{"report_id":"47bc93ef-29fe-413c-8859-8c92e2e6f014","version":0,"status":"done","tags":[],"date":"2026-06-22T10:09:36Z","url":{"schema":"http","addr":"asset-distribution-cdn.site","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"http","addr":"asset-distribution-cdn.site/","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"title":"The domain asset-distribution-cdn.site is powered by NIC.UA","dom":{"size":8001,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (441)","md5":"89311f165382ce25c22ef5e57abe7d58","sha1":"b4d53d42a729b7ae0d9032a85da817d040cd8504","sha256":"59b8e2a1512492ef259922695341f53408f90eb6d794297095801a0717877d17","sha512":"57a5bbffba9e99c56e6237de06ff569595d2a9df37765aad8d00ebbe70c0ef57b428fc58c3a58edf34362c1265855dabd2979c65d7cb5728c5b50a24a01037a2","ssdeep":"192:DVPDgnCYK9iV5m9OGZGiztKJ6tu+rGuzTr61OQ8S6tuu6tu5YtOXyD/ZsD:aMiVOL66tBrGYTrsOc6tZ6tEYtOXamD","tlshash":"46f1227615ecec3a025253c6b1307f2cf92b4e76b9c26466f1bf02995782de09a6305f","dom_hash":"domhashf8ef731d76bd7282093510045c295334","first_seen":"2026-06-22T10:09:42.556743Z","last_seen":"2026-06-22T10:09:42.556743Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"asset-distribution-cdn.site","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T10:09:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"asset-distribution-cdn.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"img.nic.ua","ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2007-10-04","domain_rank":0,"first_seen":"2015-02-09T19:11:21Z","last_seen":"2026-06-11T08:09:46.246956Z","alert_count":0,"request_count":6,"received_data":19727,"sent_data":3266,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":2,"received_data":48245,"sent_data":1120,"comment":"","tags":null,"fingerprints":null},{"fqdn":"asset-distribution-cdn.site","ip":{"addr":"135.181.41.169","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2026-06-20","domain_rank":0,"first_seen":"2026-06-22T10:09:26.729882Z","last_seen":"2026-06-22T10:09:26.729882Z","alert_count":3,"request_count":3,"received_data":17082,"sent_data":1359,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-21T22:30:18.963204Z","alert_count":0,"request_count":1,"received_data":455661,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nic.ua","ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2007-10-04","domain_rank":368699,"first_seen":"2015-04-11T01:45:04Z","last_seen":"2026-06-11T08:09:46.140087Z","alert_count":0,"request_count":1,"received_data":5737,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":2328,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"asset-distribution-cdn.site/","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6816db742ab6cf04b4c95a351962bf3","sha1":"f9eecbe631e99ad508c67f3409c0c3220413e604","sha256":"eb9b3062177f5db2d0a9d40abceca2e85b8a61206fde4b39d381a11d7afc1fb4","sha512":"d136a82cb35799738dc06bd33c1364c97aaf82ba5dcb5925e96456b469fb9d55b88d311a340991003382a72c0aa2810898c202045eea42e42fe0376454a999d4","ssdeep":"","tlshash":"1cc02bcc220a1c7041eb2b00cf7fb604b001320498d1fa31080a73084d20f13ebd5830","size":149,"data":"","first_seen":"2026-06-22T10:09:42.57298Z","last_seen":"2026-08-07T21:22:12.636342Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"asset-distribution-cdn.site/","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac2f6a18f15bb7457ebe1e312e2c665a","sha1":"35326b6431381df64eb325426e27d409544ed6ae","sha256":"fde0c9a7440a54e264c06d9f2abcb399476c7b22aae442e3e9ff53bfc6eb791e","sha512":"d57b4c00c2b0407206b366c9ca23bf2674e2e31486ec57c3ed2fbc6a74944b0d68f9877894c8d446295c911a5d45e7bbbf31360aca979f9b925288ceece9df8d","ssdeep":"","tlshash":"1ca002610191d658b1b972545524db6e9975a8b6e889d632383e87220094916851c491","size":59,"data":"","first_seen":"2025-06-22T13:40:44.470563Z","last_seen":"2026-08-17T06:09:07.71777Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"asset-distribution-cdn.site/","