342f125c877bcd427fa","sha512":"9abff992ef97bcc7f20819a2cb1fa7e5a51cd78e43f8faee58d480774a71aac9e344642ec0ef6a25f8be389bdac58d8bfb3fb087265a63b3973fa8807117d7b5","ssdeep":"","tlshash":"34d022f47e32e2f5218e6eb742dfd76431bb689ba6090214b8198c543a38f090422a71","size":221,"data":"","first_seen":"2024-06-11T16:49:58Z","last_seen":"2026-04-05T11:51:38.085443Z","times_seen":70895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7000c57095cfbc819ed76860089e31d4","sha1":"09eda349b1578dadff1b951ebc5870f46caae83b","sha256":"66d03c78cda65f9c23c2f0d513435bada0d98207964d0679a206146b9aa570c9","sha512":"afce1e7a9f332a9622b4c8f4ce8b6af6c93a5e256c7c29a69c9c3d0ae85076984e34538bfe4a75ac79768814158af0ded1e9d38ebf1e9a27edf47368a7eb736b","ssdeep":"192:Qfi/5VJ70jRngY640uzLOZZ5rlxuegaa0eTr4ndyT1lEx0QeWPJSQGFpJs60KYb3:Q6xVSjRngY640uzLOtr+Faa0eT9lEx0c","tlshash":"0f2209b33200687f15e2b4ea613b128c6c71e463f499c89c718cc9f37965d921477eb9","size":10360,"data":"","first_seen":"2025-09-23T08:25:34.126108Z","last_seen":"2025-09-23T08:25:34.126108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/m/goto/main.js?1697227642","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e0a9bdedf4103f91a2a6d0798c38c76","sha1":"51f267a290e1551d90dcc1482f93b1a26baafb23","sha256":"f3619bf6fa90df37c0f0b12aa58e6c122e717fe3374112f835c3ee914cdf8bd5","sha512":"cbd8c960338b16bf533a9207817a1b996694e493ca86fceffcb944a31c5263cee142130c2eb880c3eee581339fe74f555ab0f082b4717d740bdd3f8846e9df18","ssdeep":"","tlshash":"c251bca4efbf94cd27bb10a278ae128d437e04b39849293bec1456505981d392bb4f3d","size":2533,"data":"","first_seen":"2023-03-07T01:16:12Z","last_seen":"2026-03-19T21:47:28.909236Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T11:47:26.901553Z","times_seen":772230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9f86d5c3c99d281ed5a7d1040c0719","sha1":"ea2ea25b93297297252e71e766458182b0efe531","sha256":"7118d280f3b28d78317ed2ac95b57bb182853e708fe317944af63b926add4393","sha512":"9f9eb8a1244a22c73de5488512fec2fd6150c457601a89993b49cdb45eb29b89e2346e939579ce8458e45dfe1ef0727fa78ffe09ea383b0817c8ed94d6d3cab8","ssdeep":"","tlshash":"ba41d97622077ef7df12a380d264ba66b15ea137b88c08f2c7c94d9d0f644f7245415d","size":2160,"data":"","first_seen":"2025-09-23T08:25:34.146431Z","last_seen":"2025-09-23T08:25:34.146431Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e8877668000d2f72fb0a2d450198f32","sha1":"7231613489d01339a66552d76d6501ff323c12e1","sha256":"0801e6ed24b200d774b1c01443c80fe2f751f4b01227050a43471e99e6e43469","sha512":"a2b9b80c2bfd914e8eefd26346237946244d68e08eb5a46d51af70af4366b54956834edbe6430dd038441f10f83b63aac6f75ccce36fc6c702e3822ba602e6fc","ssdeep":"","tlshash":"c5b0926a260887797deba586ed22c3a4bc48c52064096044888e962ac9a0e70282bc89","size":122,"data":"","first_seen":"2025-04-22T12:45:40.909616Z","last_seen":"2026-04-05T11:56:48.725659Z","times_seen":60324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/ck=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/ujg=1/rs=ACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA/m=sb_wiz,aa,abd,U9EYge,syvo,syvk,sybz,sybs,syvm,syvs,syvq,syvp,syfi,syfh,syfg,syvn,syv8,syv7,syv3,syv6,syuu,syxy,syvw,syvb,syv4,syv2,syv5,syvd,syvc,syv9,syux,syuw,syup,syuk,sytu,sytt,syuy,syvv,syvt,syvu,syvr,syui,syvj,async,pHXghd,syww,sywv,rtH1bd,sy103,sy104,sy109,sy106,sy107,sy108,sy102,sy101,sydx,sydv,syak,syah,syaf,syzp,SMquOb,sy7z,sy7y,syfy,syfx,syga,syg8,syfw,syfu,syft,syfs,sy8e,sy8b,sy8d,syfr,syfv,syfq,sybq,sybv,sybn,syaw,syb8,sybm,sybh,sya0,sy9y,sybg,sybf,syb2,syb5,syb4,syb3,syb1,syaq,syaz,syb6,sybi,syac,syal,sybb,syas,syat,syau,syb9,syay,syav,syc3,syam,sy9z,syc1,sya3,sya6,syai,syap,sybj,syfp,syfo,syfl,syfj,sy8h,uxMpU,syfa,sycb,syc7,syc9,syc5,syca,sybe,syc6,syc0,sy8y,sy8v,sy8u,sy8t,sy8s,sy8r,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sy8o,A1yn5d,YIZmRd,sy88,sy86,sy87,sy85,sy84,sy82,byfTOb,lsjVmc,LEikZe,sy80,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy11u,sy11s,sy11q,syx5,sydy,d5EhJe,sy1ej,fCxEDd,sy1ei,sy1eh,sy1eg,sy1ef,sy1ee,sy15o,sy15n,sy15m,sy122,syzs,sy11z,sy123,syyw,syys,T1HOxc,sy120,sy11x,sy11y,sy11v,syqy,zx30Y,sy1el,sy1ek,sy198,sy126,Wo3n8,ZgGg9b,dIoSBb,sy1js,sy1jz?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd8b4ba583900087211bee767cb29c9","sha1":"baacdf8dc886efe8f645e0fc599f4fb912d5ed90","sha256":"97c26dd6c5f54e5378edfa88adb5027e1011524e6b1883fa4b21f98a46f2ac95","sha512":"8fabe5bc868d4bded179da59bf9ceb18c228ffbdbfed5f82f19476ab4e266cda067696c18c6bc1fab06e6b5254386a8fb75ff78dd1d9a55378e4e7bea4fc6eda","ssdeep":"6144:MstVck6MHZbsicEXql2zZ2si9g7iWMLxV76WzooKy9YJzacIgqyvIDwxBXiXkj7E:M2Vck6UlsicEaS2si9guWMLxV76WzVKs","tlshash":"0574f9687293709356b2b5d4907b8147b3eea492f458d8acb5ecc8f16df448241faf38","size":339985,"data":"","first_seen":"2025-09-23T03:02:13.208253Z","last_seen":"2025-09-23T20:21:25.572781Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/mRxRRA","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2820c2ce092d6f35b0d93b5b99fa5c42","sha1":"c649126bf506ec4e34f1f55a13053110b3f30712","sha256":"692e6a12dde3335da3979d2ccbd4c0230ffdbfda10253c20a063186cccae4628","sha512":"f5076c12ec11f66bc539539a8eca58a102f46a0ecd86f674c4770427878ff143b240516867908dd2b2465cbc02f7f4a02bf11c260be82d1cf29ceae55a5bf2c8","ssdeep":"","tlshash":"58c02b8823074c7166fb17000f3ff100b4813200ac950c324c01630a6620c039704c10","size":155,"data":"","first_seen":"2023-03-07T01:16:12Z","last_seen":"2026-04-04T09:30:56.52455Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-521618-19","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5b314f5d72789e2e6f089eb0d4dedd9","sha1":"b449f916bc78285ec44cfb17c4fbccbe4e02e9a6","sha256":"f89916faccb4ceb6d2e4f2645bf2c53bbb85009386bf873a3f9c3d15366d7f1c","sha512":"5d3d5bf0404664ea566e991ef4e9fe38ce41987509911196bea940006547d36bdc110fa45d637d591560338d60d7c27d0d6e4f50d8fbe0d8b8a146718528e2da","ssdeep":"3072:8/l1TJ//6sqQZBr0nhisGiJM5kEJIDZTY3sFUNx8eufAXyx6vFE9XW1neYfbys/v:WuQZBwGiaJ2EsEufAXyxUEl8eyyu","tlshash":"7a64f8cd73d6742283a3a474503f018bb17b69d2e84cc899f186d8e42e74aa94277f7d","size":310670,"data":"","first_seen":"2025-09-23T02:58:47.133553Z","last_seen":"2025-09-23T08:25:33.724289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e1ed982f1f0c37179ebe87fc32dbee7","sha1":"252bf16d5e696d342f0b6363b998ab9464168b86","sha256":"3d359935f45f401ef95e4472c4375979ddaeb59c05b9ed8880643ad544e24624","sha512":"43fcb6da43d6a607272ab24c3f0c81548cf63e435698e69fe794f89bad62fa756a9ff6f8f076881f9200559b0bc26f7963bbf4336e8f90cd5c9e833248d341ad","ssdeep":"384:vYZ6qZQrUPo9kbLktrPAMgoagdyOBTWA8tNcwq6671ZgPztvtycLZ17VahYbNfhm:vYZ67IPoXgA8tNkl6tdLZ17VahYbNM","tlshash":"f59262295201eef5fe456d56433dbe0e30eca0ff954a6ef096d3ec4846a897ba1052cc","size":20382,"data":"","first_seen":"2025-09-23T08:25:34.195348Z","last_seen":"2025-09-23T08:25:34.195348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-521618-19","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=UA-521618-19 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\nexpires: Tue, 23 Sep 2025 08:25:01 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 23 Sep 