{"report_id":"43c04a19-0b27-4b7d-a468-940571c10564","version":0,"status":"done","tags":["suspicious"],"date":"2026-08-02T00:23:54Z","url":{"schema":"http","addr":"panfilova2.msk.ru/earthm","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":0,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"title":"EarthLink Customer Portal","dom":{"size":27441,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8811)","md5":"2d4d3ea9f7aa9e428be4ff394892cf26","sha1":"53d9a35d4416cb8ff2602c268fd5bee8bf122d94","sha256":"68f9b4687164aff041c59b1863e96eb10215c361756ebd25f4aae13a53dc1f87","sha512":"3f7e7c985157f315a457d204fc5b7f8ec338a60b68008533ca972b2310a41140098bdb165e264a47b37731e82d592bdfb3b6ae7e4e1739f3c724633186853c88","ssdeep":"384:+nXkB1+7tognx1xqmXM/z0bDiErkHEEJ0u9g/hvQ4bT/Q+KlQFOQ:+nXW+7tognLxq4MJ20EEJkvLvfKlQFF","tlshash":"72c2291120f5113752a292c63d65bb2e7f83b557d64e2a0472ac0fee8fe6d82cd1718e","dom_hash":"domhashcb25c94a271c74607d5912072866d0ec","first_seen":"2026-08-01T16:42:32.822515Z","last_seen":"2026-08-02T10:50:53.326687Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"panfilova2.msk.ru/earthm","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":0,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-06T00:23:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-02","alert":"Detects file containing Telegram Bot API","trigger":"panfilova2.msk.ru/earthm/static/js/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-07-27T08:22:04.001996Z","alert_count":0,"request_count":2,"received_data":123848,"sent_data":1078,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"panfilova2.msk.ru","ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"1998-07-21","domain_rank":0,"first_seen":"2026-08-01T16:42:28.817753Z","last_seen":"2026-08-01T16:42:28.817753Z","alert_count":3,"request_count":13,"received_data":1117877,"sent_data":6687,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-26T22:43:30.214545Z","alert_count":0,"request_count":3,"received_data":89952,"sent_data":1554,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-07-27T08:16:23.24002Z","alert_count":0,"request_count":1,"received_data":22951,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d1s2ox1zk22ocs.cloudfront.net","ip":{"addr":"65.9.69.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-25T08:50:02.416007Z","last_seen":"2026-08-01T16:42:29.56723Z","alert_count":0,"request_count":1,"received_data":19810,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":5,"received_data":192845,"sent_data":2855,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.telegram.org","ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":206724,"first_seen":"2015-06-25T10:09:00Z","last_seen":"2026-07-29T09:38:57.563544Z","alert_count":0,"request_count":2,"received_data":1013,"sent_data":1188,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":3,"received_data":59080,"sent_data":1629,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-14T06:34:35.503274Z","times_seen":142818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8d6b6c6e7cd5d474b798864ef19992d","sha1":"632e185f39dd54a4059fbc1ce5ed093e84b7710e","sha256":"93117f898ef5c947f1af63dabca18e4770233c4ea6b008663bc8ead7a7bf8fa3","sha512":"35cc42b8739fa497c74017be0eafb2f4f39f487d2f826d3a7a46ea34bf98c72de367bcfd9bfb9b406a357e3d14a721afef4055aa65b24d809b4ab6c72cc966ac","ssdeep":"","tlshash":"41e02bdf2008453909b3d0e92e2f73843a773176614321404a4ca950ad3cf2b93979cd","size":382,"data":"","first_seen":"2025-07-13T11:12:22.518517Z","last_seen":"2026-08-02T10:50:53.361234Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e54676c2d73e2a950e4f4e4e0b2d3f97","sha1":"a4f6d6d95081f59848b96de81638024a87b5db2d","sha256":"74813c736fe138726c91ceffcdd00f39027a3ea309879bd702b1b130dd988777","sha512":"4da9fc494d13bba329ed9dd2c697759391b133e188cc9d949480e3bce2fb602e725018127e825aa3916190526a62e507310ec1b713ca5a6cb82a9a4a2eb1a195","ssdeep":"","tlshash":"8131019936d173788247f0b458afec45f26c196d02b9f88c975ce4b9e83241893bcc9d","size":1851,"data":"","first_seen":"2025-07-13T11:12:22.520208Z","last_seen":"2026-08-02T10:50:53.362072Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"322efc5f0e26f5abc36a757d4515a4dc","sha1":"6404c01fb3a9c5c5f6d1136d20ebdf8c15ee14a2","sha256":"25c427909324fb3d9eb49799ceb5feca32af8e9c669040f468c8af0c4fcbaae9","sha512":"eca4e615daca983e547beb7294afdbc61326f7e69dfa2ff3b21396d7bc87b758bcd3f81f1024492123843ccb636f0d3b8253277b2265e2468651c7883f755cd3","ssdeep":"","tlshash":"a860000c00000000300330c0f30030000c00000033000cc000cfc030c303000c003