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6816db742ab6cf04b4c95a351962bf3","sha1":"f9eecbe631e99ad508c67f3409c0c3220413e604","sha256":"eb9b3062177f5db2d0a9d40abceca2e85b8a61206fde4b39d381a11d7afc1fb4","sha512":"d136a82cb35799738dc06bd33c1364c97aaf82ba5dcb5925e96456b469fb9d55b88d311a340991003382a72c0aa2810898c202045eea42e42fe0376454a999d4","ssdeep":"","tlshash":"1cc02bcc220a1c7041eb2b00cf7fb604b001320498d1fa31080a73084d20f13ebd5830","size":149,"data":"","first_seen":"2026-06-22T10:09:42.57298Z","last_seen":"2026-08-07T21:22:12.636342Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"asset-distribution-cdn.site/","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac2f6a18f15bb7457ebe1e312e2c665a","sha1":"35326b6431381df64eb325426e27d409544ed6ae","sha256":"fde0c9a7440a54e264c06d9f2abcb399476c7b22aae442e3e9ff53bfc6eb791e","sha512":"d57b4c00c2b0407206b366c9ca23bf2674e2e31486ec57c3ed2fbc6a74944b0d68f9877894c8d446295c911a5d45e7bbbf31360aca979f9b925288ceece9df8d","ssdeep":"","tlshash":"1ca002610191d658b1b972545524db6e9975a8b6e889d632383e87220094916851c491","size":59,"data":"","first_seen":"2025-06-22T13:40:44.470563Z","last_seen":"2026-08-17T06:09:07.71777Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Q2DHSXH1TQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc1214cf786eda0ca4b6d9c6d594430d","sha1":"c569d117b71b4bd79aacd133f365d11db0fb8002","sha256":"6c905da3fadf10b6d527646e03b9da9e3f104e56ce1d675195be0198e8e964b6","sha512":"bf20cf1e0655b2fc1d398a0c00a91e3b6109d3ca5997dedff2be1689283b85b0321a6df4e0048934fea09957d1b0b84e0841b814e59b80a04c439e249e8b231a","ssdeep":"6144:Ti0Pe5Ok5OEVxeKwnKc52wJ4/2pqrGj5REuu32zhz2NOFU3rVGsu:TiJOk5OEVxLwn8wJ3ft2mUs","tlshash":"33a419cdb3d674225396f478903f018ba57b68e2b44cc899f18ac8e42e7465a4277f7c","size":455057,"data":"","first_seen":"2026-06-22T10:09:42.561681Z","last_seen":"2026-06-22T10:09:42.561681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img.nic.ua/f/images/ic_i.svg","fqdn":"img.nic.ua","domain":"nic.ua","tld":"ua"},"ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.690Z","timestamp":1782122954690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nic.ua","organization":""},"issuer":{"commonName":"Actalis Domain Validation Server CA G3","organization":"Actalis S.p.A."},"validity":{"start":"Thu, 11 Dec 2025 12:48:35 GMT","end":"Sun, 20 Dec 2026 09:57:35 GMT"},"fingerprint":{"sha1":"71:A5:06:82:90:1F:E2:92:5D:4B:F5:1A:24:4E:64:EB:BD:34:54:9A","sha256":"FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9"}}},"request":{"raw":"GET /f/images/ic_i.svg HTTP/1.1\r\nHost: img.nic.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:09:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 583\r\nlast-modified: Mon, 23 May 2022 14:36:00 GMT\r\netag: \"628b9bd0-247\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":810,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5edaac5f9bf8b89c434f2f043d7f28e2","sha1":"2a104685f97535104b01efbae1c803dd2722c66d","sha256":"f4b72ef15c21a4827162f20def4c244e7ebb14fdc34ea59678d6b90fb05dc5a0","sha512":"87a8dd5cd82d1889aea954e4595492dc764d9ed41b60460f27a301bb328e2a06b3ce7d35dd94477c1dbcb031c07fbf69e3a295807edd69cdcd748fe4d29a7271","ssdeep":"","tlshash":"84f0ac9a10244bac88cdc01d6b2118e2133671d6ba39a58fa2ce1754d817ad7f404ddc","first_seen":"2023-05-01T19:24:12Z","last_seen":"2026-08-07T21:22:12.635495Z","times_seen":227,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:15.001Z","timestamp":1782122955001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://asset-distribution-cdn.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:01:59 GMT\r\nexpires: Fri, 18 Jun 2027 02:01:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 374836\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-17T20:55:13.019413Z","times_seen":257908,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":19,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"asset-distribution-cdn.site/apple-touch-icon.png","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:15.087Z","timestamp":1782122955087,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: asset-distribution-cdn.