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108682\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":310670,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"e5b314f5d72789e2e6f089eb0d4dedd9","sha1":"b449f916bc78285ec44cfb17c4fbccbe4e02e9a6","sha256":"f89916faccb4ceb6d2e4f2645bf2c53bbb85009386bf873a3f9c3d15366d7f1c","sha512":"5d3d5bf0404664ea566e991ef4e9fe38ce41987509911196bea940006547d36bdc110fa45d637d591560338d60d7c27d0d6e4f50d8fbe0d8b8a146718528e2da","ssdeep":"3072:8/l1TJ//6sqQZBr0nhisGiJM5kEJIDZTY3sFUNx8eufAXyx6vFE9XW1neYfbys/v:WuQZBwGiaJ2EsEufAXyxUEl8eyyu","tlshash":"7a64f8cd73d6742283a3a474503f018bb17b69d2e84cc899f186d8e42e74aa94277f7d","first_seen":"2025-09-23T02:58:47.133553Z","last_seen":"2025-09-23T08:25:33.724289Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":66,"dns":0,"connect":8,"send":0,"wait":24,"receive":23,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026s=webhp\u0026t=all\u0026folr=_X1nSaLqsGZOxwPAP6c7auAo_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026nhp=\u0026adh=\u0026ime=0\u0026imeh=1\u0026imeha=0\u0026imehb=0\u0026imea=0\u0026imeb=0\u0026imel=0\u0026imed=0\u0026imeeb=0\u0026imexb=0\u0026scp=0\u0026cb=47462\u0026ucb=159055\u0026lts=48934\u0026hp=\u0026p=bs.true\u0026rt=hst.200,prt.331,aft.331,xjses.538,xjsee.651,xjs.651,fcp.352,wsrt.394,cst.67,dnst.1,rqst.92,rspt.15,sslt.58,rqstt.317,unt.248,cstt.250,dit.733\u0026zx=1758615904140\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026s=webhp\u0026t=all\u0026folr=_X1nSaLqsGZOxwPAP6c7auAo_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026nhp=\u0026adh=\u0026ime=0\u0026imeh=1\u0026imeha=0\u0026imehb=0\u0026imea=0\u0026imeb=0\u0026imel=0\u0026imed=0\u0026imeeb=0\u0026imexb=0\u0026scp=0\u0026cb=47462\u0026ucb=159055\u0026lts=48934\u0026hp=\u0026p=bs.true\u0026rt=hst.200,prt.331,aft.331,xjses.538,xjsee.651,xjs.651,fcp.352,wsrt.394,cst.67,dnst.1,rqst.92,rspt.15,sslt.58,rqstt.317,unt.248,cstt.250,dit.733\u0026zx=1758615904140\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-lDW0EhVn33dQjQ2r3zgVmg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/rs=ACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q/m=sy1fr,P10Owf,sy128,gSZvdb,syz6,WlNQGd,syuh,syue,syud,DPreE,syz8,syz7,nabPbb,syz4,syz2,syki,syoa,CnSW2d,syyy,syyv,syyx,nRwWne,syz1,fXO0xe?xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/rs=ACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q/m=sy1fr,P10Owf,sy128,gSZvdb,syz6,WlNQGd,syuh,syue,syud,DPreE,syz8,syz7,nabPbb,syz4,syz2,syki,syoa,CnSW2d,syyy,syyv,syyx,nRwWne,syz1,fXO0xe?xjs=s4 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 9892\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 05:26:26 GMT\r\nexpires: Wed, 23 Sep 2026 05:26:26 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 22:36:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 10718\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28114,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (549)","md5":"f54253c1c1e8f590bb3903284c5e1142","sha1":"e3e6b0930a25cacba6a193794a2323aca82ccf07","sha256":"31ba1d012123d5fb9da69457d8bef1e167f2c0195280e2947eb3e1fae1e1127f","sha512":"8cba5be43354c3b4438128e9bcd58874838991b7459f2d46ee3e96fc8106450f1214ec4d00337c991b7f29f991e33b05b131fe16ef530734d94a24c3fb69ff69","ssdeep":"768:PSH5WZoX6Zi1bKHqOFMdJxF/rDyxxGE2UmQ2P5vdFmlbGtPr0SiqAD9qIjRVyIXB:XoXr1bK3lBSajEpHAz","tlshash":"d9c2e8b472b170235274f4e9403b024ea33eb499b549516cbd6c8de27cf088a59b7fb9","first_seen":"2025-09-23T03:02:13.18523Z","last_seen":"2025-09-23T20:58:05.078079Z","times_seen":19,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026s=promo\u0026rt=hpbas.1216\u0026zx=1758615904700\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026s=promo\u0026rt=hpbas.1216\u0026zx=1758615904700\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-LY38AonTnpZ1R7fR8bDLKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/ck=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/ujg=1/rs=ACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA/m=sb_wiz,aa,abd,U9EYge,syvo,syvk,sybz,sybs,syvm,syvs,syvq,syvp,syfi,syfh,syfg,syvn,syv8,syv7,syv3,syv6,syuu,syxy,syvw,syvb,syv4,syv2,syv5,syvd,syvc,syv9,syux,syuw,syup,syuk,sytu,sytt,syuy,syvv,syvt,syvu,syvr,syui,syvj,async,pHXghd,syww,sywv,rtH1bd,sy103,sy104,sy109,sy106,sy107,sy108,sy102,sy101,sydx,sydv,syak,syah,syaf,syzp,SMquOb,sy7z,sy7y,syfy,syfx,syga,syg8,syfw,syfu,syft,syfs,sy8e,sy8b,sy8d,syfr,syfv,syfq,sybq,sybv,sybn,syaw,syb8,sybm,sybh,sya0,sy9y,sybg,sybf,syb2,syb5,syb4,syb3,syb1,syaq,syaz,syb6,sybi,syac,syal,sybb,syas,syat,syau,syb9,syay,syav,syc3,syam,sy9z,syc1,sya3,sya6,syai,syap,sybj,syfp,syfo,syfl,syfj,sy8h,uxMpU,syfa,sycb,syc7,syc9,syc5,syca,sybe,syc6,syc0,sy8y,sy8v,sy8u,sy8t,sy8s,sy8r,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sy8o,A1yn5d,YIZmRd,sy88,sy86,sy87,sy85,sy84,sy82,byfTOb,lsjVmc,LEikZe,sy80,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy11u,sy11s,sy11q,syx5,sydy,d5EhJe,sy1ej,fCxEDd,sy1ei,sy1eh,sy1eg,sy1ef,sy1ee,sy15o,sy15n,sy15m,sy122,syzs,sy11z,sy123,syyw,syys,T1HOxc,sy120,sy11x,sy11y,sy11v,syqy,zx30Y,sy1el,sy1ek,sy198,sy126,Wo3n8,ZgGg9b,dIoSBb,sy1js,sy1jz?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/ck=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/ujg=1/rs=ACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA/m=sb_wiz,aa,abd,U9EYge,syvo,syvk,sybz,sybs,syvm,syvs,syvq,syvp,syfi,syfh,syfg,syvn,syv8,syv7,syv3,syv6,syuu,syxy,syvw,syvb,syv4,syv2,syv5,syvd,syvc,syv9,syux,syuw,syup,syuk,sytu,sytt,syuy,syvv,syvt,syvu,syvr,syui,syvj,async,pHXghd,syww,sywv,rtH1bd,sy103,sy104,sy109,sy106,sy107,sy108,sy102,sy101,sydx,sydv,syak,syah,syaf,syzp,SMquOb,sy7z,sy7y,syfy,syfx,syga,syg8,syfw,syfu,syft,syfs,sy8e,sy8b,sy8d,syfr,syfv,syfq,sybq,sybv,sybn,syaw,syb8,sybm,sybh,sya0,sy9y,sybg,sybf,syb2,syb5,syb4,syb3,syb1,syaq,syaz,syb6,sybi,syac,syal,sybb,syas,syat,syau,syb9,syay,syav,syc3,syam,sy9z,syc1,sya3,sya6,syai,syap,sybj,syfp,syfo,syfl,syfj,sy8h,uxMpU,syfa,sycb,syc7,syc9,syc5,syca,sybe,syc6,syc0,sy8y,sy8v,sy8u,sy8t,sy8s,sy8r,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sy8o,A1yn5d,YIZmRd,sy88,sy86,sy87,sy85,sy84,sy82,byfTOb,lsjVmc,LEikZe,sy80,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy11u,sy11s,sy11q,syx5,sydy,d5EhJe,sy1ej,fCxEDd,sy1ei,sy1eh,sy1eg,sy1ef,sy1ee,sy15o,sy15n,sy15m,sy122,syzs,sy11z,sy123,syyw,syys,T1HOxc,sy120,sy11x,sy11y,sy11v,syqy,zx30Y,sy1el,sy1ek,sy198,sy126,Wo3n8,ZgGg9b,dIoSBb,sy1js,sy1jz?xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 107896\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nexpires: Wed, 23 Sep 2026 08:25:04 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 21:34:10 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":339985,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3134)","md5":"abd8b4ba583900087211bee767cb29c9","sha1":"baacdf8dc886efe8f645e0fc599f4fb912d5ed90","sha256":"97c26dd6c5f54e5378edfa88adb5027e1011524e6b1883fa4b21f98a46f2ac95","sha512":"8fabe5bc868d4bded179da59bf9ceb18c228ffbdbfed5f82f19476ab4e266cda067696c18c6bc1fab06e6b5254386a8fb75ff78dd1d9a55378e4e7bea4fc6eda","ssdeep":"6144:MstVck6MHZbsicEXql2zZ2si9g7iWMLxV76WzooKy9YJzacIgqyvIDwxBXiXkj7E:M2Vck6UlsicEaS2si9guWMLxV76WzVKs","tlshash":"0574f9687293709356b2b5d4907b8147b3eea492f458d8acb5ecc8f16df448241faf38","first_seen":"2025-09-23T03:02:13.208253Z","last_seen":"2025-09-23T20:21:25.572781Z","times_seen":17,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/mRxRRA","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T08:25:01.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /mRxRRA HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658; expires=Wed, 23-Sep-2026 08:25:01 GMT; Max-Age=31536000; path=/; domain=.hm.ru\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":3096,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e020d6437e25d38a833348f22cb5458a","sha1":"8c4215688202de0e2629000978a52d3308098b8f","sha256":"fef17cfe6ab9f47ff46b4b5c22cf530c43caf7308fce1c004eea57029e0fc352","sha512":"827757290f80017be9e3fc88daf88996abb9fa5410d6f687c662d9abc0ed5deedda83be592bc314de755aa3f05e126aaa43f77c73425c84b35b03f626e456af3","ssdeep":"","tlshash":"ae51625f0d49ee6f816802c4e039e00cc47bab29b509dd66c9d846bb6dc1fd8c99e654","first_seen":"2025-09-23T07:25:21.270449Z","last_seen":"2025-09-23T08:25:33.74128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":70,"dns":1,"connect":28,"send":0,"wait":99,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/css/bootstrap.min.css","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 159515\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-26f1b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159515,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"7cc40c199d128af6b01e74a28c5900b0","sha1":"d305110fb79113a961394b433d851a3410342b8c","sha256":"2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6","sha512":"ce79937f81cda05f54ea67c1e8a96101285b46f6ede02bc2687a0d574832b2c7d3a0d43ff40d1e35d51bbec4b038852825d323146da7752bebd0ba37669b13a9","ssdeep":"1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26F:a7Za4GMq3SYiLENM6HN26F","tlshash":"9ef352a6f5a0312de467c61964d0bafe152f8245d7224bfaf827376487892c70a73e4c","first_seen":"2023-04-05T08:47:50Z","last_seen":"2026-04-05T11:45:28.356679Z","times_seen":17107,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T08:25:03.