c00","size":15,"data":"","first_seen":"2026-08-01T16:42:32.852545Z","last_seen":"2026-08-02T10:50:53.362899Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/config.js","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"28d01f709e5f0409f9479fecf28850b9","sha1":"70a5df6921839ae537e89b7fa2fde73db3db6026","sha256":"b3323283dba48e9043cf26f75ee677c177251f4a1fb1d60aee87efb48fadd6ad","sha512":"499b7964a9c476411c56f56673d2480c3364d93d41c06fff01e7e43f092cadf8bbf925aea43d1013fae906c384402a06c12d11097fe044593914b1bc0c18c28f","ssdeep":"","tlshash":"efc02be802285123000b1dc50044c031f032400cf847c4d9f82d80c0cabff0090b4231","size":147,"data":"","first_seen":"2026-08-01T16:42:32.833224Z","last_seen":"2026-08-02T10:50:53.356856Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/static/js/script.js","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf3228987e42fdd8ffa6273ae0f1f42f","sha1":"25ff834188c0b70ee8b4c5f9d48a6ae0ef3a46b5","sha256":"7f5e98b4dec3174da415813e7dd113d4e0b886b762abd5bc763da5dbad9c0466","sha512":"e7d2741995b3405cf4742db77c9aa61692ac7243f2f7b98775c5d8b0778cb08dec10243c57303abbaa3911d1a97a7577a58e2829dc4b6fe6f6f2c41a3ab61b9d","ssdeep":"","tlshash":"a621328612da09a55bb3e3b22613510df573c3372984c1c17e2c859e0f76e8260b1fe9","size":1346,"data":"","first_seen":"2026-08-01T16:42:32.829283Z","last_seen":"2026-08-02T10:50:53.341307Z","times_seen":7,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-02","alert":"Detects file containing Telegram Bot API","trigger":"panfilova2.msk.ru/earthm/static/js/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Message sent:","filename":"https://panfilova2.msk.ru/earthm/static/js/script.js","line_number":22,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.534Z","timestamp":1785630206534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Jul 2026 18:07:06 GMT\r\nexpires: Sat, 31 Jul 2027 18:07:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108980\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T06:51:58.28859Z","times_seen":549212,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":28,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot8652379563:AAFsmJ5rgrxPVXht7ZM3hXGnxEE-wbGO4Mo/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.545Z","timestamp":1785630206545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:09 GMT","end":"Sun, 13 Dec 2026 15:14:09 GMT"},"fingerprint":{"sha1":"EC:27:13:72:1E:6C:94:9F:47:59:A4:24:4F:AB:9B:02:E3:6E:54:41","sha256":"64:47:03:9A:C9:ED:B9:03:8C:07:6E:AA:3D:BF:75:4B:4C:C1:4E:C1:A5:8C:83:2D:3E:FD:0C:E7:F7:82:C2:71"}}},"request":{"raw":"POST /bot8652379563:AAFsmJ5rgrxPVXht7ZM3hXGnxEE-wbGO4Mo/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://panfilova2.msk.ru/\r\nContent-Type: application/json\r\nContent-Length: 57\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"chat_id\":\"5157201609\",\"text\":\"📩 EarthLink Incoming\"}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: application/json\r\ncontent-length: 294\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294,"size_decoded":679,"mime_type":"application/json","magic":"JSON text data","md5":"2d501de5c93acc911f1eab26b3041957","sha1":"d92fd79a0833f797b57a742df6dd53c28acc4b29","sha256":"e8d2336a8407dcb773c20b827a254ef0a12266f6f479d1d0f33c2194157c11c1","sha512":"867645a4d33e2aeb1f2e032e7a34b9108fa79d9873d0615a101cd2fa8cf04563c7ad466584f8eaeca6ae21d232b5c4ca6be05d64b1677594d46e2fa18e32d36a","ssdeep":"","tlshash":"a0e02b680a412d6c96575386b8903f4a9abc522795c89d05ba5dbe5c43e8249200b21b","first_seen":"2026-08-02T00:23:57.610656Z","last_seen":"2026-08-02T00:23:57.610656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,200,300,400,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.272Z","timestamp":1785630206272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Montserrat:100,200,300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 02 Aug 2026 00:23:26 GMT\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17343,"size_decoded":1474,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8099fd2908b8ff98a6fa32c13b3c27a4","sha1":"46fb2e3603399fb539bb43d472601b2c22644511","sha256":"f6ec0c0b2c87c966c56dd4a1622440388bf0da1ca5574d266d1994010a78ea10","sha512":"5d35d28aeb01a832abcf499a571a4e8e3f4e41ac214eedb2e4631e7a81352148c5a1ee172a933b22df8dacc01b0af6d1343c22a5e90506ce93e21de72671a2c2","ssdeep":"192:NpRdp7opQpOPpu9R27hpOYu+RV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7D:Nnd1oWQIOrRPQPTzajdfMfPE","tlshash":"a872ac91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac225325b3d","first_seen":"2025-09-05T06:25:47.318539Z","last_seen":"2026-08-14T03:25:53.990671Z","times_seen":3839,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.4.