{"report_id":"3a8f13f6-acd6-4551-a3fb-8c22d4c83b3c","version":6,"status":"done","tags":[],"date":"2024-03-29T06:09:11Z","url":{"schema":"http","addr":"ndrjyv.blogspot.sn/","fqdn":"ndrjyv.blogspot.sn","domain":"ndrjyv.blogspot.sn","tld":"blogspot.sn"},"ip":{"addr":"142.250.74.65","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"g1jm3.shop/tink_chat","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"title":"Тинькофф Доход - дополнительный пассивный заработок"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T20:59:16Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"g1jm3.shop","ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-24","domain_rank":0,"first_seen":"2024-03-24 14:06:41","last_seen":"2024-03-24 14:09:22","alert_count":0,"request_count":10,"received_data":321015,"sent_data":4667,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2024-03-28 21:26:13","alert_count":0,"request_count":1,"received_data":84119,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"l2nv8.shop","ip":{"addr":"104.21.37.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-12","domain_rank":0,"first_seen":"2024-03-12 23:45:01","last_seen":"2024-03-13 12:25:17","alert_count":0,"request_count":1,"received_data":15098,"sent_data":522,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ndrjyv.blogspot.sn","ip":{"addr":"142.250.74.65","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-08-22","domain_rank":0,"first_seen":"2024-03-10 18:25:49","last_seen":"2024-03-11 05:00:19","alert_count":2,"request_count":1,"received_data":684,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ndrjyv.blogspot.com","ip":{"addr":"142.250.74.65","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2024-03-10 15:55:49","last_seen":"2024-03-10 16:10:47","alert_count":0,"request_count":1,"received_data":15502,"sent_data":474,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sh4737904.c.had.su","ip":{"addr":"81.91.178.100","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-05-10","domain_rank":0,"first_seen":"2023-11-16 03:55:07","last_seen":"2024-03-28 08:46:03","alert_count":0,"request_count":1,"received_data":541,"sent_data":546,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-03-28","alert":"Gazprom","trigger":"ndrjyv.blogspot.sn/","verdict":"phishing","severity":"medium","comment":"Gazprom","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"ndrjyv.blogspot.sn","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"g1jm3.shop/tink_chat","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03fe0b8419adf8bdf18225d6050d13b7","sha1":"e569c24531d194c4339312d057a403dd82906268","sha256":"9393bfd1b73b2fff27224e2aa1070a66e1ea9ba511d0d6f9b10cf5c6f49b1781","sha512":"7832054aa2ac0e246a4469a791f21072b1f80539231563c23bbe9fdc22828d935a63acfb5777bb1b8167ce9348bfb6e0711b5630e172a550a6e428be912a8827","ssdeep":"","tlshash":"26e0cd692eb20070a5fba87e425700493e24f103d209de68b90dc768cfd1f7044f26c8","size":390,"data":"","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.587296Z","times_seen":1454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/js/script.js","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"564a9b5bd1e043c05922f543e7557078","sha1":"d683751ef7c34d2084cb7adff4988efce01b8375","sha256":"20e9d142fa72e5932357f6ead4182302297d3eb2532cec4b7b2ccb7516a2c5f8","sha512":"be4db48c3ae8cb8bb7ca953e48e0e20c1fcdef4e4bb0911100dfe1c1f4e1f87cb362505376640351e669af488814cb664dca0e604450dc8474fc57f53e6da0d2","ssdeep":"96:mM2s7eQyiwtslN5V43i+5Esupl743RU+pmCcbO9m5gK5M9zpQoXPv+91EHdY:b2X9slp4z5c34D+1F5M9zpQoX+3","tlshash":"38f1ef6053ba09650207f3aacd0d3a46557f5c7dfacaa38b701c3cbf26ea124d125e1e","size":7051,"data":"","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.590471Z","times_seen":1453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/tink_chat","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d6b83f2062c856430aca7e335b728ba","sha1":"0d012adbb0692a4e4320f3f20bca504d42f01ce0","sha256":"5a2ece2c48b57cace5f007b19c6f9d41e9e1