{"report_id":"3b7b3f4a-1002-45cb-b046-04d676eddc98","version":6,"status":"done","tags":[],"date":"2025-11-20T07:32:03Z","url":{"schema":"http","addr":"gaming365.ru/index.php?key=b2de3161c3638f7e15a2\u0026cid=n2jjzwnmztctotmwzs00owyzlwe4ndytywewnthkytg5nmzjxziyodm5xzy2zge5ndy2m2yymzhftkrrd00xoxvzv3rrwmpanlozz3lhamw2yjnvx0rfx1dpzmlfqw5kcm9pzca3ljbfbw9iawxlxzjfmv8wljawmja3mdawmf80otazxzaumdawmf8xx3nodxe0egnpa3lhxw\u0026payout=0.002070000\u0026device=mobile\u0026campaign_id=22839\u0026pub_id=4903\u0026traf_src=aff09000022\u0026site_id=26b75ebc","fqdn":"gaming365.ru","domain":"gaming365.ru","tld":"ru"},"ip":{"addr":"5.200.60.25","port":0,"asn":48096,"as":"Enterprise Cloud Ltd.","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022#","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"title":"PORVID ПОРНО HD","dom":{"size":65554,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0b129b22f2b827ba0083f5962d4f95c1","sha1":"8cd7f5b20bde7e224bb1bab24718ed1c90161871","sha256":"1ee4dca0726c2cdf9a37c3747e41ed59805083cbc1738bb222854ba3706eac65","sha512":"54bef90785861c6b5f9b1a4a993cb77ad36bff216178478c5c9c0b236ae386a74feaf2d0b764a856d365d9b2facd0ffe8a50d3dbcd4d437f9edcb520bf65c770","ssdeep":"768:gyEXu4bQfUbH+bY7Pv/TPrkZlDFJQFfFI9TYCGLX/9Vop/Wf6ISpdsW9yAg9+De8:gyDqbTY/QV+dHMkAXVaVF9","tlshash":"b5538a7210f525ab1193a1c29e312f1a7fa2da1bce5b9a0579ec1bc89fc6cd6dc1710c","dom_hash":"domhash773bcac836729654a5210cd348db0077","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gaming365.ru/index.php?key=b2de3161c3638f7e15a2\u0026cid=n2jjzwnmztctotmwzs00owyzlwe4ndytywewnthkytg5nmzjxziyodm5xzy2zge5ndy2m2yymzhftkrrd00xoxvzv3rrwmpanlozz3lhamw2yjnvx0rfx1dpzmlfqw5kcm9pzca3ljbfbw9iawxlxzjfmv8wljawmja3mdawmf80otazxzaumdawmf8xx3nodxe0egnpa3lhxw\u0026payout=0.002070000\u0026device=mobile\u0026campaign_id=22839\u0026pub_id=4903\u0026traf_src=aff09000022\u0026site_id=26b75ebc","fqdn":"gaming365.ru","domain":"gaming365.ru","tld":"ru"},"ip":{"addr":"5.200.60.25","port":0,"asn":48096,"as":"Enterprise Cloud Ltd.","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-25T07:32:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nl2.ozskarfa.com","ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"domain_registered":"2025-04-04","domain_rank":2476462,"first_seen":"2025-08-09T09:39:31.618131Z","last_seen":"2025-11-19T12:43:38.724514Z","alert_count":0,"request_count":21,"received_data":299781,"sent_data":11420,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"gaming365.ru","ip":{"addr":"5.200.60.25","port":443,"asn":48096,"as":"Enterprise Cloud Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2025-06-06","domain_rank":0,"first_seen":"2025-08-13T08:01:11.626992Z","last_seen":"2025-09-12T07:54:52.908885Z","alert_count":0,"request_count":1,"received_data":63069,"sent_data":827,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022#","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d801da3e7349befc8b6a8440d8d928a","sha1":"a8a5a9ee1ba852c2d32bf8de8c018becb549ee1d","sha256":"a91fbc46e0d15b196a21228fe416d5245a2dc039fa346a9ba6f41dbbcc847653","sha512":"1e80a1361f526244db21a59c547f1cf1fde86bfbdcc61fe0f6d8733d2dc81bf9abfb44a9233a6070fb4373fa6dabc0580343dab296e267c4d1038a3b63bb2bad","ssdeep":"","tlshash":"5ae0f1983cd9103053b70254abbf440d7019241f2c4eac30e00a48022f5d9be0c6b80d","size":400,"data":"","first_seen":"2025-11-20T07:32:05.609996Z","last_seen":"2025-11-25T12:08:08.153605Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022#","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"299f5885c50825e666261b1d8c257f4f","sha1":"41eef8324ceddeca39e5c404390875c6975f5a73","sha256":"e6a197cfb9ca91199b91bcfeacf2206e5934b9bc4cb179825aa4a36c8a343ed7","sha512":"3c310080bbbead5375286c773048f9a67358aef35ae7f1129130a54b1e5e640139ef08d92a4165c46d1ef1875e016423b45e856b274c77649acf14ee199dfa4c","ssdeep":"","tlshash":"8c512362c05e2d77f1976324453b3524eba93d4f59c88b14ba2c02d80f5c6fb23ade4a","size":2922,"data":"","first_seen":"2025-11-20T07:32:05.611496Z","last_seen":"2025-11-25T12:08:08.155067Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d801da3e7349befc8b6a8440d8d928a","sha1":"a8a5a9ee1ba852c2d32bf8de8c018becb549ee1d","sha256":"a91fbc46e0d15b196a21228fe416d5245a2dc039fa346a9ba6f41dbbcc847653","sha512":"1e80a1361f526244db21a59c547f1cf1fde86bfbdcc61fe0f6d8733d2dc81bf9abfb44a9233a6070fb4373fa6dabc0580343dab296e267c4d1038a3b63bb2bad","ssdeep":"","tlshash":"5ae0f1983cd9103053b70254abbf440d7019241f2c4eac30e00a48022f5d9be0c6b80d","size":400,"data":"","first_seen":"2025-11-20T07:32:05.609996Z","last_seen":"2025-11-25T12:08:08.153605Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"299f5885c50825e666261b1d8c257f4f","sha1":"41eef8324ceddeca39e5c404390875c6975f5a73","sha256":"e6a197cfb9ca91199b91bcfeacf2206e5934b9bc4cb179825aa4a36c8a343ed7","sha512":"3c310080bbbead5375286c773048f9a67358aef35ae7f1129130a54b1e5e640139ef08d92a4165c46d1ef1875e016423b45e856b274c77649acf14ee199dfa4c","ssdeep":"","tlshash":"8c512362c05e2d77f1976324453b3524eba93d4f59c88b14ba2c02d80f5c6fb23ade4a","size":2922,"data":"","first_seen":"2025-11-20T07:32:05.611496Z","last_seen":"2025-11-25T12:08:08.155067Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_02.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_02.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 18568\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx3zrsuf1ebs\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:22 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":18568,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a7fd9fb4ae910ec3350bfa81bbfe39d","sha1":"b2391c48285675b772c5f3c87b473de4635b9ec0","sha256":"33657606d80f14f89ed62f3bf2630517c547721ef71d80f9ba5bb74bc5147408","sha512":"371e8a076fb74f7783be8ad58937d8ff0c32912cc1f6c349be4a0f9092f8bf18c94b5cbc39100e44f564975c5040d369ba2d2f234a5fa9e45c472bf03d8535e0","ssdeep":"384:wItX2sFeJgFJttxkgK1UlaK0VtFW1F1ziPGnDGnst8Qq:w6XygZtGgK15xVee+mZ","tlshash":"ac82d1e94e78ac000c3978109abc4ae99f01e257a931756f185bc596b1ca1e43ff7ee4","first_seen":"2025-11-20T07:32:05.566535Z","last_seen":"2025-11-25T12:08:08.144701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_04.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_04.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9264\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx1d263oc75c\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:16 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":9264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d355005968d0250be92f648287d31f94","sha1":"5dd65a0120b625a850b9e000622f14628eb59721","sha256":"22e73a174f039aad7051e0ec9035a38a5ed5a2c461a378d97f89b72636ebab7c","sha512":"76151af60f7fa121447954298108feed4633c32cf52b2c5ceb418a81e6ad414c55b3271b6ee57a876cb7e3b5f8b2085f5e1f997e9bddeb01f423f99259d46c60","ssdeep":"192:5G0ToHqmx3dKXw9BPOTaLevXyxR0F2mHHuNtlQcCb4u+wU/aED2SCP:oWkRh9BmnIabHuTHiqaED2SCP","tlshash":"24129f1e21977695a8a6149f3f3b8186b432c1e7fc032c0614ceb3a73d19536d52d7a9","first_seen":"2025-11-20T07:32:05.569858Z","last_seen":"2025-11-25T12:08:08.128758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_11.