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.277Z","timestamp":1785630206277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:47:15 GMT","end":"Sat, 19 Sep 2026 05:47:13 GMT"},"fingerprint":{"sha1":"56:7D:E6:34:CD:99:1D:3A:86:60:3A:0C:55:7C:7E:C8:F3:CA:97:5C","sha256":"91:DF:1A:31:E1:02:E5:20:5D:FB:5D:28:52:C7:B2:13:27:02:F1:DF:C8:65:11:80:77:BA:34:41:7D:64:69:FD"}}},"request":{"raw":"GET /releases/v5.4.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSfmHqGrBJPmrBYGBpavWGS3nLhQ2RXbqe2JPtTsF10f72%2F9JBtT6ZibukgzBfIc5eyVnoKvcXi5EXgZYbCZvt2BLqNmmDBoS5k4gXaPKATdIcuRiOV5AH3HqXdOrua5rLHbqWFv\"}]}\r\ncache-control: max-age=31556926\r\nlast-modified: Fri, 22 Sep 2023 01:45:32 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1874194\r\ncf-cache-status: HIT\r\netag: W/\"beb60a9475685e87a9738a7306591e69\"\r\ncontent-encoding: zstd\r\ncf-ray: a248ef155f5b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50397,"size_decoded":12373,"mime_type":"text/css","magic":"ASCII text, with very long lines (50212)","md5":"beb60a9475685e87a9738a7306591e69","sha1":"f5b6069de431453cc49494bf6ca5c619fbcab71f","sha256":"4d3b4d5d99f92dcc1f1c169db00f76aa1dc65d5d82192afcff04cf8a018a7ba1","sha512":"fd151bb476a454c26b83520bb70bc321c79bfdc0e493deeb58abdf9c54933a635bcad0b213296eb43a9e12bf5a7480727b7b2e0f745f72c5cb38b06a6115b883","ssdeep":"768:MJa31EzKOSd6FmUxUfXkQ1T/7Mzj3vbhBU92Q/h:MJrz706FmB/B1vgDjURZ","tlshash":"5f330cb8e54c41c9a731c04fff82b2b861b6f73ce5854d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-05T21:51:44Z","last_seen":"2026-08-13T22:26:15.84951Z","times_seen":1647,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":14,"connect":7,"send":0,"wait":5,"receive":-1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/static/js/script.js","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.284Z","timestamp":1785630206284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/static/js/script.js HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Jul 2026 09:59:34 GMT\r\netag: W/\"6a478806-542\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1346,"size_decoded":953,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"bf3228987e42fdd8ffa6273ae0f1f42f","sha1":"25ff834188c0b70ee8b4c5f9d48a6ae0ef3a46b5","sha256":"7f5e98b4dec3174da415813e7dd113d4e0b886b762abd5bc763da5dbad9c0466","sha512":"e7d2741995b3405cf4742db77c9aa61692ac7243f2f7b98775c5d8b0778cb08dec10243c57303abbaa3911d1a97a7577a58e2829dc4b6fe6f6f2c41a3ab61b9d","ssdeep":"","tlshash":"a621328612da09a55bb3e3b22613510df573c3372984c1c17e2c859e0f76e8260b1fe9","first_seen":"2026-08-01T16:42:32.829283Z","last_seen":"2026-08-02T10:50:53.341307Z","times_seen":7,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-02","alert":"Detects file containing Telegram Bot API","trigger":"panfilova2.msk.ru/earthm/static/js/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/images/earthlink-logo.png","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.294Z","timestamp":1785630206294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/images/earthlink-logo.png HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 2121\r\nlast-modified: Sat, 27 Jun 2026 08:50:04 GMT\r\netag: \"6a3f8ebc-849\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2121,"size_decoded":2397,"mime_type":"image/png","magic":"PNG image data, 250 x 49, 8-bit colormap, non-interlaced","md5":"bd71cdb7e825eb705f55655e4d92e764","sha1":"bd6056824154239f120e99dc7c28921e94714132","sha256":"1c93bf93bc30700d0cc606fcd51f29dbbb34c3d34dd2a521308f7b052145a2e4","sha512":"e07c4f2434a6e3149ac65b07dc102232c04f26032629b2282f59c1a36eee8541a2eb31b64290a47897868d34cfd4061882b8493e29beb75d1f2d8853ab2df049","ssdeep":"","tlshash":"8b41b7be30b109b700543f4bac52b7945eb92b9d027b49c1b10cc19b3a593649678f33","first_seen":"2025-07-13T11:12:22.511114Z","last_seen":"2026-08-02T10:50:53.352295Z","times_seen":25,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/static/media/affordable-award-gold-uai.ee18d396.png","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.295Z","timestamp":1785630206295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/static/media/affordable-award-gold-uai.ee18d396.png HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 73417\r\nlast-modified: Wed, 04 Jun 2025 17:45:48 GMT\r\netag: \"6840864c-11ec9\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73417,"size_decoded":73696,"mime_type":"image/png","magic":"PNG