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 22 Jun 2026 10:09:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.31\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, HEADER\r\nAccess-Control-Allow-Headers: Content-Type, Accept-Language, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding, Origin\r\nX-Frame-Options: DENY\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":8087,"size_decoded":2760,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b7a38b2e9a6177c0b3e068e1943fe33f","sha1":"0bfa6903da176c9df94d5d36581bcb75270e3a7f","sha256":"bd1f4c125b95896afb5ebee27aed2f4ac0865d0f112a69426cdb4baa947bdc8c","sha512":"c17d0e78458c4b35f8f2196f17bd1bf28b0ac715b3191d4714167e857158d7f781c8c46ae4b327e1fe40279f9b9cde2abd69479cc4179dcbb902e5b190d7861b","ssdeep":"192:3/PDYkEXr9iV5mnOGDGbzN+J6tuwrGuzTr61OQ8S6tuu6tunYtOXyD/Swk:IiVwI66t5rGYTrsOc6tZ6t8YtOXaJk","tlshash":"dbf1117615ece83a025253c6a1307f2cb92f4a76b9d2a4a6f1bf02585782dd0966305f","first_seen":"2026-06-22T10:09:42.560492Z","last_seen":"2026-06-22T10:09:42.560492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"asset-distribution-cdn.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Q2DHSXH1TQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.668Z","timestamp":1782122954668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-Q2DHSXH1TQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 22 Jun 2026 10:09:14 GMT\r\nexpires: Mon, 22 Jun 2026 10:09:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157187\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455057,"size_decoded":157791,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5513)","md5":"dc1214cf786eda0ca4b6d9c6d594430d","sha1":"c569d117b71b4bd79aacd133f365d11db0fb8002","sha256":"6c905da3fadf10b6d527646e03b9da9e3f104e56ce1d675195be0198e8e964b6","sha512":"bf20cf1e0655b2fc1d398a0c00a91e3b6109d3ca5997dedff2be1689283b85b0321a6df4e0048934fea09957d1b0b84e0841b814e59b80a04c439e249e8b231a","ssdeep":"6144:Ti0Pe5Ok5OEVxeKwnKc52wJ4/2pqrGj5REuu32zhz2NOFU3rVGsu:TiJOk5OEVxLwn8wJ3ft2mUs","tlshash":"33a419cdb3d674225396f478903f018ba57b68e2b44cc899f18ac8e42e7465a4277f7c","first_seen":"2026-06-22T10:09:42.561681Z","last_seen":"2026-06-22T10:09:42.561681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":40,"receive":47,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.nic.ua/f/images/twi.png","fqdn":"img.nic.ua","domain":"nic.ua","tld":"ua"},"ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.684Z","timestamp":1782122954684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nic.ua","organization":""},"issuer":{"commonName":"Actalis Domain Validation Server CA G3","organization":"Actalis S.p.A."},"validity":{"start":"Thu, 11 Dec 2025 12:48:35 GMT","end":"Sun, 20 Dec 2026 09:57:35 GMT"},"fingerprint":{"sha1":"71:A5:06:82:90:1F:E2:92:5D:4B:F5:1A:24:4E:64:EB:BD:34:54:9A","sha256":"FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9"}}},"request":{"raw":"GET /f/images/twi.png HTTP/1.1\r\nHost: img.nic.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:09:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1335\r\nlast-modified: Tue, 23 Apr 2024 11:31:13 GMT\r\netag: \"66279c01-537\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1335,"size_decoded":1559,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"40228886646bc9227581111fcc4f76ee","sha1":"74f89a11b7b3f916042f3efa7985c375bd9cff1d","sha256":"bcd523efecdf9c4d462eebf3e3a611725d6b5ed7c785d95bab32274c53378a51","sha512":"9f383fd892f734189de70b93e1249cd55b47070fcbfd136f1adc6614cddf13376b271de386da7a95aabe85b3d8f8bc961adca40d1b74db11cd7f3bb446b698ec","ssdeep":"","tlshash":"4521874e8d9b20c2c7165a768ae12bc0f576874097c2a64bbacc8cf35f416d17d9f18b","first_seen":"2024-08-01T05:22:18Z","last_seen":"2026-08-07T21:22:12.633706Z","times_seen":125,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.999Z","timestamp":1782122954999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://asset-distribution-cdn.