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hm.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-zLzkgZ1h9u2w892YW8biSg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; expires=Sun, 22-Mar-2026 08:25:03 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=28.SE=Lz7LkP19ofmxhuyMPInqcDGAB7BSanjgieAvJJ9LhsPFoMbUwqeph7SeopGBNm3hn4ZAfKvcXmtseeYOr1dh-BI9ufuLacPKU_7gXyfbyasUMGyyL5Zg_uaX_8QSesyKG-7bbqyaROTY7BT0CVddDWhlNRPgXAz99QmDqL1a4DN9aXsqQ6cNFCuqr8c2g0pIeVy4Not2BKcaV6LeX9o6YOYkPHM_nElud-6yRYTlZY55Le7N_QIQqehIPqMqRHYKHX2l-WZCk35XkCE; expires=Sat, 24-Oct-2026 00:43:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159055,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (31259)","md5":"ad089bf7b44d70a67000facc3ba5195a","sha1":"0be21c3f15074fe55913c002c48ea5cfaf234198","sha256":"8882a2fa1f182570e1aeed57af962b7094e4670c624d922cdf4f06243c7d5d7e","sha512":"c1f1ee7532b6b4bb8a5db5c274b18ef8597ef15e4c66eeaee079f04bdcd153e41429a962d95f1b29fee3624f81afbcfde3bff78c6e89aa367c0d515a31d5dfa6","ssdeep":"1536:WoAhC/gmVwad5KFcWaZsNwgP9ZFI55hCDxIhRUh5ZGwWRPeAxaKhH3rYZ67IgwAA:ou5KvaZOIE2wv8vINA8tNc6tdLP","tlshash":"dff35c326200bc3bbc178d61b17abf4e3c69d16be90a46b8b5e5e9709bd5cf3051225c","first_seen":"2025-09-23T08:25:33.746402Z","last_seen":"2025-09-23T08:25:33.746402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":69,"dns":1,"connect":7,"send":0,"wait":77,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAgAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=1/ed=1/dg=3/br=1/rs=ACT90oEe0AxqoGEKWXxdtyhNpHaL8Yjpzg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;Du7NI:C6zLgf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GEkGdd:e1RzQd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,xD8Kp;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:M8uRWb;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UYRIEb:WuNepf;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;iySzae:a6xXfd;jJj2G:kF2o2b;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mWzs9c:fz5ukf;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:gsJLOc,j9Yuyc,kJ6Ooc,wJMPhe;pXdRYb:JKoKVe;pj82le:ww04Df;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:hjoqoe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tH4IIe:Ymry6;tbg2ob:nMC03e;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zB3wie:WtgrP;zOsCQe:Ko78Df;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAgAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=1/ed=1/dg=3/br=1/rs=ACT90oEe0AxqoGEKWXxdtyhNpHaL8Yjpzg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;Du7NI:C6zLgf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GEkGdd:e1RzQd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,xD8Kp;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:M8uRWb;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UYRIEb:WuNepf;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;iySzae:a6xXfd;jJj2G:kF2o2b;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mWzs9c:fz5ukf;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:gsJLOc,j9Yuyc,kJ6Ooc,wJMPhe;pXdRYb:JKoKVe;pj82le:ww04Df;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:hjoqoe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tH4IIe:Ymry6;tbg2ob:nMC03e;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zB3wie:WtgrP;zOsCQe:Ko78Df;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=Lz7LkP19ofmxhuyMPInqcDGAB7BSanjgieAvJJ9LhsPFoMbUwqeph7SeopGBNm3hn4ZAfKvcXmtseeYOr1dh-BI9ufuLacPKU_7gXyfbyasUMGyyL5Zg_uaX_8QSesyKG-7bbqyaROTY7BT0CVddDWhlNRPgXAz99QmDqL1a4DN9aXsqQ6cNFCuqr8c2g0pIeVy4Not2BKcaV6LeX9o6YOYkPHM_nElud-6yRYTlZY55Le7N_QIQqehIPqMqRHYKHX2l-WZCk35XkCE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 340352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 05:26:25 GMT\r\nexpires: Wed, 23 Sep 2026 05:26:25 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 22:36:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 10718\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":958285,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (621)","md5":"d2900a7948c6e3888ad68742c468f5ba","sha1":"e28fa67c8fa961ec0dd166949f273928bae8518d","sha256":"8c051b74416523d0a94af679b167926019bef99f5110cf6204361e821b2e1449","sha512":"fe3bfbb16d31bcb31744c224051f414149f8427aa51c48b4ae5dc49494c8a2ca3bacb01c793d7ba9a3ea77ad56c9283358949550cb7799a3bca0c98106080c74","ssdeep":"24576:sjf9+Un/lPv4+V3P3zjwdwBfpCXzqYy7jb6NWg3+i7JO/x0STr7Ac46UDt5r1J1W:sjf9+Un/lPv4+VPzjwdwBfpCXzqYy7jH","tlshash":"f0150b9933a7b19392a2f5d4403f114af3bab891f44d88acf598dcd67db188540f6b38","first_seen":"2025-09-23T08:25:33.74976Z","last_seen":"2025-09-23T08:25:33.74976Z","times_seen":1,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/complete/search?q\u0026cp=0\u0026client=gws-wiz\u0026xssi=t\u0026gs_pcrt=2\u0026hl=no\u0026authuser=0\u0026psi=X1nSaLqsGZOxwPAP6c7auAo.1758615904198\u0026dpr=1\u0026nolsbt=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /complete/search?q\u0026cp=0\u0026client=gws-wiz\u0026xssi=t\u0026gs_pcrt=2\u0026hl=no\u0026authuser=0\u0026psi=X1nSaLqsGZOxwPAP6c7auAo.1758615904198\u0026dpr=1\u0026nolsbt=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nexpires: Tue, 23 Sep 2025 08:25:04 GMT\r\ncache-control: private, max-age=3600\r\ncontent-type: application/json; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ahctBsOVU5xw9bIzXxwyug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text","md5":"0ac543f85109bfb432e302267695dace","sha1":"817f94cdc43241ef8e0278503d85bb5c2128f3e6","sha256":"99098af09f91dc3bc2c269e7ce92f52350f6b87e331ba526f12c5816cb167659","sha512":"b79dd9d9b2147b9bd640f0ef565e68176dd0f1c772ee07493dd1376cb19bc000b80bcceb367c11537df2a41177dca08e7b1d519ac15303ab54a9a2e742e85aa5","ssdeep":"","tlshash":"7ea0220002302e0a8b23faae00e3a2aa030c8be000ea800c03808cbc028200308c00f0","first_seen":"2025-09-23T08:25:33.754141Z","last_seen":"2025-09-23T08:25:33.754141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/js/k=og.asy.en_US.xdaaj6YnHo4.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTtQ5KqMUe9ZZ3VbLCPKwfHKza0Jqg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /og/_/js/k=og.asy.en_US.xdaaj6YnHo4.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTtQ5KqMUe9ZZ3VbLCPKwfHKza0Jqg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"one-google-eng\"\r\nreport-to: {\"group\":\"one-google-eng\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/one-google-eng\"}]}\r\ncontent-length: 79967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 09:47:37 GMT\r\nexpires: Sat, 19 Sep 2026 09:47:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 14 Sep 2025 01:27:57 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 340646\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219693,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2190)","md5":"f11f8a7ee8285d3d4442642c511f7869","sha1":"3996bcc49b6fc673832bda294a54072d40517e10","sha256":"a206cd88703ad48fd0a40de902dfc60e43d42735787b6a0bea3d61ffa5d8852b","sha512":"b74b14b724da6700bd89ee957aaec3fba0b3d293449aac0b488cb2453681de81af9379a8483b065d112915f86ec1bddbbd07c07f60b75a372de5bf2c99131406","ssdeep":"6144:YUBDhiFdRsot8CFLfy5sHfjXUPMRN1+pj7JJvBuqS5UeBJtpXIgEm7T+m1NORNqi:YUBDhijRReCFLfy6HfjXUPMRN1+pXJJf","tlshash":"e3241a9c7262706782a6f4d6403b0046b26ab466f44d8cacb69cdde2aef4d4511f7f3c","first_seen":"2025-09-16T05:07:22.060452Z","last_seen":"2026-01-27T04:21:16.957832Z","times_seen":1513,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":72,"dns":0,"connect":8,"send":0,"wait":9,"receive":22,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/bootstrap.bundle.min.js","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 