fb2e03dc51b2592239d3d746e453","sha512":"1605ecbf5d1c06e9f6aecdebbe85a22386f8717b97e35dacaa3b7cbd42ab201f1fca3b54fa518bc7bdbb06a35278b676b300301a0af8211057ed0dfaa7501c63","ssdeep":"","tlshash":"3da0222820a00020803f302fcf2bb008a032002b230002a03a0cc3800ff3a2b80202cc","size":74,"data":"","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.587844Z","times_seen":1453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/tink_chat","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ca4c29c635ac1bf273780e129973803","sha1":"7d361b7db10c7f7092d52434dfd9ede08b055c46","sha256":"4881fcdfb996b88798bba08c56b772b264e4a72f2adb2fce63ad9acb3f65da3f","sha512":"17dec634a2a10b74b04e59f82c358714c0cf5375a0aee4a289079e99a845adec803210f13fe8cb88be7a25a4aa69041b4e164b1aab5010d6ae819d5c450f8fbb","ssdeep":"","tlshash":"6411f16e5ff691b61fab614c839f2529b13b114b6584cc003c1c62c01f08f3e80e2ad4","size":986,"data":"","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.589146Z","times_seen":1453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/js/typed.min.js","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48b7705121280701755c046e5c4c7dca","sha1":"ae957a8f68496b1cff497f0cdedc3eaa1cdf37a4","sha256":"60f6ac8998288909ee6b85c8eb8b3b8463efba2fdeb2fd7b78541b9a131df8a5","sha512":"99cfde9f6709184450eed6c292719f0df0ea19b3b37b40a5ec54339919a159738e039eb99173827fbd1f10b6ad3808a91c177f2a4d15992b3241387d5241d4fb","ssdeep":"","tlshash":"5371934ab182d26159c2c1f010e71d0f5133e9381d19d0fc35f9afe69ae4b1a747ab38","size":3619,"data":"","first_seen":"2023-03-07T21:46:22Z","last_seen":"2026-04-13T05:37:12.950431Z","times_seen":1911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/tink_chat","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49bf34a74096d9a358c14900c7e4c36d","sha1":"30b8b4e69a18d2648c1985dd9e9e57797f72e45f","sha256":"65819205003e4c90bab89cd4a5b04fb0bbb5e87f51b638bafb9b9377933929fd","sha512":"e9782ce8927929cbf102faa2ccb09761a899cf6880e4f5b5a9b37306bd93eeab9710c7f37d4041bace538b9515260ef3215da46bf21fd59b29c2a8c02e9745b9","ssdeep":"","tlshash":"5601c016662392a694f722c9538bf3ec657312273131dce5704d4b01bf0fd0add625c8","size":735,"data":"","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.589755Z","times_seen":1453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.0.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bce53304d5d3438acfa5fcfae816769f","sha1":"d70fbf2f6aed2c76801d35fd793bf70a9cc060eb","sha256":"265a924c42de4784cba8fd0e1bd77133bc833ea5f5a31fc77e08922c18fcfa43","sha512":"f19e7ef8ad6b07753e51268b286ea83bcb9658185d62c337866762ae73845a9f21d81d5a3a2923e73073957b3c40eaef63d3b11270f640391b48a2a97ea7085b","ssdeep":"6144:1w3mYhct1W7+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyygRgL/uaOgeNTIPft:EuYcYmD4/cZQ/coLGVFyzRTiPf7AqqAv","tlshash":"0a54a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","size":284996,"data":"","first_seen":"2023-05-19T18:31:32Z","last_seen":"2026-04-13T05:43:47.804006Z","times_seen":4772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"ndrjyv.blogspot.sn/","fqdn":"ndrjyv.blogspot.sn","domain":"ndrjyv.blogspot.sn","tld":"blogspot.sn"},"ip":{"addr":"142.250.74.65","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-03-29T06:08:45.778295353Z","timestamp":1711692525778,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ndrjyv.blogspot.sn\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://ndrjyv.blogspot.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 29 Mar 2024 06:08:45 GMT\r\nexpires: Fri, 29 Mar 2024 06:08:45 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 195\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":195,"size_decoded":237,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b45525fecfcf7228d850171167422817","sha1":"8cb0fed97460ad54bcf21dc2a7971a12aff99d19","sha256":"47dca3b6cf532f6bb4b7f27bab0ad3ef2b5d3da387e2b28ab7711f2399a87a44","sha512":"12e61a2e5e236704994574c7945fcb3c3e0dd859e9d8a3a4aae1e54e81aa16f1451e3cb67a3727222c8631a9a77d5dd4ad60e8b1709b06d2d933875767c74e03","ssdeep":"","tlshash":"bfd0976f0a0f02f6808334fab02030285c68388a30eb28b602a5ab1c48140312188bca","first_seen":"2024-08-20T06:42:49.300301Z","last_seen":"2024-08-20T06:42:49.300301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-03-28","alert":"Gazprom","trigger":"ndrjyv.blogspot.sn/","verdict":"phishing","severity":"medium","comment":"Gazprom","link":"https://openphish.