image data, 516 x 456, 8-bit/color RGBA, non-interlaced","md5":"ee18d396a6e32691109d066b0ca71430","sha1":"d900e37a02e60156a39a52958ca6bbe9a66b5065","sha256":"04b54766ca545498b40ed0946c4d82cea793d8f0ad4ce3a04d51c8b6f8410605","sha512":"70c97569339c3f36bb6a96561b14c5a919df48e0b36b67e3f2e425f1ff3711878ccfd50870455ea9270b7e007faf4ea768b4f421418c8d2765eec8575683f54f","ssdeep":"1536:1V+pU1+QCvWRYF1WsuGTa8y4klZJjU6plHqlPO594lzblpbaOM9fMH5wGEkAvL:1V+p8Cv8Y+s9fOV7jqlPplIdkGmAvL","tlshash":"f97312b9c392b0f158280476d610e88d3938beab82f7644a7d4f923447cae71cc527f9","first_seen":"2025-07-13T11:12:22.496385Z","last_seen":"2026-08-02T10:50:53.343159Z","times_seen":25,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.533Z","timestamp":1785630206533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Jul 2026 18:07:06 GMT\r\nexpires: Sat, 31 Jul 2027 18:07:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108980\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T06:51:58.28859Z","times_seen":549212,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":19,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.539Z","timestamp":1785630206539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Jul 2026 18:07:06 GMT\r\nexpires: Sat, 31 Jul 2027 18:07:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108980\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T06:51:58.28859Z","times_seen":549212,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":43,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/config.js","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.282Z","timestamp":1785630206282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/config.js HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 31 Jul 2026 07:00:48 GMT\r\netag: W/\"6a6c4820-93\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147,"size_decoded":434,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"28d01f709e5f0409f9479fecf28850b9","sha1":"70a5df6921839ae537e89b7fa2fde73db3db6026","sha256":"b3323283dba48e9043cf26f75ee677c177251f4a1fb1d60aee87efb48fadd6ad","sha512":"499b7964a9c476411c56f56673d2480c3364d93d41c06fff01e7e43f092cadf8bbf925aea43d1013fae906c384402a06c12d11097fe044593914b1bc0c18c28f","ssdeep":"","tlshash":"efc02be802285123000b1dc50044c031f032400cf847c4d9f82d80c0cabff0090b4231","first_seen":"2026-08-01T16:42:32.833224Z","last_seen":"2026-08-02T10:50:53.356856Z","times_seen":7,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.538Z","timestamp":1785630206538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Jul 2026 18:07:06 GMT\r\nexpires: Sat, 31 Jul 2027 18:07:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108980\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T06:51:58.28859Z","times_seen":549212,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":37,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T00:23:25.846Z","timestamp":1785630205846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/ HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 27 Jun 2026 12:31:58 GMT\r\netag: W/\"6a3fc2be-6eaa\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":28330,"size_decoded":11993,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8789), with CRLF line terminators","md5":"659c9afc526c1206956bb8bbccbbcd76","sha1":"394207b9e0cee5a5ebd017f1e8c93c5b05939570","sha256":"4b9d8e42670019edab13522f7b98754a0168ea1586813a69e5ed3a299785a1ee","sha512":"5b64b3ab3088b2bda10808f04715d878aaa2a779554d627709e85e73d08c77cc06a659dc0360d144ffd4129014fe1ae1ff0b472d7ce0aae4c8a543b5989273eb","ssdeep":"384:skjDprM7ZXcv01xqmXM/z0bDiErkHEEJ0u9g/hvQ4bT/hWSKlQFw:skjRM7ZXcvSxq4MJ20EEJkvLvjKlQFw","tlshash":"fed2071021c521375273d2852e25b7adfe83a157a74e4a4472ec2beb9ff6e01cd2709a","first_seen":"2026-08-01T16:42:32.836487Z","last_seen":"2026-08-02T10:50:53.355858Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.415Z","timestamp":1785630206415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.13.0/js/all.