80698\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-13b3a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80698,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"a5334e475209f965b4862f3bedf32618","sha1":"fac45259046dd90b16d251739108002d67a00b54","sha256":"394156ee114ed3faf968419340ecfd17f69740eb7e4f0a88d59e1f6d5bf0c34e","sha512":"738c1384f3c2326bb8c6c56e7c91e8928800f57e246b9f1ccbd70461fe6dd78ef04b0d19a38ddfc1d4f2fc80b4935a0bc5771494fbd664c9c3f1b7bad6cc16ee","ssdeep":"768:u09+zQtNHVGCcWTb7zTuBV4KtkSsMtJQ5C/xd7vPn2JNtFiH5jsHaikKrjRM+PKk:ua+OOkSs2Q5CXnFOpc6RvFvVGGZ5","tlshash":"0473d64a3244b47202afa167907f460fb33768daa50e811cb55da8ed2d7cd993267f3c","first_seen":"2023-03-07T01:07:09Z","last_seen":"2026-04-05T09:19:49.15754Z","times_seen":1999,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/clipboard.min.js","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /js/clipboard.min.js HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10754\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-2a02\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10754,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10644)","md5":"6dc02313247d0d49169881c6ff36f00c","sha1":"7759eeb2bca89174e708a6ff6f3d8b4945e958e4","sha256":"cf65c435a3159b9e389f8fbb06730922c7949184d4ca4c860edda53144738d55","sha512":"d642c7e5a1219b6428c9e092d86adc82cbd570697bece090d81c01aed1e3408c803e87a95ce2168c2c9b3e65135b51d0964714565b7f38a6e842e586a05a2b10","ssdeep":"192:L2ToHWHQ4LygI+GlfHQ4LyQB3153pPN7rnoWtBTwuLJvqo5kAssU:LrHsc+GLfB33JhoWtBT9LJSo9U","tlshash":"ee22a66cb280b1b14ae770a9403f424bf3729469709a90d4b239d8f1adb8dce5467f3d","first_seen":"2023-04-05T13:40:28Z","last_seen":"2026-04-05T07:31:31.678444Z","times_seen":2501,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/common.js?1697227642","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /js/common.js?1697227642 HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 36\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-24\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"cadc7dab077a41ce763dac55257ed504","sha1":"e14fcdddad9b09d7e3c9b7525df6080212489eb2","sha256":"10ca9d07667cb8049fdae6e78df01fc91b9e06e0817dec01eed87e7458d95118","sha512":"24cee516934fa2f7da51e1ca586be659cb589f84ca450c864078b9356b4be136b1ad5cd339c109ab7f8f3c93e26a80c2fbda6f3c9b4bc3a2660f137d7427c285","ssdeep":"","tlshash":"c28004341cdc500000173150141f550c5551743011431040450cf0504d1c53c030f70d","first_seen":"2023-03-07T01:16:12Z","last_seen":"2026-04-04T09:30:56.51265Z","times_seen":223,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/m/goto/main.js?1697227642","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /js/m/goto/main.js?1697227642 HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2533\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-9e5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3e0a9bdedf4103f91a2a6d0798c38c76","sha1":"51f267a290e1551d90dcc1482f93b1a26baafb23","sha256":"f3619bf6fa90df37c0f0b12aa58e6c122e717fe3374112f835c3ee914cdf8bd5","sha512":"cbd8c960338b16bf533a9207817a1b996694e493ca86fceffcb944a31c5263cee142130c2eb880c3eee581339fe74f555ab0f082b4717d740bdd3f8846e9df18","ssdeep":"","tlshash":"c251bca4efbf94cd27bb10a278ae128d437e04b39849293bec1456505981d392bb4f3d","first_seen":"2023-03-07T01:16:12Z","last_seen":"2026-03-19T21:47:28.909236Z","times_seen":156,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/tz.js?1698406877","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /js/tz.js?1698406877 HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 267\r\nlast-modified: Fri, 27 Oct 2023 11:41:17 GMT\r\netag: \"653ba1dd-10b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"84347a3dd3e119114d74c1cc70bcf26c","sha1":"c13b0821631b49d28e71762acf4cf027dcd02d50","sha256":"d56fe15aba1228c507d96ba072971b9511de98f625d30af15bb3f159eb0f2e20","sha512":"cb127366c502f49b6164df2bc68a5795bad9db3f6f591769388832b55b60e8dc31f0ab7ab45a6d4d358023c1e59851e66ad2c7ea76443434f6c875b25a7c874f","ssdeep":"","tlshash":"8bd075c0a0fc0c381dae42142c3ef289cb42bc11de0320f1800c0002c8c07102d2e031","first_seen":"2023-10-28T16:23:11Z","last_seen":"2026-04-04T09:30:56.509508Z","times_seen":211,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/ck=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/ujg=1/rs=ACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA/m=sy1k0,syu3,sy1jt,sy1jy,sy1jx,b6knsb,sy1jo,sy1jn,sy1f2,syyu,syed,sycl,sycj,sy9o,sycn,JKoKVe,pXdRYb,sy237,sy9p,sy9m,sy8g,O1Gjze,TtcOte,wR5FRb,kQvlef,syeb,sye8,sye4,sye3,sybk,sye2,syce,sye1,sye0,sydz,sydw,sydq,sydo,syag,syae,syaa,sya4,sya5,sy9w,sy9v,sy9u,sydu,sydn,sydm,sydl,syd9,sydi,sycz,sycq,sycr,sydh,sybd,syd7,sydg,sycu,sycv,syde,syct,sydd,sycd,sycw,syco,syd6,sydb,syd5,syda,syd4,syd3,sycs,syd1,syd0,sycy,sycx,syd8,sycp,syci,sy9t,sy7u,zbML3c,gskBEc,sy19h,s980lf,syus,loL8vb,syvg,syvf,syve,ms4mZb,syt3,B2qlPe,syyq,NzU6V,sy12d,sy12c,zGLm3b,sy1iz,sy1iy,sy1ix,sy19s,sy19t,DhPYme,sy1kg,sy1ki,sy1jh,sy1jf,sy1kh,sy1jg,sy1kl,sy1kk,sy1ke,sy1kf,KHourd,MpJwZc,UUJqVe,sy95,sOXFj,sy94,qTnoBf,oGtAuc,NJ1rfe,sy9f,q0xTif,y05UD,PPhKqf,sy15l,sy1bq,sy1c9,sy1ca,sy1by,sy176,sy15k,sy15j,sy15i,syf5,sy1bx,sy1cc,sy15g,sy16w,sy1c8,sy165,sy1c7,sy15z,sy1bz,sy16y,sy1bm,sy1br,sy1bn,sy174,sy175,sy1c0,sy15q,sy1bv,sy1bu,sy1bs,symp,symn,syo5,sy1bt,syts,sy1bi,sy1c2,sy1bo,sy1bh,sy1bl,sy1bk,sy1bj,sy1bg,sy181,sy1bp,sy1bd,sy178,sy179,epYOx?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/ck=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/ujg=1/rs=ACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA/m=sy1k0,syu3,sy1jt,sy1jy,sy1jx,b6knsb,sy1jo,sy1jn,sy1f2,syyu,syed,sycl,sycj,sy9o,sycn,JKoKVe,pXdRYb,sy237,sy9p,sy9m,sy8g,O1Gjze,TtcOte,wR5FRb,kQvlef,syeb,sye8,sye4,sye3,sybk,sye2,syce,sye1,sye0,sydz,sydw,sydq,sydo,syag,syae,syaa,sya4,sya5,sy9w,sy9v,sy9u,sydu,sydn,sydm,sydl,syd9,sydi,sycz,sycq,sycr,sydh,sybd,syd7,sydg,sycu,sycv,syde,syct,sydd,sycd,sycw,syco,syd6,sydb,syd5,syda,syd4,syd3,sycs,syd1,syd0,sycy,sycx,syd8,sycp,syci,sy9t,sy7u,zbML3c,gskBEc,sy19h,s980lf,syus,loL8vb,syvg,syvf,syve,ms4mZb,syt3,B2qlPe,syyq,NzU6V,sy12d,sy12c,zGLm3b,sy1iz,sy1iy,sy1ix,sy19s,sy19t,DhPYme,sy1kg,sy1ki,sy1jh,sy1jf,sy1kh,sy1jg,sy1kl,sy1kk,sy1ke,sy1kf,KHourd,MpJwZc,UUJqVe,sy95,sOXFj,sy94,qTnoBf,oGtAuc,NJ1rfe,sy9f,q0xTif,y05UD,PPhKqf,sy15l,sy1bq,sy1c9,sy1ca,sy1by,sy176,sy15k,sy15j,sy15i,syf5,sy1bx,sy1cc,sy15g,sy16w,sy1c8,sy165,sy1c7,sy15z,sy1bz,sy16y,sy1bm,sy1br,sy1bn,sy174,sy175,sy1c0,sy15q,sy1bv,sy1bu,sy1bs,symp,symn,syo5,sy1bt,syts,sy1bi,sy1c2,sy1bo,sy1bh,sy1bl,sy1bk,sy1bj,sy1bg,sy181,sy1bp,sy1bd,sy178,sy179,epYOx?xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 68166\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nexpires: Wed, 23 Sep 2026 08:25:04 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 21:34:10 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239457,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (8270)","md5":"607761d132076685f41dd3d504d1268b","sha1":"b77d4139fd6972704d81024e8082d8e787df423c","sha256":"0494ee70f0156879feecc45caafb00049ebb465637fb0b8221681b186edd299f","sha512":"6a817a9db63cd9d726291a8c757bc518566ccb0d0a6ce17a45fd1722a412a4576114954029a62bc7b630eb48b222461ef8cce0681b91419d7f5fc92366a91d44","ssdeep":"6144:jc53tF7YF+JLXJ06HAZfWTlwrmS/RksLxVS1g4bfSNqNrXR5NWezPDF45hJjzT/g:jc53t2F+JLXJ06HAZfGlwrmS/RksLxVy","tlshash":"4c34eb9972e3b0533366b994716b024a736f7952f14884acb4f8d8b1bdf054a06f2f78","first_seen":"2025-09-23T03:02:13.236129Z","last_seen":"2025-09-23T20:58:05.067414Z","times_seen":19,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/md=2/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAgAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/rs=ACT90oEe0AxqoGEKWXxdtyhNpHaL8Yjpzg","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/js/md=2/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAgAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/rs=ACT90oEe0AxqoGEKWXxdtyhNpHaL8Yjpzg HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 1243\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 05:26:25 GMT\r\nexpires: Wed, 23 Sep 2026 05:26:25 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 22:36:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 10719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11257,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JSON text data","md5":"324f825ab49021570c9de734467373c9","sha1":"449d8d58d59ba275cb698baf4921bd042e7d5c5e","sha256":"bdfdc25f800a3f29aedeac704e0c6cc365b8b50f4482c758f7ec8e42569c8e8d","sha512":"e9e78c8ff453b59f4685c9b19c5cfc2dd1ddc3e68fd135c79841059272e2ea3bdb2bfc6c7b63d72ea5eb4391eeb92ac8d71061f87ee0a0c17776f46fa6595ced","ssdeep":"48:Yeg3oZfSHbDEEx4LDJ1QkVqfqATbGItPGkylqJH7zn7yn6zSbx4YiAi:I1PkM","tlshash":"ea321bdc93c2b864dbc9e1704a44fddc326239ba70f388731b6805823f02f79a568c4a","first_seen":"2025-09-22T20:39:44.91901Z","last_seen":"2025-09-24T06:36:36.502154Z","times_seen":32,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/async/hpba?vet=10ahUKEwj61-Dhuu6PAxWTGBAIHWmnFqcQj-0KCBQ..i\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026opi=89978449\u0026yv=3\u0026sp_imghp=false\u0026sp_hpte=1\u0026sp_hrh=https://hm.ru/\u0026sp_hpep=1\u0026stick=\u0026cs=0\u0026async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.wCb7iu3FU1E.2019.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.hS6W4sAAzDk.L.F4.O%2Fam%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.wCb7iu3FU1E.2019.O%2Fck%3Dxjs.hd.hS6W4sAAzDk.L.F4.O%2Fam%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA,_fmt:prog,_id:_X1nSaLqsGZOxwPAP6c7auAo_8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /async/hpba?vet=10ahUKEwj61-Dhuu6PAxWTGBAIHWmnFqcQj-0KCBQ..i\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026opi=89978449\u0026yv=3\u0026sp_imghp=false\u0026sp_hpte=1\u0026sp_hrh=https://hm.ru/\u0026sp_hpep=1\u0026stick=\u0026cs=0\u0026async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.wCb7iu3FU1E.2019.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.hS6W4sAAzDk.L.F4.O%2Fam%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.wCb7iu3FU1E.2019.O%2Fck%3Dxjs.hd.hS6W4sAAzDk.L.F4.O%2Fam%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA,_fmt:prog,_id:_X1nSaLqsGZOxwPAP6c7auAo_8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nversion: 808444090\r\nx-content-type-options: nosniff\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/none\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\ncontent-encoding: br\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":102,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text","md5":"473002e31c12d46cfa4aed787b7d2774","sha1":"2237cbebfbe15bf2880397c6f2bab891422692e5","sha256":"f528b7d262031655e03f211da07822447e6168ac99330f7980aef59a9288d40b","sha512":"b3f54b17bc0ad89e42e640faeb629bf09aba60af9176c6ddbb061ea337d41e478cc29558c92a2958d1e6977c4831129a631f059ced96b42d11f16f5897b4826c","ssdeep":"","tlshash":"ddb0121003814c4c14060040a39cfead54be910bb475e95657f0365b31ec5417db9034","first_seen":"2025-09-23T08:25:33.850918Z","last_seen":"2025-09-23T08:25:33.850918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogads-pa.clients6.google.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData","fqdn":"ogads-pa.clients6.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:25 GMT","end":"Mon, 01 Dec 2025 08:36:24 GMT"},"fingerprint":{"sha1":"B8:A9:33:F2:15:FF:6B:28:57:B2:B3:DA:35:00:DD:DA:64:71:24:66","sha256":"B7:79:65:04:14:4F:87:49:D9:4E:7C:59:85:90:99:25:C2:A2:87:E3:57:C6:4F:56:67:69:26:6F:08:6E:D6:41"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/1.1\r\nHost: ogads-pa.clients6.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.google.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\naccess-control-max-age: 3600\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=8\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":70,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/client_204?atyp=i\u0026biw=1280\u0026bih=1024\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /client_204?atyp=i\u0026biw=1280\u0026bih=1024\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-wIKkYrAmc-gGgljmZ2anrQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/ss/k=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/ss/k=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=Lz7LkP19ofmxhuyMPInqcDGAB7BSanjgieAvJJ9LhsPFoMbUwqeph7SeopGBNm3hn4ZAfKvcXmtseeYOr1dh-BI9ufuLacPKU_7gXyfbyasUMGyyL5Zg_uaX_8QSesyKG-7bbqyaROTY7BT0CVddDWhlNRPgXAz99QmDqL1a4DN9aXsqQ6cNFCuqr8c2g0pIeVy4Not2BKcaV6LeX9o6YOYkPHM_nElud-6yRYTlZY55Le7N_QIQqehIPqMqRHYKHX2l-WZCk35XkCE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 1105\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\nexpires: Wed, 23 Sep 2026 08:25:03 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 21:34:10 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2321,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2321), with no line terminators","md5":"11cce0bde50dc441c31d6367045586c8","sha1":"071c07631c17590cbcdbaa92455fb9732a93d435","sha256":"24e527b614f57b686e52d69687723613aa876fb709d775913f163bfd3ad226e0","sha512":"4d79d89d9844a0b8540fe99e835223cbbe00435ec10d86a514c5e823dfba39bc64c6a2b7ebbeb213213cd5bf64f2b93cb63ac3e7bef3a0af9be467a9de72bfcc","ssdeep":"","tlshash":"c74175208aa90099758b4663dbe07d4890f9de43e63b526d652341ddf3c929323dbb2f","first_seen":"2025-09-11T19:38:23.592496Z","last_seen":"2025-10-31T01:44:24.165701Z","times_seen":12696,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/tia/tia.png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /tia/tia.png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=Lz7LkP19ofmxhuyMPInqcDGAB7BSanjgieAvJJ9LhsPFoMbUwqeph7SeopGBNm3hn4ZAfKvcXmtseeYOr1dh-BI9ufuLacPKU_7gXyfbyasUMGyyL5Zg_uaX_8QSesyKG-7bbqyaROTY7BT0CVddDWhlNRPgXAz99QmDqL1a4DN9aXsqQ6cNFCuqr8c2g0pIeVy4Not2BKcaV6LeX9o6YOYkPHM_nElud-6yRYTlZY55Le7N_QIQqehIPqMqRHYKHX2l-WZCk35XkCE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 258\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Sep 2025 08:20:11 GMT\r\nexpires: Fri, 18 Sep 2026 08:20:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Sep 2019 01:00:00 GMT\r\ncontent-type: image/png\r\nage: 432292\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 23, 8-bit/color RGB, non-interlaced","md5":"201e50d8dd7a30c0a918213686ca43b7","sha1":"6678592120e899f0d2245c8afeaf9d4a3043c41b","sha256":"c532312eea8020a0370685b222a02b11becd58cd394b509029dff5956127dd81","sha512":"50cc19dd554d51fe79eef2c8cd45941504ea2edddaf06d425ba3a1e41dc974d866b8dad9d91609efa39afb1f083f2f611d324e57f54ce84a984f6b5bdde0f383","ssdeep":"","tlshash":"09d095dd7dfd9c94fe6143d7c0435d94ad79547d1c7a5643417cc99d2c26807800314b","first_seen":"2023-04-07T11:58:26Z","last_seen":"2026-04-05T11:01:11.437765Z","times_seen":111195,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=Lz7LkP19ofmxhuyMPInqcDGAB7BSanjgieAvJJ9LhsPFoMbUwqeph7SeopGBNm3hn4ZAfKvcXmtseeYOr1dh-BI9ufuLacPKU_7gXyfbyasUMGyyL5Zg_uaX_8QSesyKG-7bbqyaROTY7BT0CVddDWhlNRPgXAz99QmDqL1a4DN9aXsqQ6cNFCuqr8c2g0pIeVy4Not2BKcaV6LeX9o6YOYkPHM_nElud-6yRYTlZY55Le7N_QIQqehIPqMqRHYKHX2l-WZCk35XkCE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 660\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\nexpires: Tue, 23 Sep 2025 08:25:03 GMT\r\ncache-control: private, max-age=31536000\r\nlast-modified: Wed, 06 Aug 2025 15:00:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":660,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3dff0d9f30ec0bcf4dec9524505916b","sha1":"4b378403acbebc3747e08c69b5fd7770a850c9eb","sha256":"73d788f86be22112bb53762545989c0f1bbdb7343161130952c9ba3834ff81e3","sha512":"677ea304d00d176acf61ff68bf23bd5f77ad2928d7de9f4b842292bc9d3fb7029fe9f578b62f142dce689230f392e828098eed3484fe2dbee6e1a7aa5378e2c6","ssdeep":"","tlshash":"030183c943aa601828f33e062a3d85143e9e25024301f56c8694c8f9eb76c11220eb20","first_seen":"2023-04-07T11:58:26Z","last_seen":"2026-04-05T11:01:11.43295Z","times_seen":111182,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T08:25:03.