{"report_id":"48c09c2e-cf29-4794-aea4-9a3f62f0d31d","version":6,"status":"done","tags":[],"date":"2026-03-24T00:34:13Z","url":{"schema":"http","addr":"berlusconi.su","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":0,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"berlusconi.su/","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"title":"Berlusconi || Berlusconi Login || Berlusconi.cc || Berlusconi Market","dom":{"size":6525,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bef36fca28c9507b18030018e69f8364","sha1":"3e5d057fc9fc4b97de68f7c17acf789db9a6d8f1","sha256":"54aced1c677a6546b93c435015cfb971e721285f445626d15966c87329717545","sha512":"a27bff623a0d98b34c0deb20637edfa02edcca910dccaee6d79ab1ab737ac00d4c7874edc271c92cafb7a8c44dadba4b00a2b0b3129b05dd04e94acbbdc731c8","ssdeep":"192:P7QRPFBEf1K4eO0KP1/nxsli8SwDtNIPKWd5dIKK0nSwMtNWEdaM083qJ:P7QRNBEf1K4eZKN/nxsli8SwDtNuKy5x","tlshash":"97d18510556c4c7660625bb931e0e7c831afce30ea1534ceb3b71aa527d5dc0a72b7a9","dom_hash":"domhash8fb0da0ec734306a6fd7b5ec02aa9159","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"berlusconi.su","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":0,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T00:34:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"berlusconi.su","ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-08-27","domain_rank":0,"first_seen":"2026-03-23T23:44:13.572868Z","last_seen":"2026-03-23T23:44:13.572868Z","alert_count":0,"request_count":9,"received_data":1218352,"sent_data":4341,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":2,"received_data":315704,"sent_data":973,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-26T10:17:41.16616Z","times_seen":29991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/mylibs/captcha.js","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"539ab6ea5a854df2102f1e9376aecdd7","sha1":"99c09a8983d26876366a40939debc3e4fbec1cd1","sha256":"3d09d433948d32d64143463d91979778ebd9107ad6651352c79edf2f29b6edb4","sha512":"2c8221d0d0cd46eaee601f0c7adac91e56857514a52930b2c680ee24c8e3f53c8b41b84b0d29f645b799cef07ded3730626cd85a5a9e0b7b633bf8d7c71cd31e","ssdeep":"","tlshash":"79215aed7e170c462e86f353737488c4ec647138a9a430fcb98124da32d46f89a66d79","size":1346,"data":"","first_seen":"2026-03-23T23:44:17.665784Z","last_seen":"2026-03-24T00:34:15.696591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/mylibs/checkRegForm.js","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"27ec5263b51e1d1f8310498848173615","sha1":"c193a67a8998bb8bf326bee10538ddb9d4045e8f","sha256":"19b14f34f0c83f09f38a2cbc87effe7e9c58309d1ae0db82d357e6b0d265271e","sha512":"6e1422111ba36935b5dd3ce5db482fc3290df47d0a0cfca1fc7c5c7405739ec0d8ecba7cfa07da81730a3fc2dfdcce5f1226f0dc1672d86fcba676cb8bb95109","ssdeep":"","tlshash":"a5214b97765b0dbd17ea227b3c3972c4253894252d09f584eb1ca0ed2228dc3a036fd4","size":1212,"data":"","first_seen":"2026-03-23T23:44:17.663155Z","last_seen":"2026-03-24T00:34:15.692723Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/mylibs/checkForm.js","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c63de18be7601dc79513ac06ab5299bd","sha1":"b56d83dba90653c603779d0654cbca9c39ed1d14","sha256":"556656e1e89ef36d9d5383f996cc080d83f1c81c59e87916d15fb3074d99033d","sha512":"11418d1df791b32a6767fcba5d1dda12079123c372ab626cddb65a9dbbcb4d5b3eb3ef3d4eb56c596bbbcf2f45d635cadce18c462e6f78a440f82afc6b71ed29","ssdeep":"","tlshash":"5f217f77750f0c6d269a33253a3471846c38d4222904b18cec6d95fd3328ec6a0a6fe5","size":1164,"data":"","first_seen":"2026-03-23T23:44:17.672174Z","last