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_11.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 10778\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx1jzmil18be\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":10778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89b53fff7365edc26d11bde1a6c2cd3f","sha1":"a161976bcc09cb543a2ec96f9a65956d9b235e82","sha256":"64106e54384dd93b84b33c16af78adf8ce5f49a52b04b7757a8a9ab7d0503d7c","sha512":"3f63b0281d699f01c2d1700520e37e085c4ffa9569ce64078f917e145bd35656efab38d396cc564e5b49f574499979d3639097ed0c308b461881c5ff0d81d10b","ssdeep":"192:m6635EtgHBDvORMYXbmWwKfHLJI1LxNnD2N5QY2WCPbVm1TJRq1eMAlkoRU18:mWgaLMsVIFn+v1b0AGoRUW","tlshash":"4822c04d8387dc2020585bbc65a344a69e5bdd5cc689fafaf1ce1cda7e022c4730835d","first_seen":"2025-11-20T07:32:05.57263Z","last_seen":"2025-11-25T12:08:08.121866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_06.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_06.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18024\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx18evfs6dwo\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":18024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a03d2f3f905e447dbd82283ad0df1d0","sha1":"7e8976425663f2f30e48e5187bb6b5028a07ef0e","sha256":"1a732e735c1d200231621838fee8da4eed21861967919c4a045cbea1487dadb9","sha512":"9cf68fd61d36f1f1a89fe26362d237f71d35107229f44b075b61633ecb9179a6dbd47fea548bec47268d8684061e501a8526a9077c669de9dda77f20ae8c0036","ssdeep":"384:BL5fZZF0KZeN1DtVYEQ39oN19y5pKcTyO33V6bVeb3IO6jR4D5Ys:BLLZFStkk1Qfuw3IOo4D5N","tlshash":"3282d12ef5289abe893aec1a1df6751c48b26abc515c943b0a015ff0d63f11d4397c2e","first_seen":"2025-11-20T07:32:05.575027Z","last_seen":"2025-11-25T12:08:08.094147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_07.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_07.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx3xhn3799jm\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12370\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":12370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a15f7672c0689fa1b48c9d589ff44c1","sha1":"372f644d7bb495de946da800befbc943f67da604","sha256":"b055295e2191933880d2e37907ce23536afd808f17b2126c50ff6586506b0c62","sha512":"3bd4c78fd7b2ad06bba7041c83eb67eff660523f30d18166e219c59fb6f4b8bded420eab33b641116644569defab68906ba983d2f7c915ce87469a92a097c878","ssdeep":"384:vsG5tR2IobLpMwqBAmzFIUOutUgwTJDZY:vpUIoX2rLz7VoJDZY","tlshash":"1b42d03e08a0b9d9b0f8b0ed06587cd0ae85c457cf45f052b4275742f2b5f6d919a9d3","first_seen":"2025-11-20T07:32:05.577425Z","last_seen":"2025-11-25T12:08:08.13081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_13.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_13.