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hm.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://www.google.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-dawSzbMGmGB3aoXCejx6FA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\nexpires: Thu, 23 Oct 2025 08:25:03 GMT\r\ncache-control: public, max-age=2592000\r\nserver: gws\r\ncontent-length: 220\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":159055,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":64,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v29/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/googlesans/v29/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39516\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 15:35:07 GMT\r\nexpires: Sat, 19 Sep 2026 15:35:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 23 Feb 2021 01:47:39 GMT\r\ncontent-type: font/woff2\r\nage: 319796\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39516, version 1.0","md5":"9436affc97843765a966b3568fa7e5ec","sha1":"7bfda74bb30589c75d718fbc997f18c6d5cc4a0b","sha256":"7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916","sha512":"473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456","ssdeep":"768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB","tlshash":"1703f112148f7fa1c244f224a4efe416acc3f565aba15e6980b8b7c7010e3c657a46fa","first_seen":"2023-04-17T12:01:39Z","last_seen":"2026-04-05T11:51:38.06952Z","times_seen":62974,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":115,"dns":3,"connect":20,"send":0,"wait":22,"receive":24,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026s=promo\u0026rt=hpbas.1216,hpbarr.2\u0026zx=1758615904701\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026s=promo\u0026rt=hpbas.1216,hpbarr.2\u0026zx=1758615904701\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-uY5q2mSS-139subsrDspfA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/log?format=json\u0026hasfast=true","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"POST /log?format=json\u0026hasfast=true HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nContent-Length: 1351\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=FloBwtpVTGHCOCBDoxzBW0jNSZ_iAqi0PDLOhkAXDqhMgstbx8X81vcMD7YJAECiR3K0JUDjKpHmMCwANpIQg2lNW21txtNOtzYLJUaWSQ-nWRcbaxXcumESXKwxmkz5GzEq3WyHj05vJE5viNc9SD_rFwAHr2-uNt2w1ZfXMTUYwkryClHdmvLlvZ99qwffZi6hQbMMz51mta0mi2LQZop47wLoNqzRLc2hNQfE0MXUloN4hxdRI7ojyJTlkmhjsc7RUUktDMBvxwepaJLCq8AmWQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.google.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-04-05T11:48:11.014574Z","times_seen":480236,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":63,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/async/hpba?yv=3\u0026cs=0\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026async=_basejs:/xjs/_/js/k%3Dxjs.hd.no.wCb7iu3FU1E.2019.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/dg%3D0/br%3D1/rs%3DACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q,_basecss:/xjs/_/ss/k%3Dxjs.hd.hS6W4sAAzDk.L.F4.O/am%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/br%3D1/rs%3DACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ,_basecomb:/xjs/_/js/k%3Dxjs.hd.no.wCb7iu3FU1E.2019.O/ck%3Dxjs.hd.hS6W4sAAzDk.L.F4.O/am%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA,_fmt:prog,_id:_X1nSaLqsGZOxwPAP6c7auAo_7\u0026sp_imghp=false\u0026sp_hpep=2\u0026sp_hpte=0\u0026vet=10ahUKEwj61-Dhuu6PAxWTGBAIHWmnFqcQj-0KCBM..i","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /async/hpba?yv=3\u0026cs=0\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026async=_basejs:/xjs/_/js/k%3Dxjs.hd.no.wCb7iu3FU1E.2019.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/dg%3D0/br%3D1/rs%3DACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q,_basecss:/xjs/_/ss/k%3Dxjs.hd.hS6W4sAAzDk.L.F4.O/am%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/br%3D1/rs%3DACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ,_basecomb:/xjs/_/js/k%3Dxjs.hd.no.wCb7iu3FU1E.2019.O/ck%3Dxjs.hd.hS6W4sAAzDk.L.F4.O/am%3DQAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAEADBAwQACAAAAwAEBQAoAAAAAAAgAAABACAgAAAgAAAAAAAAAQABBCABBBIDgogCAAIQIAAAGAAAACQCAAgECACAJ0AAAACTAGMAfAyswSIAhAQLDBAAAAGTABQBAAgAAAAQAAAAAQAIEIAAAAAAQAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAEAEAAgIBAABAAAIBYEACMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAJwAgBEAkAC4RJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oEJ-jmOHEYyhJvvjZxbXX_iTDNvPA,_fmt:prog,_id:_X1nSaLqsGZOxwPAP6c7auAo_7\u0026sp_imghp=false\u0026sp_hpep=2\u0026sp_hpte=0\u0026vet=10ahUKEwj61-Dhuu6PAxWTGBAIHWmnFqcQj-0KCBM..i HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=Lz7LkP19ofmxhuyMPInqcDGAB7BSanjgieAvJJ9LhsPFoMbUwqeph7SeopGBNm3hn4ZAfKvcXmtseeYOr1dh-BI9ufuLacPKU_7gXyfbyasUMGyyL5Zg_uaX_8QSesyKG-7bbqyaROTY7BT0CVddDWhlNRPgXAz99QmDqL1a4DN9aXsqQ6cNFCuqr8c2g0pIeVy4Not2BKcaV6LeX9o6YOYkPHM_nElud-6yRYTlZY55Le7N_QIQqehIPqMqRHYKHX2l-WZCk35XkCE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nversion: 808444090\r\nx-content-type-options: nosniff\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/none\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 23 Sep 2025 08:25:03 GMT\r\ncache-control: private\r\nset-cookie: __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw; expires=Sat, 24-Oct-2026 00:43:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":102,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text","md5":"099ab6f5823c8bcc05f7fb9d56006a36","sha1":"5a755d673327787768456b988b03c31c0609789f","sha256":"92beef80691b3a2e0e7637cebdc7ce9569a4fe2fbfefb56b362a148e4a651f09","sha512":"c70959a55296618f5c39763ccdc61a09a0eaf8f521469cb396561bb0b757e888828d5a9336c3e2af50abda776112146a93c96d21e0e6648da4f4f301f98fc359","ssdeep":"","tlshash":"56b0129411d06c48184a40c0579cbe5de86e510f6031fd679be0358b33ec50138f9030","first_seen":"2025-09-23T08:25:33.946301Z","last_seen":"2025-09-23T08:25:33.946301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/ss/k=og.asy.5HiP6Mn51cc.L.F4.O/m=ll_tdm,adcgm3,ll_fw,abld/excm=/d=1/ed=1/ct=zgms/rs=AA2YrTsnntOBL5AZqM3-TQHzXTU4aOn9yA","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /og/_/ss/k=og.asy.5HiP6Mn51cc.L.F4.O/m=ll_tdm,adcgm3,ll_fw,abld/excm=/d=1/ed=1/ct=zgms/rs=AA2YrTsnntOBL5AZqM3-TQHzXTU4aOn9yA HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"one-google-eng\"\r\nreport-to: {\"group\":\"one-google-eng\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/one-google-eng\"}]}\r\ncontent-length: 1538\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 05:41:18 GMT\r\nexpires: Sat, 19 Sep 2026 05:41:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 01:29:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 355425\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5554,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5554), with no line terminators","md5":"307a4524b767eff009c232849b7d031b","sha1":"5059eb5bbe13b26ac3ccc7f3990723767d3f11a0","sha256":"fcda2936f4e1e44a426245fc628d6cf070ed0e18d0c669bc8f273f380e6ce383","sha512":"f7eb7abaee1100707375215153db180e21008ad91b726398fad3f54e899713644d100eb50704848e77c974df2241342814dd38e00caf8b1ccb9d2e2a49bb0ce9","ssdeep":"96:75SR/E7Bb8llMU2Wl20mpeqCfco7shdiIY7q0gvOGAA:t8/E7Bb6B2WlKpgRR7q0gvMA","tlshash":"70b123f0d15830bfed27c06d7754f6cd92224656e8ae0f68fc6971349b881f62e22726","first_seen":"2025-09-02T07:59:26.199463Z","last_seen":"2025-09-25T05:50:14.854589Z","times_seen":3295,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026dt19=2\u0026prm23=0\u0026zx=1758615904715\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"POST /gen_204?atyp=i\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026dt19=2\u0026prm23=0\u0026zx=1758615904715\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-q5Fh3hkEvfxS_JRdnNd2-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"christianworldtshirts.net/rexevnnvfoyr.php","fqdn":"christianworldtshirts.net","domain":"christianworldtshirts.net","tld":"net"},"ip":{"addr":"151.244.237.20","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T08:25:01.