_seen":"2026-03-24T00:34:15.693383Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d6e025c6f39107d201dee997f270cb5","sha1":"5cdd4b501a12fd72884c5e2884fab697d1f03f38","sha256":"7dee1fc0befac3f131c7f4e299539f7d632f3875e0fb6505e1fbe3693d041990","sha512":"259d57b0afec6d0c2708fe9ab4fe917a9781ce75aa2a419e0d4e3d4da5484b8a33e51daf80feefba3401a88ddf40c1a82ce1afc6554118d812b6db19fa770905","ssdeep":"","tlshash":"76216e9a75bc4c35495aaf7677b6c2e8257fca312e0534c16b1c3d609421c82933abee","size":1145,"data":"","first_seen":"2026-03-23T23:44:17.681434Z","last_seen":"2026-03-24T00:34:15.699127Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"berlusconi.su/","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T00:33:51.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.2.34\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811; path=/\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"996b03a43878dae9ee19b65551c38226","sha1":"be87c2a51bb45784da886e96ec047ad9b8167f48","sha256":"a1a5ed93f29a877db6bd05944c5b75e399f23b5744e68e47f16bc98b96954e75","sha512":"9853d9782c0a80881f182e44d3cbc4ef2981812578a98a0c7fd0eb564d1ae510f8f3e4aff77275b8c2b8abb881c7e2708bfa6d6b37bedd5533d2275b0e6b567c","ssdeep":"96:K7QR+1Ef1pEenvjhgUQKPaxe1y5ycRDqOrrKWFniiJKGm5IcReqOWEdKrT7Xi8j/:K7QR+1Ef1u4jPQKPaxe1HcRDqOrrKWvA","tlshash":"1fc17420345d48b620635bbb31b1a784705fce31c716254ab2f53bb337d5d81aa1b3ad","first_seen":"2026-03-23T23:44:17.67982Z","last_seen":"2026-03-24T00:34:15.691284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":176,"dns":28,"connect":47,"send":0,"wait":322,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://berlusconi.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33206\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220057-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2503944\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7WlEVlW1kDaAk6MO7sTb8bp7%2BhZAeD9nyjBLy5aD%2FulZ37jtOoop0urGeVeMe7DWCCnJl%2BzJcxvmxqZHcZID8FDLz58ueimqkj7KvOnLWg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e11963edac776ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-26T10:17:41.17131Z","times_seen":25601,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":15,"dns":11,"connect":1,"send":0,"wait":5,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/mylibs/checkRegForm.js","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /mylibs/checkRegForm.js HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1212\r\nlast-modified: Sat, 21 Sep 2024 14:20:44 GMT\r\netag: \"66eed63c-4bc\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1212,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"27ec5263b51e1d1f8310498848173615","sha1":"c193a67a8998bb8bf326bee10538ddb9d4045e8f","sha256":"19b14f34f0c83f09f38a2cbc87effe7e9c58309d1ae0db82d357e6b0d265271e","sha512":"6e1422111ba36935b5dd3ce5db482fc3290df47d0a0cfca1fc7c5c7405739ec0d8ecba7cfa07da81730a3fc2dfdcce5f1226f0dc1672d86fcba676cb8bb95109","ssdeep":"","tlshash":"a5214b97765b0dbd17ea227b3c3972c4253894252d09f584eb1ca0ed2228dc3a036fd4","first_seen":"2026-03-23T23:44:17.663155Z","last_seen":"2026-03-24T00:34:15.692723Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/mylibs/checkForm.js","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /mylibs/checkForm.js HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1164\r\nlast-modified: Sat, 21 Sep 2024 10:18:00 GMT\r\netag: \"66ee9d58-48c\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1164,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"c63de18be7601dc79513ac06ab5299bd","sha1":"b56d83dba90653c603779d0654cbca9c39ed1d14","sha256":"556656e1e89ef36d9d5383f996cc080d83f1c81c59e87916d15fb3074d99033d","sha512":"11418d1df791b32a6767fcba5d1dda12079123c372ab626cddb65a9dbbcb4d5b3eb3ef3d4eb56c596bbbcf2f45d635cadce18c462e6f78a440f82afc6b71ed29","ssdeep":"","tlshash":"5f217f77750f0c6d269a33253a3471846c38d4222904b18cec6d95fd3328ec6a0a6fe5","first_seen":"2026-03-23T23:44:17.672174Z","last_seen":"2026-03-24T00:34:15.693383Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/favicon.ico","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 15406\r\nlast-modified: Wed, 11 Sep 2024 12:10:38 GMT\r\netag: \"3c2e-621d6e0c52b80\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2f649d9fc9155a02f68cb92e81b8aab7","sha1":"7a31a531b4d3076d273fb3e01c74899cb2e4de34","sha256":"ee2b8af4b4a20e7bfdcabe03e0950a04b2b51689512f0ca902d7ad56261e99e5","sha512":"22804b2fdbeeff8f4d9bd3a00d96b761eead8b20933a6054b526afb06b44a48df1494c3118fcb280f6513aee889e919ada4c89dce8e157dc7483532859054e2e","ssdeep":"96:Zpby2loxxveiAhqU52TzM3tR8LgMxDt52I6QLicfGQMWF+2DJ:7bixGIjLZxbCPcoM","tlshash":"3e626c2f184ada46edb0c9fc93c71b2e4275d0b4bf3d848a4606377c4c303509d6a251","first_seen":"2026-03-23T23:44:17.678116Z","last_seen":"2026-03-24T00:34:15.694185Z","times_seen":4,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/css/style.css","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 3958\r\nlast-modified: Thu, 07 Nov 2024 17:22:08 GMT\r\netag: \"672cf740-f76\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3958,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d05b983ab83459a4e1af683923939b33","sha1":"47914d0b916fbe23dcbb8318f40ebbedf1c906f2","sha256":"0d501ed49154650d7e9fb12bcd7e59e29c3c6b6b2a4eff30e8d6553eb5bf3cf5","sha512":"fae035e3dca23ee04ef1a53cd662ce3d92c33d95cfc44e8ef9e5edc7f8fa06d9eb73075f32661c501f7f122d5063559b7943f3131dda11b14290ae249fe72ebe","ssdeep":"","tlshash":"da81eba56bf90108716aea583552af9a637c8042d10dedbc7ba134ac6fcdbe5807374c","first_seen":"2026-03-23T23:44:17.668936Z","last_seen":"2026-03-24T00:34:15.694917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/img/logowhite.png","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /img/logowhite.png HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 164549\r\nlast-modified: Wed, 11 Sep 2024 12:50:04 GMT\r\netag: \"66e191fc-282c5\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"8460ab7899a4d66be06634b4e275dcc3","sha1":"92c34173da0876aca2968d14284e473c16e90f8a","sha256":"d376ac1c422c172414c67ef0fcd2a8e887c563e0f4efea6d08f16dc489565aa2","sha512":"4d2a0008df15e9800004bc0d9eedb8c6417de0aeed9a4a1f8531003b58236ee15e75b37071bdf510dc9b4defe8ab14279693abedd4e5599819519784dbdb2132","ssdeep":"3072:r66HK+6+f60+KPOVzJYkanmr9BtPvBKuYhDIMWFq2rn4aF8Am:r66HN6g3+KPOVzJYPnmvlvBKuQD5MO","tlshash":"f6f31262ae19cb6cc0e3f12f570cc9490bcefeb758aa3e4972d8994751004ca6d15dee","first_seen":"2025-02-22T09:54:40.393564Z","last_seen":"2026-03-24T00:34:15.695485Z","times_seen":5,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://berlusconi.su\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220062-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1516324\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H52is7%2BoqZN%2F6AptGOpwa50UytPogloU1FSvL0Zf%2FQ6bS80fv7cT%2B7eAiGXgFeKJs7JeMzaKyMg4bSQYHtUdl4VJ57JYnulffmoGXQNtAA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e11963edad676ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-26T10:17:41.16616Z","times_seen":29991,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":6,"dns":13,"connect":3,"send":0,"wait":6,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/mylibs/captcha.js","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /mylibs/captcha.js HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1346\r\nlast-modified: Sat, 21 Sep 2024 13:55:50 GMT\r\netag: \"66eed066-542\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"539ab6ea5a854df2102f1e9376aecdd7","sha1":"99c09a8983d26876366a40939debc3e4fbec1cd1","sha256":"3d09d433948d32d64143463d91979778ebd9107ad6651352c79edf2f29b6edb4","sha512":"2c8221d0d0cd46eaee601f0c7adac91e56857514a52930b2c680ee24c8e3f53c8b41b84b0d29f645b799cef07ded3730626cd85a5a9e0b7b633bf8d7c71cd31e","ssdeep":"","tlshash":"79215aed7e170c462e86f353737488c4ec647138a9a430fcb98124da32d46f89a66d79","first_seen":"2026-03-23T23:44:17.665784Z","last_seen":"2026-03-24T00:34:15.696591Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/img/auth.png","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /img/auth.png HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/css/style.css\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 998614\r\nlast-modified: Wed, 11 Sep 2024 12:42:32 GMT\r\netag: \"66e19038-f3cd6\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 650 x 600, 8-bit/color RGBA, non-interlaced","md5":"cf95244f332b3ea3592760b8f6faf600","sha1":"ae33fd50ff121aba633dc710c92a187844dc2421","sha256":"119d602430755724b703583e977be307839d7375f78042d2c7f4a9fb0c884bbe","sha512":"7786e2e7ff3b0275db5bb407563d9059c51c283e40ce044d55964dd474edefada352f9d506626c4cef148b0a84dff5e63d056c69e91397a079047cac0e9a6ef4","ssdeep":"24576:UIAv1m0CGNcoDI1s/4Ip2yEY2WMx7KF9vRHo7NJ7M1KPyYe:UIA9myNco9AyEAwKF9v4JI8A","tlshash":"3925332828c3bf01ac2c18f5e348d06b4176762485f6cb7d7838673f766890a75daee5","first_seen":"2025-02-22T09:54:40.395885Z","last_seen":"2026-03-24T00:34:15.697279Z","times_seen":5,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berlusconi.su/captcha/8.png","fqdn":"berlusconi.su","domain":"berlusconi.su","tld":"su"},"ip":{"addr":"46.30.40.102","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berlusconi.su/","date":"2026-03-24T00:33:52.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"berlusconi.su","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 10:07:59 GMT","end":"Mon, 27 Apr 2026 10:07:58 GMT"},"fingerprint":{"sha1":"6A:00:98:13:22:B4:C4:49:B2:DC:DD:FC:5C:90:5E:79:35:BF:9A:38","sha256":"91:FF:C6:5B:09:BA:AC:BA:3F:05:95:97:2C:9E:36:30:4A:2E:00:77:26:79:62:31:9D:53:F6:11:DB:C1:D6:73"}}},"request":{"raw":"GET /captcha/8.png HTTP/1.1\r\nHost: berlusconi.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berlusconi.su/\r\nCookie: PHPSESSID=31a98c7f0aa9e89b9e560931fd180811\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.28.0\r\ndate: Tue, 24 Mar 2026 00:33:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 23411\r\nlast-modified: Sat, 21 Sep 2024 09:17:14 GMT\r\netag: \"66ee8f1a-5b73\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 186, 8-bit/color RGBA, non-interlaced","md5":"ef31979d2f5a8965004c60f382d6c150","sha1":"0337053ce8188f4a1fb4554d101f76ebe05decd2","sha256":"cce6372c7e5aa9bc8236d16f6493e06447d8517927b1ce45e4f86c8538ffc142","sha512":"b77c07542e789169429c02b92cdfb1c6be972f5f2d3a51a46bacee59c8d6b31f2cefb8059684b003b69c90740a81d1816a36377d0e9203520b4a3d39fc9445e9","ssdeep":"384:Mn7mtdgmpafdHfs+zVMSGY9s989kfjTuOWjIw4Xx9ejrCCKu0OzkhrFFoY:Mn7mtd9exEmMSO8if/utwPePECzmj","tlshash":"10b2d0a27094f8f38ae77d6c67b517e2e51b12526e0c4e1b1af0e835b4f5ad48b814f0","first_seen":"2026-03-24T00:34:15.698083Z","last_seen":"2026-03-24T00:34:15.698083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}