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 353301\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peVxcLTWc4blRCQGYXHNs7bZXg37sPCjEGEG0%2BrN0LLMy0tXL5oWTrqYrtUpwpa84GX38xw24y5JHj3u%2BHUzFo9Qoi4tMSAPhPHnt5HCrYIJnH%2FahqxPttJ4f1BR6grmgcnQvA%2Ft\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a248ef1619cb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T06:51:58.728112Z","times_seen":17882292,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot8652379563:AAFsmJ5rgrxPVXht7ZM3hXGnxEE-wbGO4Mo/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.549Z","timestamp":1785630206549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:09 GMT","end":"Sun, 13 Dec 2026 15:14:09 GMT"},"fingerprint":{"sha1":"EC:27:13:72:1E:6C:94:9F:47:59:A4:24:4F:AB:9B:02:E3:6E:54:41","sha256":"64:47:03:9A:C9:ED:B9:03:8C:07:6E:AA:3D:BF:75:4B:4C:C1:4E:C1:A5:8C:83:2D:3E:FD:0C:E7:F7:82:C2:71"}}},"request":{"raw":"OPTIONS /bot8652379563:AAFsmJ5rgrxPVXht7ZM3hXGnxEE-wbGO4Mo/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://panfilova2.msk.ru/\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx/1.30.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":334,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T06:51:58.728112Z","times_seen":17882292,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":18,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.4.1/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.536Z","timestamp":1785630206536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:47:15 GMT","end":"Sat, 19 Sep 2026 05:47:13 GMT"},"fingerprint":{"sha1":"56:7D:E6:34:CD:99:1D:3A:86:60:3A:0C:55:7C:7E:C8:F3:CA:97:5C","sha256":"91:DF:1A:31:E1:02:E5:20:5D:FB:5D:28:52:C7:B2:13:27:02:F1:DF:C8:65:11:80:77:BA:34:41:7D:64:69:FD"}}},"request":{"raw":"GET /releases/v5.4.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/releases/v5.4.1/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 72000\r\netag: \"1dc5b6dd4bf409a6f919be38603f76a0\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:35 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 137797\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zi8DnEhrWuSuwU09mDkJdms2IqfwvJsFnbMlmauedUr7FlqXN5lFzn7UiRajP6tVlcCf%2FmxBqAbnprsnnTEzfakqhNI2bui4v7on9OALk2jr41%2FYqtadXevyWdoqU59F6XXrZ6dl\"}]}\r\ncf-ray: a248ef16e9bc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72000,"size_decoded":72748,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72000, version 1.0","md5":"1dc5b6dd4bf409a6f919be38603f76a0","sha1":"388c52a87094578015fb41ebb9147821f0bb03a3","sha256":"a5587a9dca3673b604a8a0e144d268f3dcb180aac337e2b2e163704bc1fc508a","sha512":"e25c9e0e671bf5538cc0defcd3f8cd5f4ea207d9a9a5770f3d39b911ad072d445e7e9215f8be5e0ba0bac0c43deb1bce906d24d09d4b56f3ffbfc7a9f40a88a5","ssdeep":"1536:648zAGW4G78K8XEOtOpKOALDPiixJdb7K5nWWNm0KrTh:6Gj4G4HXEOQ+DPiyJdbuUrt","tlshash":"2763127c5956de41254f30ec28aa2f7f4ea0d0757519f2b70cd29a891bb387e84283a6","first_seen":"2023-04-10T15:45:41Z","last_seen":"2026-08-13T22:26:15.846914Z","times_seen":1263,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":6,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.264Z","timestamp":1785630206264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27433\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bc4xatedid4QoQKloGgCeLMvVcX1gFXoZts7IzuSeTD3tutUupyjmWRWddnOzm6UW4hZtB7ECeJGhd8EmQrLCO1BZdkw6DVREXFqsLbUVz%2Bv%2BpGpLZ12uDAsrcE3LXOnEH9blm5%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a248ef15387c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86927,"size_decoded":28440,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-14T06:34:35.503274Z","times_seen":142818,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.267Z","timestamp":1785630206267,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /ajax/libs/font-awesome/5.13.0/js/all.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 353301\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFrdV4%2FxvIaSFaxGhN%2BRlC7VsHZxBF%2B%2FBhbyW0rtRDKitHxubszH83a%2BHkQVo1zxZtX2APpdmxh37V2onxxlkQlba4QJt0rbIySURt631ZV87G8VQtQmeQPucvUwQOISe5IRhgBM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a248ef15387d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T06:51:58.728112Z","times_seen":17882292,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.426Z","timestamp":1785630206426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 02 Aug 2026 00:23:26 GMT\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9635,"size_decoded":1349,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1c491ad8bf1f412fd7e344ee6474a3a7","sha1":"8b02d4ec345cec7a6347d0743c34863e15be09f3","sha256":"0566c29f30d970326cb0fe92e3feb0414b43977bda046919191c3dfe5c43e0ad","sha512":"1cc2333d2049b1033c94fe0e0ec3aa2dcd5b298acb8d31a2967afc060b69fb4c2dfe4ef795e1929f6249f2886b5ed4235f454c9a1d78dc64373c54573d379593","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+Oju8:zRPQPTzajde","tlshash":"1b12ad91105be500e6472cc923cf7e26dd4e21627494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-05T12:13:40.778268Z","last_seen":"2026-08-14T04:48:45.918867Z","times_seen":2948,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/images/consumer-auth-bg.jpg","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.487Z","timestamp":1785630206487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/images/consumer-auth-bg.jpg HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 232179\r\nlast-modified: Wed, 04 Jun 2025 17:45:48 GMT\r\netag: \"6840864c-38af3\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":232179,"size_decoded":232460,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2560x1468, components 3","md5":"eeb1c4dd3e319bfa9576993377c2c384","sha1":"ab76c9912aec0088f41001f787b24ac4c8c54f66","sha256":"8ba5dc438b84b8f12540d785a4263751bf854873e13ef54e3b177ddae274eb83","sha512":"ffb7616e4eaba52c76f14e1b648284bc45c8887ac0b82a2c0da3b976bf3bf77384fbe46626ff2ab1b534988dd95af19643014ef7c2534b1a8276b48b8d90ac2f","ssdeep":"6144:MO9dFWhkkpu42kLAaEGsq6gkXziXnjvoC:MOHq2kqkkXzavoC","tlshash":"bc342399c1036d137ffda7c401a6679040d048a03aba3a17ecacc925f17bd87aa79f74","first_seen":"2025-07-13T11:12:22.494205Z","last_seen":"2026-08-02T10:50:53.332181Z","times_seen":24,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/images/elnk.ico","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.719Z","timestamp":1785630206719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/images/elnk.ico HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 04 Jun 2025 17:45:48 GMT\r\netag: W/\"6840864c-9ad9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39641,"size_decoded":27487,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"98d810333c4844c9aa9e5f6815adb165","sha1":"9d04fc2d2a738721e941e5b318bde76d0600fc41","sha256":"04e823df8558331716235b6bbe984e6787da61b2b37119673fdd5660cf281f21","sha512":"937ebf41b79940eddee8c8230e26f4aa4deed0d51d816aeaa4b6b092cdf7cd80fa886cef34bc731b7fb36f57392c0e9bb464d969934c294b5ee0b232d14e947b","ssdeep":"768:+/QkixpnQmun1O5FB+800rLAKN9Ng4DZTu3zqKjUXq:+JGpnQmMurL3b3ZuzqPXq","tlshash":"ec035b47e25bc08fd6943ff465659dfd4580f884e5d16f2a2a102b1df8a2b0fae70e60","first_seen":"2025-07-13T11:12:22.514776Z","last_seen":"2026-08-02T10:50:53.354903Z","times_seen":25,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T00:23:25.473Z","timestamp":1785630205473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nlocation: https://panfilova2.msk.ru/earthm/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T06:51:58.728112Z","times_seen":17882292,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":215,"connect":30,"send":0,"wait":29,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/font-awesome/4.2.0/css/font-awesome.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.275Z","timestamp":1785630206275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /font-awesome/4.2.0/css/font-awesome.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"feda974a77ea5783b8be673f142b7c88\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:53 GMT\r\ncdn-cachedat: 08/01/2025 15:38:00\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1078\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: df1a6a95fcb46b4174a4c5cda4e0fd3f\r\ncdn-cache: HIT\r\nage: 6140231\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a248ef154844c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21984,"size_decoded":6012,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (21822)","md5":"feda974a77ea5783b8be673f142b7c88","sha1":"b71d1c7c315b67c614563382d1c2a868ac14d729","sha256":"0fb1bbca73646e8e2b93c82e8d8b219647b13d4b440c48e338290b9a685b8de1","sha512":"e64cd0c0ff8d301c0f6bd9fe60934362dce7be85af57c9c3e1c719e42f8784cf707bc9025b58fd1f341a6deeb27490e3fa8164aed9cc76605323a602544c8220","ssdeep":"192:sq3P/8W+ab2edrKeTUKIErArKlcZJVrJ3ee+cR6waWm215bvfwf5DrkHUa2:Lk5yWeTUK1+KlkJ5de2UWmyTfwYUa2","tlshash":"03a241f8e54c01d66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5faa","first_seen":"2023-04-05T10:40:01Z","last_seen":"2026-08-14T06:47:00.064577Z","times_seen":11923,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":2,"connect":11,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/static/css/2.1ff178fc.chunk.css","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.269Z","timestamp":1785630206269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/static/css/2.1ff178fc.chunk.css HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 27 Jun 2026 08:53:28 GMT\r\netag: W/\"6a3f8f88-96a20\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":616992,"size_decoded":94699,"mime_type":"text/css","magic":"ASCII