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christianworldtshirts.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 00:22:46 GMT","end":"Sun, 21 Dec 2025 00:22:45 GMT"},"fingerprint":{"sha1":"15:0B:3B:6F:37:24:AA:0B:E8:7C:AE:4F:05:2D:78:87:06:93:F3:FF","sha256":"C3:87:8E:84:4E:B2:D3:43:96:D9:3F:4A:BE:AD:DE:2D:D4:93:88:7E:A5:BF:D0:5F:2C:78:B3:94:8F:DB:11:F0"}}},"request":{"raw":"GET /rexevnnvfoyr.php HTTP/1.1\r\nHost: christianworldtshirts.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 23 Sep 2025 08:25:01 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLocation: https://hm.ru/mRxRRA\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3096,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":144,"dns":53,"connect":39,"send":0,"wait":39,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/css/fontawesome.all.min.css","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /css/fontawesome.all.min.css HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 83333\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-14585\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65394)","md5":"358599a14d84b8f68a4d5705f9a2bb3b","sha1":"c1f8509e7cab8b77560af1f6f43d7a72bb3c24f7","sha256":"8aef1a2a68308674aef9d36580ed2a75564f7f13b17b255f24eac6262a526e96","sha512":"d41272d18d0ca484edc12cb5acea06c6b7cb69a549f25d42c86f6281a5f180bd9d68e3da8fe044553538bbb8579e90009f51e20b627244ab140cba4b9eedcfea","ssdeep":"768:4gj31hcGp90uvq4aNPQws9f1CoHm3ZDVKbC/BMFiWJ6+CzPT0Kd+qYMW4:4gvc+Q4aNo7HHQZD0bMSPCDTdV7","tlshash":"e583f9b8e54d01d9a732c04fbf42b3bc61baf73ce5911d95f00e591c2ad26a81189fb9","first_seen":"2023-04-10T19:37:42Z","last_seen":"2026-04-04T09:30:56.511282Z","times_seen":209,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/css/m/goto/main.css?1697227642","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /css/m/goto/main.css?1697227642 HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 1276\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-4fc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1276,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"396355267af70f148083ad2941962a8d","sha1":"33ff3f1f6c828cb6649db63a00cd185309b1ee59","sha256":"1886b8da4ba47f7ac5b40aeb8cf4f8dbe423e35661ab6d7e65963b2025b799f7","sha512":"3e337885133dbd3fc5875dec970cf130bcc7bc4948ed4a295b6aeec682c64de51c906de47951fe9f34d1b423192d4b6e86ebafb28d661a5a4bcd5bb479c5599d","ssdeep":"","tlshash":"02218eba271058481263d9613ee4d681e68e92f19d8e0c239c542d9cc3c453d2ef37ce","first_seen":"2023-04-10T19:37:42Z","last_seen":"2026-03-19T21:47:28.866963Z","times_seen":150,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/js/jquery-3.4.1.min.js","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 88145\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-15851\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-05T11:47:12.601716Z","times_seen":115217,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mein.eister.de-firmenadresse.com/start.php","fqdn":"mein.eister.de-firmenadresse.com","domain":"de-firmenadresse.com","tld":"com"},"ip":{"addr":"185.238.2.37","port":443,"asn":200313,"as":"IT WEB LTD","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T08:25:03.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mein.eister.de-firmenadresse.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 00:45:26 GMT","end":"Sun, 21 Dec 2025 00:45:25 GMT"},"fingerprint":{"sha1":"3F:32:75:B1:D3:09:22:CA:6F:73:70:54:62:F4:4F:50:02:6D:4E:FE","sha256":"81:E8:44:B5:AB:2A:83:86:8A:07:FE:5B:57:5C:17:4B:27:F9:D6:B0:43:55:D2:28:C5:94:BA:C4:53:96:E2:BF"}}},"request":{"raw":"GET /start.php HTTP/1.1\r\nHost: mein.eister.de-firmenadresse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Tue, 23 Sep 2025 08:25:03 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nCache-Control: no-store\r\nLocation: https://google.com\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":159055,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":92,"dns":51,"connect":15,"send":0,"wait":55,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"mein.eister.de-firmenadresse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/client_204?cs=1\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /client_204?cs=1\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Lv_XRDB6N8Fd20lNsJwN-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: __Secure-ENID=28.SE=FloBwtpVTGHCOCBDoxzBW0jNSZ_iAqi0PDLOhkAXDqhMgstbx8X81vcMD7YJAECiR3K0JUDjKpHmMCwANpIQg2lNW21txtNOtzYLJUaWSQ-nWRcbaxXcumESXKwxmkz5GzEq3WyHj05vJE5viNc9SD_rFwAHr2-uNt2w1ZfXMTUYwkryClHdmvLlvZ99qwffZi6hQbMMz51mta0mi2LQZop47wLoNqzRLc2hNQfE0MXUloN4hxdRI7ojyJTlkmhjsc7RUUktDMBvxwepaJLCq8AmWQ; expires=Sat, 24-Oct-2026 00:43:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026zx=1758615904742\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026zx=1758615904742\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-6WbHB3cz69k4qLST_0oaWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.withgoogle.com/csp/gws/other-hp","fqdn":"csp.withgoogle.com","domain":"csp.withgoogle.com","tld":"withgoogle.com"},"ip":{"addr":"216.58.207.209","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.appspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:35 GMT","end":"Mon, 01 Dec 2025 08:34:34 GMT"},"fingerprint":{"sha1":"40:1B:7D:82:2C:3E:AA:FE:0F:D2:73:E4:33:DA:F6:F8:D7:D5:CC:2D","sha256":"9E:BF:B0:F4:7D:0D:1E:67:50:15:21:99:FF:39:79:BA:5B:6B:71:A1:3A:38:A2:34:BC:66:20:DA:82:94:A6:C0"}}},"request":{"raw":"POST /csp/gws/other-hp HTTP/1.1\r\nHost: csp.withgoogle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 527\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ncontent-type: text/html; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\ncontent-security-policy: script-src 'nonce-iLrGxZXT7djOZXBI6BiGvA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /csp/_/CspCollectorHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /csp/_/CspCollectorHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /csp/_/CspCollectorHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\nreporting-endpoints: default=\"/csp/_/CspCollectorHttp/web-reports?context=eJzj4tDikmLw0JBiEOLhuL_p5DE2gQu7O5YzK-kl5RfGF6cmlxZlllTqJhcX6Cbn5-SkJpfkF-lmlJQUxBsZGJkaWBoZ6hlYxBcYAAA4tBdK\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":157,"dns":1,"connect":21,"send":0,"wait":36,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogads-pa.clients6.google.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData","fqdn":"ogads-pa.clients6.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:25 GMT","end":"Mon, 01 Dec 2025 08:36:24 GMT"},"fingerprint":{"sha1":"B8:A9:33:F2:15:FF:6B:28:57:B2:B3:DA:35:00:DD:DA:64:71:24:66","sha256":"B7:79:65:04:14:4F:87:49:D9:4E:7C:59:85:90:99:25:C2:A2:87:E3:57:C6:4F:56:67:69:26:6F:08:6E:D6:41"}}},"request":{"raw":"POST /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/1.1\r\nHost: ogads-pa.clients6.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nX-Goog-Api-Key: AIzaSyCbsbvGCe7C9mCtdaTycZB2eUFuzsYKG_E\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 68\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nstrict-transport-security: max-age=10886400; includeSubdomains\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nserver: ESF\r\ncontent-length: 30\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.google.