{"report_id":"4b1fb564-dd57-4083-80a6-b621e29b13c7","version":6,"status":"done","tags":[],"date":"2026-04-21T03:42:23Z","url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":0,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"title":"Здоровое питание: полезные советы на портале FoodandHealth","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":0,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T03:42:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-19T23:11:39.14593Z","alert_count":0,"request_count":1,"received_data":90135,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bestforwork.com","ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":102,"received_data":2128201,"sent_data":59405,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"ProfilePress","description":"ProfilePress is a WordPress registration plugin that lets you create login forms, registration forms, user profiles, and more.","website":"https://profilepress.net","common_platform_enumeration":"","icon":"ProfilePress.svg","categories":["WordPress plugins"]},{"name":"ProfilePress:3.1.19","description":"ProfilePress is a WordPress registration plugin that lets you create login forms, registration forms, user profiles, and more.","website":"https://profilepress.net","common_platform_enumeration":"","icon":"ProfilePress.svg","categories":["WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"All in One SEO:4.1.4.5","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":9,"received_data":322075,"sent_data":4933,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":2,"received_data":14496,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mebel.bestforwork.com","ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":5671,"sent_data":1648,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-19T22:24:53.213297Z","alert_count":0,"request_count":2,"received_data":851467,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.userway.org","ip":{"addr":"52.42.200.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-07-10","domain_rank":24639,"first_seen":"2019-12-30T06:49:43Z","last_seen":"2026-04-16T00:58:29.499919Z","alert_count":0,"request_count":2,"received_data":1807,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"foodandhealth.ru","ip":{"addr":"80.249.131.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2013-02-28","domain_rank":2757496,"first_seen":"2026-02-01T06:31:26.383807Z","last_seen":"2026-02-26T01:31:35.485124Z","alert_count":0,"request_count":1,"received_data":8122,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.userway.org","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2016-07-10","domain_rank":24688,"first_seen":"2018-03-28T23:39:37Z","last_seen":"2026-04-15T20:28:36.036481Z","alert_count":0,"request_count":7,"received_data":256925,"sent_data":3279,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-04-15T20:26:37.861571Z","alert_count":0,"request_count":2,"received_data":4307,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/custom.js?ver=1.0.0","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8b95d2bbc95481ac4c74d0c618345d9","sha1":"2ea2cbc34fc939b3a2388c82351ab1dff14806a2","sha256":"f49cd400664dff03ff0bc88632ba9d3ea8f442f1844576ab71a468f2978c1c54","sha512":"53f54ead5666ecb043e3142d9fc43e72d3ca237e2bcd476b4fa8c4e23111526a4ba8764ea8606416cd0aec076f4be961a9bc4d4b0320a19ade73cbf6ac1e6acd","ssdeep":"","tlshash":"1e819704b0195abaadb3336dae3db508fb79567b724a4060f4bd485c3f720186242ede","size":3902,"data":"","first_seen":"2026-04-21T03:42:41.411464Z","last_seen":"2026-04-21T03:44:07.000281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-21T19:04:36.071647Z","times_seen":13173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/superfish.js?ver=1.4.8.","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c887a6aab797b1343009ea450407da6c","sha1":"7c1dc7b1451f88153c0cf5c66e405b51fdd13f6a","sha256":"657a0db93acd3b44772cb3c2c362d3d6bf7b04e100c6c12d8d81be0b891758a1","sha512":"b157ec4f9dafa81b4b506b87c2b322f8c288cb5444c9b72fc622427b63548bb08a24a09453f2167ccf205e4eb7f046724ebff304b8cbb9e44171f1cf43fb59c4","ssdeep":"","tlshash