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"ndrjyv.blogspot.sn","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ndrjyv.blogspot.com/","fqdn":"ndrjyv.blogspot.com","domain":"ndrjyv.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.74.65","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-03-29T06:08:46.229120059Z","timestamp":1711692526229,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ndrjyv.blogspot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Fri, 29 Mar 2024 06:08:46 GMT\r\ndate: Fri, 29 Mar 2024 06:08:46 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Mon, 25 Mar 2024 00:48:13 GMT\r\netag: W/\"76c7e3f43624254c72444f46f95329f11c232599673383cc698bb2b6b32882f3\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 15010\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":15010,"size_decoded":71646,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7139)","md5":"f4de95855b47c4bc5aedba6fb20005d0","sha1":"1f22722284e123fce495c9d9e9efa5a3d02be611","sha256":"9d50cf10b1b0edce935996cf158d775d47391d5bfc0116a2232883709ce63d67","sha512":"c99174a0d4107b9ab029ecea50cd285923b7a256c74a1a4434b37144523f148c09efa511221e71d73f5ee2f3561fce999cee3aae728ddb232ea85759026e9d85","ssdeep":"768:5+TR2BIDsyl6F0MsLI+m+3CdWaKTRNv+f5AfpUxnHeob4f1u0eJwO0H+UJFpIcp3:5+36nXO5Xycht9","tlshash":"3063077355623d0d92734c1d78c5b5883b18c463c14359eeeabeaa2cc3cb9c6927276e","first_seen":"2024-08-20T06:42:49.301496Z","last_seen":"2024-08-20T06:42:49.301496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sh4737904.c.had.su/auto_domain1700087633.php?sid=4263","fqdn":"sh4737904.c.had.su","domain":"had.su","tld":"su"},"ip":{"addr":"81.91.178.100","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-03-29T06:08:46.545Z","timestamp":1711692526545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sh4737904.c.had.su","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Mar 2024 09:47:51 GMT","end":"Mon, 03 Jun 2024 09:47:50 GMT"},"fingerprint":{"sha1":"5D:B7:8A:F2:18:4B:ED:51:81:12:EC:64:12:69:EB:18:59:04:45:C6","sha256":"8C:C1:64:E9:B7:9D:26:95:3B:36:00:50:44:0D:CF:7D:F4:39:B4:92:50:F8:46:2B:BA:D7:CE:EF:4B:D9:FB:12"}}},"request":{"raw":"GET /auto_domain1700087633.php?sid=4263 HTTP/1.1\r\nHost: sh4737904.c.had.su\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ndrjyv.blogspot.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ddos-guard\r\ndate: Fri, 29 Mar 2024 06:08:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nx-powered-by: PHP/8.2.16\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: __ddg1_=XipWld4Id4CjFbzfsKaZ; Domain=.had.su; HttpOnly; Path=/; Expires=Sat, 29-Mar-2025 06:08:46 GMT\nPHPSESSID=1614c33cec6f5af13a05e958c58433ab; path=/\r\nlocation: https://l2nv8.shop/WeuT/go?sid=4263\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T14:12:10.579597Z","times_seen":13706848,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":58,"dns":1,"connect":22,"send":0,"wait":408,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/images/avatar.png","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.251Z","timestamp":1711692530251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/images/avatar.png HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 24545\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: \"658f753c-5fe1\"\r\nexpires: Sun, 28 Apr 2024 03:26:16 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9754\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=x3MpzTitwlujtfz%2BSzAmt8jDjTVh5mCkg86EXN0RwxAtu18MHvQhkiOK4GBtxJx8MeMdw2b4yguw1C9wT6nvI2EojdKjhKA2kjjiYw2IdCaCdkJK2yP%2FrAth9S6a\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb009f8a9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24545,"size_decoded":24545,"mime_type":"image/png","magic":"PNG