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9090\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx37yeixw70i\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:20 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":9090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3cd2399a53e61a580a6c40eb0c7968c9","sha1":"094d22d5659a5d57b3bbad4c02b653d311f0278e","sha256":"08d51a9a94b6bb5ac276d3d89343697a6c6ce372047328413b3750e15357a883","sha512":"b4f5063bcaaf5688f59b310db7b402bd1c8437dd22e7a088ae127765f8378098c6a6337058ef468371aa84ccd7451acd82fa8d3e855dbb9f37fcd861ae346a6d","ssdeep":"192:CoKAnEb6AcWaoyYsnYfpAY9isrTLqzjvBUS+/2xF2cDuecNPJk:HvEoWfsYmmLmxFjDJcZJk","tlshash":"e612bfa83945ae8cca10da831ff1f0367f10356e263af7c43b76a45a55c04885b8f91e","first_seen":"2025-11-20T07:32:05.579812Z","last_seen":"2025-11-25T12:08:08.136981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_16.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_16.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 9788\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx3lgtagt7jw\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:21 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":9788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56c336478f47a8d5e01e886eda510975","sha1":"a8708cc6a10f38b6e8f16411bc73b667724d09d2","sha256":"e10b0a3ad55d9fbf92771410729651306bd0df2b392330212d0a250a80aaca5f","sha512":"b34aa29d50912740b59a88ef6dc92b1cd40e4a0f24c09398e4da3f3ff0c7f53b89b52a84d40e8e5b3450a0d3488005ad0d45d09072c7a935f2bd3888c6d40cd3","ssdeep":"192:0s3e9W7YrM2tLuHXIc58JD7RLHKAhLKDfNNPsMs5qjn1m/zxVan8I/xG/H+k:0sO98YM2tLkx587snDfNNWg1m/NVs/UJ","tlshash":"3c12b00c7dabd0c0854ea924134ceb4c8199fbcd4595bf94b26d2863b524be6d2b18ff","first_seen":"2025-11-20T07:32:05.581609Z","last_seen":"2025-11-25T12:08:08.147827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gaming365.ru/index.php?key=b2de3161c3638f7e15a2\u0026cid=n2jjzwnmztctotmwzs00owyzlwe4ndytywewnthkytg5nmzjxziyodm5xzy2zge5ndy2m2yymzhftkrrd00xoxvzv3rrwmpanlozz3lhamw2yjnvx0rfx1dpzmlfqw5kcm9pzca3ljbfbw9iawxlxzjfmv8wljawmja3mdawmf80otazxzaumdawmf8xx3nodxe0egnpa3lhxw\u0026payout=0.002070000\u0026device=mobile\u0026campaign_id=22839\u0026pub_id=4903\u0026traf_src=aff09000022\u0026site_id=26b75ebc","fqdn":"gaming365.ru","domain":"gaming365.ru","tld":"ru"},"ip":{"addr":"5.200.60.25","port":443,"asn":48096,"as":"Enterprise Cloud Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-20T07:31:39.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gaming365.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 13:36:45 GMT","end":"Sun, 11 Jan 2026 13:36:44 GMT"},"fingerprint":{"sha1":"8B:5A:ED:AC:19:82:92:05:5D:04:D3:F3:C0:72:C4:95:67:44:40:D7","sha256":"E9:A8:47:C3:B2:FA:7B:5E:72:E3:B6:FD:23:EB:62:B5:7C:A2:CF:8D:D5:31:EE:E2:1B:10:30:8C:08:C8:94:1A"}}},"request":{"raw":"GET /index.php?key=b2de3161c3638f7e15a2\u0026cid=n2jjzwnmztctotmwzs00owyzlwe4ndytywewnthkytg5nmzjxziyodm5xzy2zge5ndy2m2yymzhftkrrd00xoxvzv3rrwmpanlozz3lhamw2yjnvx0rfx1dpzmlfqw5kcm9pzca3ljbfbw9iawxlxzjfmv8wljawmja3mdawmf80otazxzaumdawmf8xx3nodxe0egnpa3lhxw\u0026payout=0.002070000\u0026device=mobile\u0026campaign_id=22839\u0026pub_id=4903\u0026traf_src=aff09000022\u0026site_id=26b75ebc HTTP/1.1\r\nHost: gaming365.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nlocation: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nserver: Caddy\r\nset-cookie: bc2524=sploc0|a2a93768fc2744092e08747073b56e5e::3806:390; Expires=Fri, 20 Nov 2026 07:31:39 GMT; Max-Age=31536000; SameSite=Lax\nrc2524=sploc0|a2a93768fc2744092e08747073b56e5e::5784; Expires=Fri, 20 Nov 2026 07:31:39 GMT; Max-Age=31536000; SameSite=Lax\nuclick=mrTYxQ1aaNM1gOvzbGCYsBKwCsHyoCb9q0KRtWQlNBdaxttN+2MHb0+RtStGvCzvAtDZaPRN; Max-Age=31536000; SameSite=Lax\nbcid=d4fc7mp6gjcc73euvhjg; Max-Age=31536000; SameSite=Lax\r\nx-request-id: 