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 10:07:19 GMT\r\nexpires: Mon, 21 Jun 2027 10:07:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86516\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23040,"size_decoded":23852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-17T20:55:13.031605Z","times_seen":187366,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.nic.ua/f/images/ic_message.svg","fqdn":"img.nic.ua","domain":"nic.ua","tld":"ua"},"ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:15.006Z","timestamp":1782122955006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nic.ua","organization":""},"issuer":{"commonName":"Actalis Domain Validation Server CA G3","organization":"Actalis S.p.A."},"validity":{"start":"Thu, 11 Dec 2025 12:48:35 GMT","end":"Sun, 20 Dec 2026 09:57:35 GMT"},"fingerprint":{"sha1":"71:A5:06:82:90:1F:E2:92:5D:4B:F5:1A:24:4E:64:EB:BD:34:54:9A","sha256":"FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9"}}},"request":{"raw":"GET /f/images/ic_message.svg HTTP/1.1\r\nHost: img.nic.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://img.nic.ua/f/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:09:15 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 307\r\nlast-modified: Mon, 23 May 2022 14:36:00 GMT\r\netag: \"628b9bd0-133\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":307,"size_decoded":534,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a75aab07420def5df52d4406346fc0a3","sha1":"1bca9aba16b17f3377e32ee84aef45c0fce099f0","sha256":"cac8d45a684827ba3c90070f9958248e97fc2fc56b1a301e94fbddfa8f933064","sha512":"7e6aa6ebefe8e67123b7bd6042f424d5c20b5d8a2b53b971bb25708469ec1ac2795b27b895c01bda6e7a62811d13310872ed5e341dff0cfbf84f296008e49a6f","ssdeep":"","tlshash":"ebe0c24ac2844a2cbd2a86a1e3187239523e12a3879c7349e57d1170a64825e687baec","first_seen":"2023-05-01T19:24:12Z","last_seen":"2026-08-07T21:22:12.617651Z","times_seen":226,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.nic.ua/f/images/logo.svg","fqdn":"img.nic.ua","domain":"nic.ua","tld":"ua"},"ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.682Z","timestamp":1782122954682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nic.ua","organization":""},"issuer":{"commonName":"Actalis Domain Validation Server CA G3","organization":"Actalis S.p.A."},"validity":{"start":"Thu, 11 Dec 2025 12:48:35 GMT","end":"Sun, 20 Dec 2026 09:57:35 GMT"},"fingerprint":{"sha1":"71:A5:06:82:90:1F:E2:92:5D:4B:F5:1A:24:4E:64:EB:BD:34:54:9A","sha256":"FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9"}}},"request":{"raw":"GET /f/images/logo.svg HTTP/1.1\r\nHost: img.nic.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:09:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2687\r\nlast-modified: Mon, 23 May 2022 14:36:00 GMT\r\netag: \"628b9bd0-a7f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2687,"size_decoded":2915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82749c5aa21de1c9aca684d20f4382aa","sha1":"83776a6c100e2402e5646ad393e686f67f727fe0","sha256":"8561a31766341e9a503256274c814ea26388bd3744c93694fe6c81ca49d1099b","sha512":"fa8df26381b39cac4f55c1e80c7963a8398beb2e13bd7c46a33a73334825e04a3ba0128bfd4bed16037c154ff1cfe4034cb73f19d84a1347ba891aa37f16ae26","ssdeep":"","tlshash":"e65174c42f20c2dc2bdd8cbcef7a6addb51bb4fa3a60c184d65eca05545d9d8f140484","first_seen":"2023-05-01T19:24:12Z","last_seen":"2026-08-07T21:22:12.632695Z","times_seen":256,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nic.ua/favicon.ico","fqdn":"nic.ua","domain":"nic.ua","tld":"ua"},"ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:15.088Z","timestamp":1782122955088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nic.ua","organization":""},"issuer":{"commonName":"Actalis Domain Validation Server CA G3","organization":"Actalis S.p.A."