image data, 127 x 127, 8-bit/color RGBA, non-interlaced","md5":"aa161b49a4b47202894bc37f7ddf3ea2","sha1":"4cd8b986e4dcd6e410c3c19ef73a0d2f0fa84fc3","sha256":"548f6a0ae60bdb10390e285825f03fb6298de9afd8763e4a3c805947b4156c73","sha512":"f68bdd1f95e474460dee85deb1fc441e1aba7d50d710f575a9189ac1b3b3699db68996a1ca8053b37d5743bdf7ae54f8ad50ae2743b7ee1c0029a8a902fe60f1","ssdeep":"384:tub7PizfFKbCSlfIzl8yj0MLpu08vBw5UmTC1P0AD14MdAuPvUf/legRJTMN6gCs:cviB4CSJIx8yj0MLpV8dmdIbA+gwb/h","tlshash":"03b2f111b30f23a9c5fdee3d227d0bca3e6b41187716220349c73655297a864eb065e6","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.581381Z","times_seen":1454,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/images/message-icon.png","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.259Z","timestamp":1711692530259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/images/message-icon.png HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 1028\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: \"658f753c-404\"\r\nexpires: Sun, 28 Apr 2024 03:26:17 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9753\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FQaIq42%2FprmXocKpEEEpkP9R4E%2Fq17xMboZ1EPQ%2BDLIsDtQ2cE%2FQF5jHzLI0Jh1Kj%2FML8MdDxioazCTPAczzAiGN0cmphVp5tu9xDJQlqeLdqIkDa7EWEILrtUy%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb00a08ac568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1028,"size_decoded":1028,"mime_type":"image/png","magic":"PNG image data, 103 x 96, 8-bit colormap, non-interlaced","md5":"a53faaa8deaaa5eb0888bc0f3baab572","sha1":"3016cbfc123ebcf05243d0954e55cdc99f8cab26","sha256":"1ffbc9a3b3cf11bc8747389d39303d43354b4b1e239393548a7e478c161d683a","sha512":"e28831a3a0143510a7b6fdb9834b0da977ac79b5ef613eb38080dfbe7788a5bf134cf4db47d1425fb3275276cea55d339bec05ff60d194a3c370da5cb43a468a","ssdeep":"","tlshash":"5411a84d6682d51ce1f0547265f189114893ecbac7a48f437857ff3f79b62834157246","first_seen":"2023-05-17T23:08:36Z","last_seen":"2026-03-28T06:52:09.657664Z","times_seen":1711,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.0.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.248Z","timestamp":1711692530248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.7.0.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://g1jm3.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45944\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\nage: 16890334\r\nx-served-by: cache-lga13628-LGA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2, 6494\r\nx-timer: S1711692530.313527,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83531\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83531,"size_decoded":284996,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"bce53304d5d3438acfa5fcfae816769f","sha1":"d70fbf2f6aed2c76801d35fd793bf70a9cc060eb","sha256":"265a924c42de4784cba8fd0e1bd77133bc833ea5f5a31fc77e08922c18fcfa43","sha512":"f19e7ef8ad6b07753e51268b286ea83bcb9658185d62c337866762ae73845a9f21d81d5a3a2923e73073957b3c40eaef63d3b11270f640391b48a2a97ea7085b","ssdeep":"6144:1w3mYhct1W7+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyygRgL/uaOgeNTIPft:EuYcYmD4/cZQ/coLGVFyzRTiPf7AqqAv","tlshash":"0a54a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-05-19T18:31:32Z","last_seen":"2026-04-13T05:43:47.804006Z","times_seen":4772,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":61,"dns":35,"connect":13,"send":0,"wait":14,"receive":20,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/tink_chat","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-03-29T06:08:49.870Z","timestamp":1711692529870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /tink_chat HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ndrjyv.blogspot.