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=25\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"cc21f616ac48633008e6768c2cd65f2c","sha1":"2dc662e723a9ccfe2b40469396d10074472064ae","sha256":"2b4b20e1fa834bf64509e94dd18eca0865abc217fcb62e769d6b6002084236a7","sha512":"4ab5a1da0f7c483d05c086e7e6fe0516bf872627e5865e913a9cc78019b604f3c3e14847ebfe616af56d2efee69393674341786277944c56af8d88e4b3f33652","ssdeep":"","tlshash":"3190000000000cf0cc0033c000000003300c00330000003000cc0ccc000c000000000c","first_seen":"2024-06-18T16:50:07Z","last_seen":"2026-04-05T11:51:38.070236Z","times_seen":206676,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.ru/css/common.css","fqdn":"hm.ru","domain":"hm.ru","tld":"ru"},"ip":{"addr":"138.68.75.10","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hm.ru/mRxRRA","date":"2025-09-23T08:25:01.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hm.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Sep 2025 16:07:36 GMT","end":"Sun, 21 Dec 2025 16:07:35 GMT"},"fingerprint":{"sha1":"08:26:69:A0:3B:9C:DD:77:3F:B4:2B:7F:15:E5:7F:B1:B7:68:0B:23","sha256":"EA:81:DC:00:47:F2:42:F1:EF:22:1B:B2:B9:5D:AD:F3:D2:E6:67:91:B1:6B:3C:1E:0A:CC:E0:37:0C:A7:7E:BA"}}},"request":{"raw":"GET /css/common.css HTTP/1.1\r\nHost: hm.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hm.ru/mRxRRA\r\nCookie: PHPSESSID=43ed2b54ae0ede23ccf8c3b277a0a658\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Tue, 23 Sep 2025 08:25:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 4280\r\nlast-modified: Fri, 13 Oct 2023 20:07:22 GMT\r\netag: \"6529a37a-10b8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4280,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b5716cfd982f026c2e91f00908102723","sha1":"2f4c734e896654f2a4bccf345064a77e1fb00f2c","sha256":"f9988bf0b2d14d0b2358ec1ad3d7ac61ca59d0577e0ceebd0d5b518f0677f1a8","sha512":"5c5589e70cdd0b4ce5e17a02f2ec263c9950ef5ec34a76e51632e48f71719e000a56cff7650c2bd04628f571fb842b4d2795006a65ee09d4e8e1273d10838c03","ssdeep":"96:mxmnt6yktUqwsOLWuTtT5DT6ra8IVKkNVAVcVFBdVFBAVLhVLIVIV/V1VvV27BDv:RBktMtF/6a8I1mSnBdnBAthtISp35Y7h","tlshash":"459124741aa0bc50e15d53a83db5e9569e1d88e3df0f0dea602d902cf2c56c223b1e9f","first_seen":"2023-04-10T19:37:42Z","last_seen":"2026-04-04T09:30:56.507883Z","times_seen":204,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"hm.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?s=webhp\u0026t=aft\u0026atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026rt=wsrt.394,hst.200,prt.331,aft.331\u0026folr=_X1nSaLqsGZOxwPAP6c7auAo_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026nhp=\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"POST /gen_204?s=webhp\u0026t=aft\u0026atyp=csi\u0026ei=X1nSaLqsGZOxwPAP6c7auAo\u0026rt=wsrt.394,hst.200,prt.331,aft.331\u0026folr=_X1nSaLqsGZOxwPAP6c7auAo_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026nhp=\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=Lz7LkP19ofmxhuyMPInqcDGAB7BSanjgieAvJJ9LhsPFoMbUwqeph7SeopGBNm3hn4ZAfKvcXmtseeYOr1dh-BI9ufuLacPKU_7gXyfbyasUMGyyL5Zg_uaX_8QSesyKG-7bbqyaROTY7BT0CVddDWhlNRPgXAz99QmDqL1a4DN9aXsqQ6cNFCuqr8c2g0pIeVy4Not2BKcaV6LeX9o6YOYkPHM_nElud-6yRYTlZY55Le7N_QIQqehIPqMqRHYKHX2l-WZCk35XkCE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Q_f4hoJMUxf5JWCyoLKmGg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?s=async\u0026astyp=hpba\u0026t=all\u0026atyp=csi\u0026ei=X1nSaOyfM_i-wPAPwbuLuAo\u0026rt=ipf.24,ipfr.132,ttfb.132,st.132,acrt.148,ipfrl.148,aaft.148,art.148,ns.-685\u0026twt=1\u0026mwt=1\u0026imn=0\u0026ima=0\u0026folid=_X1nSaLqsGZOxwPAP6c7auAo_7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:03.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /gen_204?s=async\u0026astyp=hpba\u0026t=all\u0026atyp=csi\u0026ei=X1nSaOyfM_i-wPAPwbuLuAo\u0026rt=ipf.24,ipfr.132,ttfb.132,st.132,acrt.148,ipfrl.148,aaft.148,art.148,ns.-685\u0026twt=1\u0026mwt=1\u0026imn=0\u0026ima=0\u0026folid=_X1nSaLqsGZOxwPAP6c7auAo_7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-G4mfiVeF_E5DOZ0iCEVCwQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 23 Sep 2025 08:25:03 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/ss/k=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/d=0/br=1/rs=ACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ/m=syki,syoa?xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/ss/k=xjs.hd.hS6W4sAAzDk.L.F4.O/am=QAhQKhAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAAAAAABAAAADAAgQACAAAAwAEAQAoAAAAAAAgAAAAAAAgAAAgAAAAAAAAAQAABCABBBIDAogCAAIQIAAAEAAAACQCAAgECACAB0AAAACSAEAAAAAgwSIABAALDBAAAAGQABAAAAgAAAAAAAAAAQAIEIAAAAAAAAAAQAAAggAB1EYSAUAEQ6QCwAAAAAAAAAAEAAgIBAABAAAABYEAAMAAEAN4AgQcAACAIAgAA0gMAACDAgEAAAAAAAAAAAIwAgAEAkAC4RJEDAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAICAAAFEACAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/d=0/br=1/rs=ACT90oHJ2hNKiolyaZgWO3LELsXkvbI0iQ/m=syki,syoa?xjs=s4 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=i0bs28EJJVNexF-eIH0RykdQhxtn_a0t9a-kcRAsxUkfJXrRG1Gl4NNyLKW7mS6BNfySW91Fo9pmUkqypGfT_am71WhRhmz74Jx5sukrBUjIWek6VoNdeL36Kbe6rbylxhsWoB6oDcttB4ymWlKMAVoulFF375Gpw868lEMseKJEw88NAaTa17p_T5KLJAdE67GwhJ-SdQW7eQHd7t4qlNiW3LHRNT6LVtk4ifE-alOU_Xm-Hn_nIb2NyE_CvR_ckxzlrPooG3QKhPw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 557\r\ndate: Tue, 23 Sep 2025 08:25:04 GMT\r\nexpires: Wed, 23 Sep 2026 08:25:04 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 21:34:10 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":907,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (907), with no line terminators","md5":"fc52af8e8ef1195de508a0d112e4d6f1","sha1":"b57daa67c3ee71377eccbdd2ffa2fe37b5a71d11","sha256":"51a510baefe0171fcc41af1fdacd78f1832cad4d1f42a6d3e2d11c1695b35388","sha512":"67e3f06618db3f255e1a95e2a709108ac7213cfa23afb8ff79eece1c40810fa655596b5da9c62735606c1ed2b0df82a9c9783a9db7c1fd4ff3db896ecdd216a7","ssdeep":"","tlshash":"9d1144cc9a60ece63d059300a7e9a17ef744b550eef879705440055772e37f260e2f21","first_seen":"2025-07-22T16:12:14.67522Z","last_seen":"2026-04-01T11:54:52.650752Z","times_seen":13448,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/rs=ACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q/m=lOO0Vd,sy8p,P6sQOc?xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-09-23T08:25:04.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.wCb7iu3FU1E.2019.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAABAAEAABAQAAAAAAAAAEBQAAAAAAAAAAAAABACAAAAAgAAAAAAAAAAABAAABAAABggACAAIQIAAAGAAAAAAAAAAAAAAAIQAAAAADACMAfAysAAAAgAQDAAAAAAADABQBAAgAAAAQAAAAAAAAAAAAAAAAQAAAAAAAgAAABEAAAQAEAAAAAAAAAAAAAEAAAAAAAAAAAAAIAIAACAAAAAAAAAAAAAAAAAAAA0AMAAADAAAAAAAAAAAAAABwAgBAAAACYRJEDAAAAAAAAdAAIPGBIQQEAAAAAAAAAAAAAAAAAAICABcFcSCAgQAAAAAAAAAAAAAAAAAAAAAAAAIQ2sZA/d=0/dg=0/br=1/rs=ACT90oFzAa9vkvB6yvthNNYKGCmEWylS0Q/m=lOO0Vd,sy8p,P6sQOc?xjs=s4 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AaJma5u7NYvuSdP3vhmaGx8XLF4QJSCl3A2kfsqHK1P0lDx-I_NIi_V1AZk; __Secure-ENID=28.SE=FloBwtpVTGHCOCBDoxzBW0jNSZ_iAqi0PDLOhkAXDqhMgstbx8X81vcMD7YJAECiR3K0JUDjKpHmMCwANpIQg2lNW21txtNOtzYLJUaWSQ-nWRcbaxXcumESXKwxmkz5GzEq3WyHj05vJE5viNc9SD_rFwAHr2-uNt2w1ZfXMTUYwkryClHdmvLlvZ99qwffZi6hQbMMz51mta0mi2LQZop47wLoNqzRLc2hNQfE0MXUloN4hxdRI7ojyJTlkmhjsc7RUUktDMBvxwepaJLCq8AmWQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 707\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Sep 2025 05:26:26 GMT\r\nexpires: Wed, 23 Sep 2026 05:26:26 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Mon, 22 Sep 2025 22:36:44 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 10718\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1395,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (467)","md5":"a20a2a92242a89fa8856486d5f3ceb2d","sha1":"73432c56e54468780b74ba2ab9d035f7ddc8f4b0","sha256":"f5c2529758615098e731f1c3b86db1c4434cab8a067a10112f19adaaf68b61ae","sha512":"424fb9525f74304ba5076da0a7ed3ac13e43bc56ad7236a97d0eaa0391bb2a84eab7ff738e11246a0678403446e1a21fd185f0b87a99b6992148b560376317c9","ssdeep":"","tlshash":"6c21711831e2b1930a62f5e0247f104bb27ff8adb49c855cf16c3dcabee64818a59335","first_seen":"2025-09-23T03:02:13.188721Z","last_seen":"2025-09-23T20:58:05.0722Z","times_seen":19,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}