},"validity":{"start":"Thu, 11 Dec 2025 12:48:35 GMT","end":"Sun, 20 Dec 2026 09:57:35 GMT"},"fingerprint":{"sha1":"71:A5:06:82:90:1F:E2:92:5D:4B:F5:1A:24:4E:64:EB:BD:34:54:9A","sha256":"FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nic.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:09:15 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Fri, 27 Feb 2026 11:58:55 GMT\r\netag: \"69a186ff-1536\"\r\nexpires: Thu, 02 Jul 2026 10:09:15 GMT\r\ncache-control: max-age=864000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":5737,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a24710af73a760d8234bb22830e96d44","sha1":"47390183008f45f9ef5748602406dbccb34c20a0","sha256":"4fa1f13e49200541fd1866717e6066b2694cd92da3915f7d4184aa45d1989aee","sha512":"7578a6d7431c1e913d98825794bfa320ab2775f06c76d5ad07661ffb0152c67a2d469cb7f8e418ea11451b7776fe703581582d917d81134f89c596fce312eb27","ssdeep":"48:/XvXvXvXPcgMaWp/8oQ/vcccccmAI5QL56l71:/XvXvXvXPqao/QHccccczRQ71","tlshash":"95b1051f37300469c18592bb939a3ba351f39d4ac6210b5a26fc728dae3bb469c1de54","first_seen":"2023-07-08T07:37:14Z","last_seen":"2026-08-07T21:22:12.624132Z","times_seen":127,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":32,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asset-distribution-cdn.site/","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T10:09:14.064Z","timestamp":1782122954064,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: asset-distribution-cdn.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T21:06:22.198129Z","times_seen":17942313,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"asset-distribution-cdn.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.664Z","timestamp":1782122954664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Lato:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Jun 2026 10:09:14 GMT\r\ndate: Mon, 22 Jun 2026 10:09:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1644,"size_decoded":1099,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fbea5578099b2a11bc73c082c21f046f","sha1":"38612445ca5462921da82dab5d3eeba5b8e9be48","sha256":"c3e606051dc0106a9e30d26f110dbb1b835f7a7f2042caa0622ff01f13ef7e5e","sha512":"a4b2f66ec6f198bbb8f543c5c30236f5b1cae1b8c31a2cd78f0c4165ea7e6ee18474d62f09ad1263a7caeac3d1fc8c7ec8c0a89219bdb029c2dcdc72fed93fd0","ssdeep":"","tlshash":"5531ae91056ba508db870cc212cd7e32ff1e615064559935aefe14d8bc97c699362b0d","first_seen":"2025-09-17T13:26:47.228197Z","last_seen":"2026-08-17T19:42:23.250259Z","times_seen":5758,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":34,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.nic.ua/f/images/ic_fb.svg","fqdn":"img.nic.ua","domain":"nic.ua","tld":"ua"},"ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.685Z","timestamp":1782122954685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nic.ua","organization":""},"issuer":{"commonName":"Actalis Domain Validation Server CA G3","organization":"Actalis S.p.A."},"validity":{"start":"Thu, 11 Dec 2025 12:48:35 GMT","end":"Sun, 20 Dec 2026 09:57:35 GMT"},"fingerprint":{"sha1":"71:A5:06:82:90:1F:E2:92:5D:4B:F5:1A:24:4E:64:EB:BD:34:54:9A","sha256":"FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9"}}},"request":{"raw":"GET /f/images/ic_fb.svg HTTP/1.1\r\nHost: img.nic.