text","md5":"58da4ed84bb5b10e2b6651874610dc6c","sha1":"ce6774ccc6cbff56c874a2fc5e398960cfc5ba0b","sha256":"71aa2c1bb09b029b82e09fbd9ffe21d316281d064b6d86c402f8c33b12f17147","sha512":"bc9932ba76d09cecb4ea32d3c96414b35fbfbea48d81dfd50625f5ea03a7f81235b8c9e78088983ced8c29ea334a542962d4712b65f7e134cfeca7cca5ecabff","ssdeep":"6144:40+XvXjXvXkXZXoXZXNxQx2HKdgzpqjCXmUmOgclfjJ+9pP:40U42HrzpqjCXmUuclfjJ+9pP","tlshash":"09d472a03ba1115ce61fc738a2d7ae756334e553950fdcbab7a13d0c8f85a8940e2f46","first_seen":"2026-08-01T16:42:32.844671Z","last_seen":"2026-08-02T10:50:53.346741Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/static/media/fast.6af89f19.png","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.297Z","timestamp":1785630206297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/static/media/fast.6af89f19.png HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 69537\r\nlast-modified: Wed, 04 Jun 2025 17:45:48 GMT\r\netag: \"6840864c-10fa1\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69537,"size_decoded":69816,"mime_type":"image/png","magic":"PNG image data, 516 x 456, 8-bit/color RGBA, non-interlaced","md5":"6af89f195eb38db14ec04ed8af824479","sha1":"588abf1c592f8d872bb9add7478ce105fca60e17","sha256":"8b01d7cfc66e018226307e13f53186f8daab9ecd1db63ce818c7952f29a2a8ff","sha512":"714b1976a4b9bb2f679d715dd7d10b9a2c8d6241d86a068e8f638b7c775ef86cca251483ca663c13f61b73508072856b79da2a4ff88eea677a348dc8734c0234","ssdeep":"1536:UtpckcZUCAprwxLpu9A/qFp+CwhMVpzyDwDyqzvfde3B:Urc3/SAQY50PNaB","tlshash":"bb6302fb4ba16e69c75cd54273ad092aaa7272954830c6d25e58c222fe7800dec45f2f","first_seen":"2025-07-13T11:12:22.51709Z","last_seen":"2026-08-02T10:50:53.344807Z","times_seen":25,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/static/media/hsi-best-isp-2020-white.8e24e1ea.png","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.298Z","timestamp":1785630206298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/static/media/hsi-best-isp-2020-white.8e24e1ea.png HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 20557\r\nlast-modified: Wed, 04 Jun 2025 17:45:48 GMT\r\netag: \"6840864c-504d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20557,"size_decoded":20835,"mime_type":"image/png","magic":"PNG image data, 705 x 670, 8-bit colormap, non-interlaced","md5":"8e24e1ea00ba7708ee6b228aa7688d2f","sha1":"0ec189eddca9e573a884942a6b52414d1697be3d","sha256":"758c46b31695c1ca62241884213e81bb66fe7a00f0acd2de5bf3466e9c471711","sha512":"3379f2c566ce1d86bc31fe1a92fb3a14324cbd9c5b431f800f29d44fd66a6229113bf7b2aa0e4669d9c701619be764297de3555ba710e8b174fab21e2eb6ee21","ssdeep":"384:hbJa0CxOQVxwesz2LYVYdYOe+izvGPJeV33CIj/qTkqa5H3lzM0Wdbc8Az:hbJa0jQVKnz2LIZnOc5Sj+4dbcL","tlshash":"7292d00b6ab77f100af4d30dc9d44a028112c6a168cf6486ef3248b9f9748566ef7f61","first_seen":"2025-07-13T11:12:22.504703Z","last_seen":"2026-08-02T10:50:53.353827Z","times_seen":25,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.541Z","timestamp":1785630206541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://panfilova2.msk.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Jul 2026 18:07:06 GMT\r\nexpires: Sat, 31 Jul 2027 18:07:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108980\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T06:51:58.28859Z","times_seen":549212,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":23,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/static/css/style.css","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.270Z","timestamp":1785630206270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/static/css/style.css HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 27 Jun 2026 08:53:24 GMT\r\netag: W/\"6a3f8f84-51cf\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20943,"size_decoded":9231,"mime_type":"text/css","magic":"ASCII text, with very long lines (6686), with CRLF line terminators","md5":"f907fd8ed031509974440988f661e4fb","sha1":"dd257d412f26922c84de9899de5f563836b97f7e","sha256":"299c290afb00aec57dcd3baa680786515cc0d2d62e148eafb59880342195187a","sha512":"d2aeb5b5f56e7f1728344e72d39d08197d76b6d9ae1bb9084239b00d795fce2ade7f494e13a87cbc23dcd7a3b2ec7407a46f9fde1cad2605fdfa726c36681a0e","ssdeep":"192:RjTyhqO1yIfJ+MbbAgz1aicbkySz1TRQWHq6E9m3dL9j0HkSg9nI8jYLgUDdVRPi:RanTRTS56TUDLf7OaFYjTsSrSddi1","tlshash":"8d92968e8656114a61739bb857f20349f7a601235f0b46e47ae132d0affd6bc90a1fcc","first_seen":"2026-08-01T16:42:32.84216Z","last_seen":"2026-08-02T10:50:53.331131Z","times_seen":7,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.273Z","timestamp":1785630206273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 