7ad883f7-2875-4e05-870b-2b9659131f43\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":62330,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":133,"dns":28,"connect":45,"send":0,"wait":53,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/logo.svg","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/logo.svg HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 17 Jun 2025 14:40:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2265\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx449qmht1qx\"\r\ncontent-type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":2265,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdd4df9edbd1875d6768cb39c2d9a1ba","sha1":"5625f97c18c026ce76db2f6705997c3c3d0f3620","sha256":"a02d0238a84df645337a300909bc48a84a0840bea233e6b4f242b9038f02a338","sha512":"8c8357a36cae5666de3ad663a15cad9d25812dafdbe931210f5fb54053a2a54d8afbddf970d558c37288c2b97feaf1124fbd2a79b945823fdf1c575c6309bc44","ssdeep":"","tlshash":"2e4133fb73b472c888c4e7fada351435764748e327139f688b798d5df9e444c9494881","first_seen":"2025-11-01T20:32:12.373303Z","last_seen":"2025-11-30T14:51:48.017004Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_05.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_05.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 19460\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx4235gt6f0k\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:22 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":19460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4bc0bd168d02a05572004fdb903b5139","sha1":"083c38f25942537ca8112c4bf7035acd08978f0a","sha256":"a90940b9b75847793b06f692b2bfc32a5f7b08b6f5466565bb03d6c3de894ccf","sha512":"aa0b9013fed39fa309bc9d247169d6dc3c12cc0cc0ea5f6c8deac10d8354bc74e8aa5b269d9ce032278a491d344e070d5a76b7632bc4f93bfa3e594cf6b74274","ssdeep":"384:o8/Ne/obTkhcJ/5opJ8ebhSDRzfegTCPfNzyBPx4LvLt:oiNewnRKpJ8ASVD5Uly/Wt","tlshash":"6492d1a18e03a633d0ebda630336e471d0578f75f7e0863865a3176dda590857a29e00","first_seen":"2025-11-20T07:32:05.585871Z","last_seen":"2025-11-25T12:08:08.109803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_09.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_09.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 16796\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx4jqzxiscyk\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:23 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":16796,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ea638e03ad5863754f0caa154a4f2e43","sha1":"ad2341c12888cd7e28cdfc3a09b81e7d0c43b4a7","sha256":"2117f6160620faf613d1eea17d7167b5dc4fe1f3fdce5dfc804825eed4ded5ca","sha512":"fb6eb630443182ec2e8392dcac36f0a09ad8e3c17e163accf0efa08581d3a6a5f20a52230aa580c03de2d5f58aa995030a0cd90dfcd749234acd2fd983454259","ssdeep":"384:9eLz46T/42ZPchkgr9XvA6C3IFzzoJbvMGP7v2e2Q/YlS:6c6T/O38I1zi2e2VS","tlshash":"7e72e015d1fcfab458d08aec939ed698e3288ea33d873e898d0d1a14413f63d8f48586","first_seen":"2025-11-20T07:32:05.587786Z","last_seen":"2025-11-25T12:08:08.095677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_01.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_01.