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sid=4263\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.13\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ty1rH5a3sdjQvutzUEanTIjBA9ybuyfyFaGqHKK6JBwhpxAkVa7JZCFjuhdss1zKRRy3jc4I6BxV9d0lwxdtOVeGSbOijPgwzPvx84HlJiH9qQlyAkcv3pibQoMf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86bdb007acd656a8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11696,"size_decoded":14380,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f4631c6a46015286ff780fbfc36c4dd5","sha1":"cfb501a6b614040347394930206b0733f8b3aff3","sha256":"366521b2e48095074c08028d310806bd60d59498a7e7b6293e004f3ba0ea029c","sha512":"10dbf9e075336af0e08d2fcadda7e1be0fe27a012c65d74f0dda2271b4c204049406ccdf8afe14729c1042868970b5625c709561a919ee8503d5c0ac28141d99","ssdeep":"192:SW/sBwJqHMrubfuRVEbHJsre38xweQ42rYriEvjjhBiXFvT:SNs3OrMxw+2S5B8F","tlshash":"f152767505f2402654a350d9df66671a3e64e703eb0ac988766c4bac8fcbed4cc637d8","first_seen":"2024-02-07T14:38:32Z","last_seen":"2024-08-20T10:03:43.459789Z","times_seen":276,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/tink_chat?sid=4263","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-03-29T06:08:49.573Z","timestamp":1711692529573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /tink_chat?sid=4263 HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ndrjyv.blogspot.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 29 Mar 2024 06:08:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://g1jm3.shop/tink_chat\r\nx-powered-by: PHP/8.2.13\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: sid=4263; expires=Tue, 14 Mar 2084 06:08:49 GMT; Max-Age=1892160000; path=/; httponly; samesite=lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QBrII6WIzEavhoxRsKDQbCNQW9y%2FhKVYTrVJbuPh0wYoiJAINYgMnOrRe6wpypKHexiZW9nqHM%2BmTwZvc2GxmEdHI7iZGd1ugwBcDzg94nFNycEoWX%2BakxFrjBN%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86bdb0061bfe56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":14380,"size_decoded":14380,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T14:12:10.579597Z","times_seen":13706848,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":41,"dns":29,"connect":1,"send":0,"wait":251,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/favicon.ico","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.411Z","timestamp":1711692530411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/favicon.ico HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: W/\"658f753c-103e\"\r\nexpires: Sun, 28 Apr 2024 03:26:17 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9753\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=78SBIrYG5%2F0fhTcwwW4SAaO36Trzjmb4uZwJLPfJUExy1cpZqZjlrDUDbKT59HIh1FqYUqkCq7nU%2B9UKV1wr%2FYpi08EwTuvJkb15IyMR2DwDBuN0JJgRH%2FV4eAJn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb00b095c568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4158,"size_decoded":4158,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"b44c41c10492292819a685596dda2d75","sha1":"66048438be1368d95cc281785876530b5805bb75","sha256":"ad6a5cd9c24c278a8190d0be1724fafdc3a37d0a3fac6ef1dc98178ba8d8d029","sha512":"06b1f0ceaa7e977106804dbbdb39f1ddf966667a56afd3af4e44b91ad8a14d5a6364a32e2f10a339adbaf269ec609ccf31465aa40dc8176f56c9f6e0aa0534fd","ssdeep":"48:F3c4lSuZsl2Yx0VaDb49NwqXJBwOprFH1lmi3:F3wuZBYuW+mCuOpRp3","tlshash":"fa818d23b98c080fdc6121fc592f07d6b7c20c8496f416c5af8b7346167f28a58fb0aa","first_seen":"2023-05-05T12:22:40Z","last_seen":"2026-04-01T23:07:39.197529Z","times_seen":1730,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/js/typed.min.js","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.249Z","timestamp":1711692530249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/js/typed.min.js HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: W/\"658f753c-e23\"\r\nexpires: Sun, 28 Apr 2024 03:26:16 