02 Aug 2026 00:23:26 GMT\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30070,"size_decoded":2608,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"6fce742990a1ecf01431eebf06541d25","sha1":"cca53966852f0d5486e2b134dc01032f3e658bd8","sha256":"9d95d1586b80e36867fcc02a259a124fea267f62c2960cad88520cece45ea767","sha512":"0e42d3856e473c3ffd2dcda9fe1c1f39b58de1e34aee37de4c4a2ee72a875b250276629aa33b2c5e979137383387cd6ea5e120ea89f08cbc57bb8c3dcb507d91","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIw1:6SqqY49t5qY4yf/qY45uOqY4VptqY46","tlshash":"73d21b9000171850ab435de633ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T10:39:33.731039Z","last_seen":"2026-08-13T18:09:00.49936Z","times_seen":2488,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":49,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"panfilova2.msk.ru/earthm/images/Earthlink-Logo-s.png","fqdn":"panfilova2.msk.ru","domain":"panfilova2.msk.ru","tld":"msk.ru"},"ip":{"addr":"149.154.70.141","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.293Z","timestamp":1785630206293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"panfilova2.msk.ru","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 23:05:06 GMT","end":"Thu, 15 Oct 2026 23:05:05 GMT"},"fingerprint":{"sha1":"AF:CD:18:92:82:93:5D:AA:C9:16:6F:47:78:A3:75:2F:01:5D:FD:84","sha256":"D5:47:C8:AD:AA:54:31:12:95:04:72:F2:D8:5A:DC:F5:21:36:32:9C:1E:3E:11:55:BC:7A:D2:45:11:61:7F:C1"}}},"request":{"raw":"GET /earthm/images/Earthlink-Logo-s.png HTTP/1.1\r\nHost: panfilova2.msk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/earthm/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.22.1\r\ndate: Sun, 02 Aug 2026 00:23:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 9143\r\nlast-modified: Wed, 04 Jun 2025 17:45:48 GMT\r\netag: \"6840864c-23b7\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9143,"size_decoded":9420,"mime_type":"image/png","magic":"PNG image data, 202 x 184, 8-bit/color RGBA, non-interlaced","md5":"bafad6912cf65961f67eab4e09deda7f","sha1":"81f327242c6ee55f84d686f325a620c8bdd8d648","sha256":"ebedbadc286833f9df888b8753e1d80ff08654c74e37f7af26064cde2f83eb76","sha512":"f71d414f2d8672bc011991e377805db522db61d82516650e872e605a0af375458ba6dc7fa84371b7afdb36e0435e652cd548ae33ad34778c60f8871293000aed","ssdeep":"192:EknGa/E4549DQemSsQ1Swn3BQbAvDZRIABep9qRUZv/o:nnGa/m9DQexsCxwAv1DgqyZvQ","tlshash":"ed129e4dbd91ac40e70bdd5298ca9021063b6bc0eac3c0566ddf8a1a5df12bcc92ead1","first_seen":"2025-07-13T11:12:22.49928Z","last_seen":"2026-08-02T10:50:53.333169Z","times_seen":25,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1s2ox1zk22ocs.cloudfront.net/dist/css/flow-widget.css","fqdn":"d1s2ox1zk22ocs.cloudfront.net","domain":"d1s2ox1zk22ocs.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.69.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://panfilova2.msk.ru/earthm/","date":"2026-08-02T00:23:26.278Z","timestamp":1785630206278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /dist/css/flow-widget.css HTTP/1.1\r\nHost: d1s2ox1zk22ocs.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://panfilova2.msk.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 13 Jun 2019 03:06:18 GMT\r\nx-powered-by: ASP.NET\r\nserver: Microsoft-IIS/10.0\r\ndate: Sat, 01 Aug 2026 06:14:25 GMT\r\netag: W/\"1d52194f82eba87\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e61913b0c3e5791ab42af00a3c3e9356.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: -8o8TMS-wOv5CCDYBTRQqx-lUxbWjKhmZqTNjhrZmW7MpfF63XuEUw==\r\nage: 65500\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":19335,"size_decoded":3927,"mime_type":"text/css","magic":"ASCII text, with very long lines (19333), with CRLF line terminators","md5":"db02676990624da59ccc31f12b7f62c5","sha1":"ed129d910122c34ec47c23a8af834e6d4682c406","sha256":"48c8a8ea73fd812bf2ec19eff7ca6d21125a123538b6abcb0154a52ba6ae3fd0","sha512":"e6997ded0769db6bd4c904f0437918b63d4f775a3bf8ffd640217dfa248634953b816b024acec4eb5cab8335854a51eb78baa10a439c55dde66673f26b6bf3d5","ssdeep":"192:JYxW775wOLF1QsZ6XlZfZ4ryFhMweDVz6eaiVLPEwngoYuC+T95krsC1UAOevPAS:Jjzw0tUFtInIpNiZ2BMq","tlshash":"5392eceebb201ef9b913b4395a1c7628e1c6750166d23dfb8861d41687c3f62ad2412f","first_seen":"2025-07-13T11:12:22.501291Z","last_seen":"2026-08-02T10:50:53.339568Z","times_seen":25,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":34,"connect":10,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}