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx1odzor57ji\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":9774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2bc58f3e60a2bc35a228fb2fb24ef4d","sha1":"12f576c9fa30db2bb486f94589922fcbe1407eb0","sha256":"07920b59dd4d51ccdc4528c136f4fdaf129fae9f565de03ef2846840306d8f6f","sha512":"580963def4c54d89175e33c38b74b7117da2a6ec01681711beaedd3cafb8496567170d99775efc323e9d7547360e3802526cc60b2a43cc0fbf817fd054f22e14","ssdeep":"192:LXUmqVMMsOHcemuRjKhZHzX8qqQJOKGY5xuWYINtwhuekSyeofvhUv:lqVJsOH6Q+hNzMFKX4mwvByekUv","tlshash":"dd12cf22f5bb6dd2cb0ec5ae1ef5ac8b8d625c3347a30a94dc463255a6803857c4fd4e","first_seen":"2025-11-20T07:32:05.589869Z","last_seen":"2025-11-25T12:08:08.091997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_03.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_03.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx3ns5wtl8ay\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10762\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":10762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12932f6aacbb2d35bf8a28b137839e8e","sha1":"196150ac5a47d6239d83032360543b4571dd0878","sha256":"8790f75696397e5251ab50ae319d8239991a00bb064c54c983f392820ca01946","sha512":"cc47497725258fa5f485cfabce003948e88956f841da681ec8786690b9959cbacc99d43026c38018a0e68e12f95f4c8f87175c1115832b8633728575dfce64fb","ssdeep":"192:uwVz+cCLy4hLUAd8Vkncxc5hJdgxGeI7cmJm2JmQUFbACt2VjeZt:dzE5h5eVkg7keI/mlbRtwiZt","tlshash":"7822bf88813ffe551b287a634dbfec266cfd0bc266f921d44641d84d6cab034e61e026","first_seen":"2025-11-20T07:32:05.592023Z","last_seen":"2025-11-25T12:08:08.126086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_14.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_14.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx2aspdhwe86\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":18438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3ed510be19be7d77953058d6aaeac690","sha1":"b27635c585717d4ba403260e717ebff2520d235d","sha256":"60c44fdddc62548711b0b9835facbf2cb39bc3f333f174cd40010d07b3a5ce6e","sha512":"317e8da7c1b7b179b050639d26bc0637dcc73a110e85ace5a9823c2b9ab9891411bd1d1c432e9e811eb4e817632985eab7a62410708bfa5f74a513d28ab5f26b","ssdeep":"384:umHuvtYD3b7hWguOY/tl6hPALHmT+D5D4nIH7n9DaelJdTRk:Leejb7hWmY/KNALG8D4UhnlJdTW","tlshash":"8e82d050c764d8b3ebe03a017b6d2d00d235a6ececb7d044c8ddd6bd086893ca72ad18","first_seen":"2025-11-20T07:32:05.594708Z","last_seen":"2025-11-25T12:08:08.101499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_18.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_18.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 17 Jun 2025 14:40:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11106\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx13s67h68ki\"\r\ncontent-type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":11106,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be5185eef56f157863eabdec69ed5de6","sha1":"222753ffc960d688d60fe89ce7afd66740275379","sha256":"6da66b1f11a36ee6e48cc243047c7ea644512dfa7fd04dbd60ed45db55b366a9","sha512":"5a06b8a88ac07fab71b0011a2b24b5622068179bded12b00d8620671504d9bb96e37a9847194d8a682f70ed72d3a14ce080a7b959519a2c0adb2d190080d68c4","ssdeep":"192:5KS85jdT6yJuNEWFUqWkpkJATn7Q+kGso288KkkVJYq14YfE3GuXdOVXj:dW3XW8xAXd+8rpoqOp2uXdAT","tlshash":"4b32c1c26b39c5705bc12c7026f1f1b03add4139f69c039277a5abe415351c5b8ead5e","first_seen":"2025-11-20T07:32:05.597165Z","last_seen":"2025-11-25T12:08:08.151154Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/favicon.ico","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: Caddy\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-20T07:31:39.