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:09:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 378\r\nlast-modified: Mon, 23 May 2022 14:36:00 GMT\r\netag: \"628b9bd0-17a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":378,"size_decoded":605,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"532b6456a22679987344ec79c3b286d7","sha1":"e34e79642d1f6eb93a3ed00fcbcf808ea8d41afc","sha256":"0238dd7932cf4dc3849b9dc2fbd9be4e1809590dee9e2ac7ef5ad5eee17e3585","sha512":"93a5566597c2968c4c7ddcfc31e7765eaa579fffa8c2f02a2f2b14f5cfeb400420f059c7eb025b1033b715cc1bd37b399e9e446e79e8af35ed3cf5ea83733856","ssdeep":"","tlshash":"85e068c24705684843818676b52c3115392f70fbeb580d7ce090c649a4d0aba7e2ae18","first_seen":"2023-05-01T19:24:12Z","last_seen":"2026-08-07T21:22:12.634639Z","times_seen":227,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"asset-distribution-cdn.site/","fqdn":"asset-distribution-cdn.site","domain":"asset-distribution-cdn.site","tld":"site"},"ip":{"addr":"135.181.41.169","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T10:09:14.190Z","timestamp":1782122954190,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: asset-distribution-cdn.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 22 Jun 2026 10:09:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.31\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, HEADER\r\nAccess-Control-Allow-Headers: Content-Type, Accept-Language, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding, Origin\r\nX-Frame-Options: DENY\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":8087,"size_decoded":2760,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b7a38b2e9a6177c0b3e068e1943fe33f","sha1":"0bfa6903da176c9df94d5d36581bcb75270e3a7f","sha256":"bd1f4c125b95896afb5ebee27aed2f4ac0865d0f112a69426cdb4baa947bdc8c","sha512":"c17d0e78458c4b35f8f2196f17bd1bf28b0ac715b3191d4714167e857158d7f781c8c46ae4b327e1fe40279f9b9cde2abd69479cc4179dcbb902e5b190d7861b","ssdeep":"192:3/PDYkEXr9iV5mnOGDGbzN+J6tuwrGuzTr61OQ8S6tuu6tunYtOXyD/Swk:IiVwI66t5rGYTrsOc6tZ6t8YtOXaJk","tlshash":"dbf1117615ece83a025253c6a1307f2cb92f4a76b9d2a4a6f1bf02585782dd0966305f","first_seen":"2026-06-22T10:09:42.560492Z","last_seen":"2026-06-22T10:09:42.560492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":33,"connect":18,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"asset-distribution-cdn.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.nic.ua/f/styles/main.css","fqdn":"img.nic.ua","domain":"nic.ua","tld":"ua"},"ip":{"addr":"159.223.1.62","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://asset-distribution-cdn.site/","date":"2026-06-22T10:09:14.667Z","timestamp":1782122954667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nic.ua","organization":""},"issuer":{"commonName":"Actalis Domain Validation Server CA G3","organization":"Actalis S.p.A."},"validity":{"start":"Thu, 11 Dec 2025 12:48:35 GMT","end":"Sun, 20 Dec 2026 09:57:35 GMT"},"fingerprint":{"sha1":"71:A5:06:82:90:1F:E2:92:5D:4B:F5:1A:24:4E:64:EB:BD:34:54:9A","sha256":"FC:6D:D5:19:80:72:FE:21:58:DD:C8:2B:B2:E0:05:4B:7F:56:50:9F:0E:81:20:15:2D:25:50:79:90:7C:37:D9"}}},"request":{"raw":"GET /f/styles/main.css HTTP/1.1\r\nHost: img.nic.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://asset-distribution-cdn.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 22 Jun 2026 10:09:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 May 2024 14:56:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6655f0b1-3313\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13075,"size_decoded":3510,"mime_type":"text/css","magic":"ASCII text","md5":"f2427c553bbcc7766514bd6de137126e","sha1":"3999ea702112e6de53d24f92ca841db588078c0a","sha256":"d23ec49e0bc00daf45fe99b58f7c967d67f2ab3b62b6634ad67097d903ac7af5","sha512":"ebe965c759de7dbcc5eecbacc34a3bf9291e1cc26493a3c9d5f488e394b9de6274b252f122533dc9d7e54509b4b678ce2456ab1f480ae5b97797e1b1109982d0","ssdeep":"192:I4ei79lDrIAK+E/GGzn4oeu6a5O87TATjexvXyRaa69Xy:IsnDYuqnZ6a5/ATci","tlshash":"d342759623741a00b59e8e6577af876573484013921df9f9b8ce11dccf89398e3a2f8d","first_seen":"2024-08-01T05:22:18Z","last_seen":"2026-08-07T21:22:12.628018Z","times_seen":125,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":63,"connect":25,"send":0,"wait":25,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}