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9754\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LgkW4sfvDZbYzU3BaHEWL1ilPb35iuBX%2B2eojlmlHqPSIOTXkMj1j3kJEfmiFmP5e9pf1H7SkYq1mN%2FWWY%2FnGpXneCG9vLcrRkdSLhz6Gj3DqGcBv8Uiwa3njWpI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb009f8a6568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3619,"size_decoded":3619,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (3688), with no line terminators","md5":"60cb8569dfab3d94313d962afb444347","sha1":"897e8a1bca9004620b3fe63b62ddee9c63ef38cd","sha256":"66a3f6dbd6fc33eaf444f261dfbe622b34db80df3cb8d1970bdd48d36d9eade8","sha512":"2d2420d02dadd99cb377ea324c422b394f73de85b59061f8de0a2157c2c35c82d59070a698c945e3511235346f1ab407e71f89afd5063c4d760362575b3d9ed3","ssdeep":"","tlshash":"3971934ab182d26159c2c1f010e71d0f5133e9381d19d0fc35f9afe69ae4b1a747ab38","first_seen":"2023-08-10T15:37:25Z","last_seen":"2025-04-03T19:29:10.947571Z","times_seen":1260,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/images/logo.svg","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.250Z","timestamp":1711692530250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/images/logo.svg HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: W/\"658f753c-8a9f\"\r\nexpires: Sun, 28 Apr 2024 03:26:16 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9754\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iubDjJu0yP3z1ENmk0Mx3rXKj9Pa9Wb%2BO21X5RPICiD1YHi6B3E07%2FLgdKolMCQS2zs014poZEbZUUghW1Ne0Y%2Bfcr4XaGhhfabNf%2B%2FErFVXEfG6CE1WCLVSxHmg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb009f8a8568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35487,"size_decoded":35487,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"babe06b152e3eed1d5803cc35e5d62b3","sha1":"d8ec86da8d91a1a24bba6ad531df2575a6a5a795","sha256":"cbf1b7e266dd735edde3ffc3897267004456232e25d0af973d8a26005e2dca1e","sha512":"5bd3e35695e5b95d60ffd42f12d3f01597e7f99fbc9d176d148b25c30812f3f3a0a299e27c78c5dc325d88660eaaad2919e3bd4fc5cee77f8197ef3ebab58d90","ssdeep":"384:GtvAwd8NL4fAyzkjvuFKKnFdxr3LwHfrUQx3PhYCHTWJtpLgvN9MssqHVnGV4+Iz:GKNyzkzuFKKVrUHfr3fhCvL8ks9WFSZ","tlshash":"3ff2a7eab3d4b2f1e106f7f4d61294b47a6728fa3f32db4847e68da5961101d848dcc2","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.584157Z","times_seen":1430,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l2nv8.shop/WeuT/go?sid=4263","fqdn":"l2nv8.shop","domain":"l2nv8.shop","tld":"shop"},"ip":{"addr":"104.21.37.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-03-29T06:08:47.016Z","timestamp":1711692527016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l2nv8.shop","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Mar 2024 21:44:20 GMT","end":"Mon, 10 Jun 2024 21:44:19 GMT"},"fingerprint":{"sha1":"3C:C3:59:C8:F2:46:67:D3:91:0E:46:09:AB:7B:72:70:C2:C9:F0:C8","sha256":"B9:CB:B1:E0:90:7F:42:AF:71:1C:6B:B8:35:44:FE:F2:4B:CF:96:4A:42:50:3B:0A:D2:E3:69:0E:12:5A:C8:5C"}}},"request":{"raw":"GET /WeuT/go?sid=4263 HTTP/1.1\r\nHost: l2nv8.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ndrjyv.blogspot.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 29 Mar 2024 06:08:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://g1jm3.shop/tink_chat?sid=4263\r\nx-powered-by: PHP/8.2.13\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m8QMlBt%2FpxIMY3gJLrl4xwMKbkZqJWpjCLD6yJ89mu1pcpAakp%2Bt%2BNImxi8viBxOo8IzQsYlcsRLVRx4VxUtr3%2BSXN7Ybo0JiBwdUVgkXJWwMC43nan3kKY5FFVD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86bdaff609347130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":14380,"size_decoded":14380,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T14:12:10.579597Z","times_seen":13706848,"resource_available":true,"data":null}},"time_used":2579,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":2524,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/css/style.css","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.244Z","timestamp":1711692530244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/css/style.css HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: W/\"658f753c-2882a\"\r\nexpires: Sun, 28 Apr 2024 03:26:16 