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022 HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\netag: \"debt4nch22vg1c3e\"\r\nlast-modified: Tue, 18 Nov 2025 12:08:24 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 62330\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":62330,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8d5858382d8d711c8db8c2d2fe4cd3aa","sha1":"3720883d63381e5c6394ce971a722fb5b105d7cf","sha256":"221ef2596be409005acb6d76a5d221637c558bbb7398d4723bb40a5a0a8e9514","sha512":"0706e14b5032a7c35225e4ee5b13b9c821cf201a541082c26d5d48cfdd3fe0a54129a32f3bfe44904ba4b4fe6d449be0361a476d2103d5cc7c5b7e6394cad9f1","ssdeep":"768:2yEFu4bQfUbH+bY7Pv/TPrkZlDFJQFfFI9TYThsAqiqfqoZMZfZO+XhKT3Xufta4:2yhqbTY/QV+dWlGYeeVNV5","tlshash":"1653893214f614ab1193a2c2af311b1a7fe2d91bda4b9a1576ec1bc89fc7c92dd1311c","first_seen":"2025-11-20T07:32:05.599025Z","last_seen":"2025-11-25T12:08:08.08926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":60,"dns":1,"connect":23,"send":0,"wait":24,"receive":52,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_08.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:39.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_08.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Accept-Encoding\r\netag: \"daovx2nz7gt28x0\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11556\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":11556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b98ff6d728f260da4798fb842345bc1","sha1":"37b593a5f2ed6e1ddcad0fe6dc48ff7daef88f8e","sha256":"4b724150b52628647ac9b403c6cbc2b4d9e74fe73ec655d888b15dd5bb116ff2","sha512":"cc1495283cbe5d61d7072f33fc78d27fcba10b441806a4649cb112376b8184f882ce165dbec586786f9e3e54133a574f761d874dab07a9ae88730e0444420d32","ssdeep":"192:shTcXPHhGEsKMiFkZErjY/izmH1GlrgCkurxUsBWhQS2t+4lfDDN9HkGTxbW76hx:sRWGBPiFkZMjYImHAgpu1Us4iS2rD7ka","tlshash":"9532b073101650e29f7c9adc42f827608fa55567eda0ecf0bc112da61d7978c09d336b","first_seen":"2025-11-20T07:32:05.601042Z","last_seen":"2025-11-25T12:08:08.134182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_10.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_10.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"daovx31c9br5d1m\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16906\r\ndate: Thu, 20 Nov 2025 07:31:39 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":16906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b7741b5ccbbd56aac0c6912e55caad5","sha1":"1f4d4a1721c9677697dc0d90f7d8f6600585f22e","sha256":"290a3daa1a7071a604a4b7763bfdad50ec4996b58c533dbfda25513e73af6ea0","sha512":"2a7d33ff4ea4986af5c78444315582cb9dbdb5d391de05e53059645b4a90af561f3001b03e17021dae0988d46e9575ba8d867c0a1099ccc6fa2c1d8e753d7548","ssdeep":"384:3Z7AnJuy9An3fTb5cHRecajLpCbAEsqODwfPkWe86MtfiuVQMN7:3aJu+CfeRecm/3DIVl6+fim37","tlshash":"bc72c0225201b00d54a7ee919ea7dfca62c397f5f58791d9d4c539e3dc5b2800ef0da8","first_seen":"2025-11-20T07:32:05.602938Z","last_seen":"2025-11-25T12:08:08.097249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_12.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_12.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7654\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx2f72jqw5wm\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:19 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":7654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"88af40decb2b16d8b1665bae63415f8b","sha1":"6500f853d6f2ff22c602a06ea6bc9ac449057848","sha256":"f66aa18b3fd6390e2b9e859d53d2caabdac7dda890277f61bbb209ed937e145f","sha512":"3c1445775875f7e714f2c8b8d89388b122e7797c6d4f025f508922cceddbc4b1762bb9866df33ea23a0d22e085ca30231afc62944b68c89e3d564943a64446b1","ssdeep":"192:3YzQ4tOo0gNeYfXM/pFk/8UWA5s61ngGopQDFg:8Q3odhfypFnZA5s61kEi","tlshash":"68f1afda0976ee1b513c10ebe74dbb4a748a28fad42d360cf84c58d72d5eb400213376","first_seen":"2025-11-20T07:32:05.604732Z","last_seen":"2025-11-25T12:08:08.098748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_17.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_17.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-length: 8874\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx4ay9ka96ui\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:23 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":8874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42c8cae5bf7c63289953ebd48f818c91","sha1":"060ef394391da9973a7c3c23e7a4f004c64408af","sha256":"253d3db770ed5eed1b4fe7e031caed96388e4e1f4d460e4d0a4f031951032609","sha512":"48d32cc02706c020281cbdd1ecf1ae3750e38271a05ba768b49cae10d63a4f57377afb5706d5ccb73499c2e286446ad6e90b0bcba3318d6e814edbec9dc8551d","ssdeep":"192:4XZVxr66gLpyXOHQVhF/d5c5EgziL0zB3wmFD9y8g+E01sQNEHl:o5glMZV7/zAxiLKtrJ9phE2tNEHl","tlshash":"ac02bf2dc0168fa4f3e801af2d7a5c96057435eb39909429af23cf33ac63e348865743","first_seen":"2025-11-20T07:32:05.606463Z","last_seen":"2025-11-25T12:08:08.149682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nl2.ozskarfa.com/arb/0076/img/img_15.webp","fqdn":"nl2.ozskarfa.com","domain":"ozskarfa.com","tld":"com"},"ip":{"addr":"194.48.141.82","port":443,"asn":212017,"as":"Gerardo Cubillo Torralba Empresa Constructora S.L","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022","date":"2025-11-20T07:31:40.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nl2.ozskarfa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 11:45:26 GMT","end":"Tue, 13 Jan 2026 11:45:25 GMT"},"fingerprint":{"sha1":"15:81:DC:45:8E:B2:81:3B:B6:F3:23:B5:A6:1F:FE:43:03:5B:0A:A2","sha256":"8A:1F:87:19:C7:69:43:48:1F:CB:A1:D5:85:68:BB:B4:F5:A5:3C:BA:B7:08:5F:6D:6A:EF:23:76:0F:A1:45:4D"}}},"request":{"raw":"GET /arb/0076/img/img_15.webp HTTP/1.1\r\nHost: nl2.ozskarfa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nl2.ozskarfa.com/arb/0076/?campaign_domain=gaming365.ru\u0026campaign_id=2524\u0026landing_id=390\u0026traf_src=aff09000022\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 11140\r\ndate: Thu, 20 Nov 2025 07:31:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\netag: \"daovx1qmyklm8lg\"\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Jun 2025 14:40:17 GMT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":11140,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x265, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d24900817dcb52ee020ea0566b9f27a4","sha1":"7c2d73294434e8c7c6c7523b85d200c65b4d3d27","sha256":"33a97acb13e191a0fc87e38f01eafad9b4af1b2100bb3708a7ad5d2b3fe47542","sha512":"b1d42fe4d082b9182b7cc4ffb2c344aa929941b44afc424e295efd56141c9f749f96dfb92bf6834d28ab3244a49587138a05985e2f36cfd4ec5cbe93c5beaff0","ssdeep":"192:d6yZjxj3C3e58iNuvY/Mi7a4lHr/cv4QxIbhSRp/jvuT214TIy66:dtjxj3ie58i0Y3N3Qx4hSRATfTX","tlshash":"4d32c0193becd4fdc6ff89722542837ccc764e65e3162948d3eac06e9e99502e9bc610","first_seen":"2025-11-20T07:32:05.608157Z","last_seen":"2025-11-25T12:08:08.108003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}