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9754\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cZDQmpFrmaYSi43AYciayktUKqHAzuCDELfj62HXCT4MlRfgpukhxabh8FOn8HJEQTrfo5JBjh4F5PBds%2BOw6BcccFm9eh3Po0kswNiHlhIWuACr%2FzgSpvK%2BbR%2FI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb009f8a3568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":165930,"size_decoded":165930,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-13T14:12:10.579597Z","times_seen":13706848,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/css/main.css","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.246Z","timestamp":1711692530246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/css/main.css HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: W/\"658f753c-b3c2\"\r\nexpires: Sun, 28 Apr 2024 03:26:16 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9754\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4yIyusyxiGMP5RXEjRnYs1dcBwUZm1W1IYJFzmzvn95cRlToXVW5rvXcEZojXl23ss584fk%2BvnAkKTuKO9YSvAn8O9d96RP45OLYqqJKA5LCl71oo2QGclFK01rV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb009f8a5568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46018,"size_decoded":46018,"mime_type":"text/css","magic":"ASCII text","md5":"66d80d27444f23f244223b1aef888014","sha1":"62fe58f84376d4ced2c796493ee340cb63c5ec51","sha256":"597d179af55ddc3566939d303b0af7ef86cbb211fbdb238b5dae00a8534080e1","sha512":"efd00be63e7a816dbc57c741770b5e3edb3ce85e4bf429898b21145bdf63392b51cd92b70ea399023f03575feae29cedb20e7a99e22959310ce47088a654ff3b","ssdeep":"384:N4z5bKF96oFiczqcM85TeyQe8FqFvCrI+2xsM6UxdC1a:NNFkezqcZeyQe8FqFvCrIfxs/UxdCw","tlshash":"b32330aa67b16518702bd46c79571b59337c9003a20fdebcabd060ac9fc91e493b3b4d","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.584713Z","times_seen":1426,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g1jm3.shop/l/tink4/js/script.js","fqdn":"g1jm3.shop","domain":"g1jm3.shop","tld":"shop"},"ip":{"addr":"104.21.61.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://g1jm3.shop/tink_chat","date":"2024-03-29T06:08:50.261Z","timestamp":1711692530261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g1jm3.shop","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 24 Mar 2024 12:06:25 GMT","end":"Sat, 22 Jun 2024 12:06:24 GMT"},"fingerprint":{"sha1":"41:C2:2B:F1:CC:67:49:79:C4:CA:B3:55:30:EA:EF:70:17:8D:43:EE","sha256":"FB:C2:2E:F2:AC:C0:51:34:1A:FC:02:31:B4:A8:0F:73:0E:CA:6B:B7:DD:BD:2E:56:14:A9:81:51:C7:33:3F:DE"}}},"request":{"raw":"GET /l/tink4/js/script.js HTTP/1.1\r\nHost: g1jm3.shop\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g1jm3.shop/tink_chat\r\nCookie: sid=4263\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 29 Mar 2024 06:08:50 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nlast-modified: Sat, 30 Dec 2023 01:41:16 GMT\r\netag: W/\"658f753c-1b8b\"\r\nexpires: Sun, 28 Apr 2024 03:26:17 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nage: 9753\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dg2IphGrTAi0r0mKcmPllAOqzqCRh6j%2FxAGHioXHIxxXXi36a8tZE8mXh1sZNsrobQy7uKHSBa%2FHR3sv%2By7etQyGimuN9aqj8bazMpFp4ii%2Bw6zz1gxtfvu4ExkN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bdb00a08ad568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7051,"size_decoded":7051,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6312), with no line terminators","md5":"7589c7a52497091bc3e776dab0928111","sha1":"f7158adbd14a58078cb485cdec756a6055c50fcc","sha256":"0beed2c3adf5077f287bfe9e2f03bd2a72b56e1c2576ffa35c1d300873e16cce","sha512":"806f49262e227d5093721069f78c4aee3390f2cecf308ee58c9dd10def811eff4e8379719bc17b087cab17c31ca96505b7dd31051fdb206effe0d91b9c4f4edc","ssdeep":"96:GM2s7eQyiwtslN5V43i+5Esupl743RU+pmCcbO9m5gK5M9zpQoXPv+91EHde:72X9slp4z5c34D+1F5M9zpQoX+3","tlshash":"99f1ef6053ba09650207f3aacd0d3a46557f5c7dfacaa38b701c3cbf26ea124d125e1e","first_seen":"2024-02-07T14:36:20Z","last_seen":"2024-08-20T10:03:43.586664Z","times_seen":1260,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