":"5a8171ccf38f759ba977227e412f01887b7e4a32e8884c51bc3b58186ee855d4796c6c","size":3964,"data":"","first_seen":"2026-04-21T03:42:41.464121Z","last_seen":"2026-04-21T03:44:07.004001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"116c86c56f8db0bb63f15ceda50fdc98","sha1":"75e308982ecf7cd43644b8b426e6aa1a0b0fbe26","sha256":"def5de6254be138b8b35d680d1fdd8b07827d03b8626daebfeeb4157ec330ea7","sha512":"7124c3a6d306b5aa53639a722eeb7e5cc2d144f5a698e4086bb49d5554e5e1afcc28e096b1bf0e8d96b8751dd6d2cfaeb52d6343cecb174a81a2c49726e3369e","ssdeep":"384:cn50kJuPTb9Uh31//bEP+XgA3S9CleffJmp3:c50KU9Uh31//YWXgA6ffC3","tlshash":"3e820a9bb33a4e9f343e3bd78d968f4dc9da555321c0f078dbeeb68129a00568274c90","size":18181,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-21T19:48:47.839629Z","times_seen":41193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.89","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"830dae7fb9dfd5ac1879a83dd028083d","sha1":"6be6afca684e3305000879ad71f264f0c6549bd1","sha256":"c42425f18923921089911e70f39c6dd462794df2e42ac0596abc3884da6471fc","sha512":"a9bab7675e178d288189b7f377b332838a6ea8455d75b445e304953cedf269268c0458dd82658fe36f523ea6c7f212167d32dac3cebece0e0400fb5a0f2666ed","ssdeep":"","tlshash":"f2614c78206c66cf8b3630f2e42559216a7d6cb5ba40ce4c965e08d71b5b1683329e1f","size":3329,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-21T13:58:09.671362Z","times_seen":2031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"98e4b1fd50ca54c2081253c3a15617e2","sha1":"20dcdf7ec8e44ea87eb8baa093564e4b8fdbf3a4","sha256":"8998f8b0bc20f9185d0d5e6fcdcfd600d5605adb13e14e80ebc9948ce96f48d2","sha512":"5e9839fbad61f7e871804695194e802c63044220121791fb6f167785425f410af2746656c0e956ad5dba8edfbc77a594e3c5862a7d342508d4e539b5b6524710","ssdeep":"","tlshash":"99e028cbb11d0cb774dd09fa33b1a114b1472608a4191d23cdfdc814286c6c74c134dc","size":352,"data":"","first_seen":"2026-04-21T03:42:41.5024Z","last_seen":"2026-04-21T03:44:07.106477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/sandbox%20eval%20code","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-21T21:08:23.635922Z","times_seen":807636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-N0QYN0CXF6\u0026cx=c\u0026gtm=4e64k0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e9689966fd25d56129acd851ad43aa","sha1":"c46388330e7c8baf0b91e57eedc364a060bf4960","sha256":"626d3c0e07073d44c449b1e528f5f09bf3a807dd4f657600593690b4714c4d99","sha512":"58ee86ca83317c4a9e884a6482e10ae8b47cfa14b07d66a1840d12fb7947a7e6eb48d96aee82c6cfcc0c56cda90679bc5d3d990f0686416375a141391dc44b9e","ssdeep":"6144:vdN9VD3httWeWtGgYyin8eg8l+f4fUWgoHjK8Gv1vlhP30Auu:PhttWegGVn8T8ln0n","tlshash":"67a4f9cdb3d674225396f478903f01cba57a29a2b44cc89af189cce42e7465a4277f7c","size":472998,"data":"","first_seen":"2026-04-21T03:42:41.458188Z","last_seen":"2026-04-21T03:42:41.458188Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/inview.js?ver=1.0.0.","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4edba1c65592e5e64d420fe20104eb79","sha1":"a0e2be2157e43e2dae20e43d08af042151dd75d3","sha256":"423e09ae1666148e2718bd7aacfb05d17888e0554eb51fc343ef4317ef7d3b62","sha512":"d02491ef9bfac2839800067fd258adabdd6e36ab53de020f59b4fd82950cf922c32ae0771ccdee813a668c66a35e5f5183a8edd506d6efd89dbb44ea73a9ca72","ssdeep":"","tlshash":"3d21e0297301302ed0df64e3b1ae1d091863a237d302a8d5953ad8d9167c47835afa9d","size":1264,"data":"","first_seen":"2023-03-07T01:02:52Z","last_seen":"2026-04-21T03:44:07.073783Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a90a85dfbf29a8daa94840353505aa7a","sha1":"6fe39b2c732d328d5f1acbabd5b19c3447d03bbf","sha256":"febb307689eb17e2691a8de4f19864547ee599ac106bfc67fffe50cd524e4899","sha512":"92c73ff87a4b1d059798c8e85950a3b39304deb3fe3a300f345f4125fb232a38fe2ff5258feb8bf8ed5874af87f8fd6cda6b739b244aa0469ed4c55d5aa47dc1","ssdeep":"","tlshash":"7c4142763bd164952af208f3f12f1b0e3f26450340c8aa368598aae0393edd5d0fad1d","size":2124,"data":"","first_seen":"2026-04-21T03:42:41.504179Z","last_seen":"2026-04-21T03:44:07.12042Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"234f67cc5f9e0b98742aae553c730919","sha1":"29974450f1d931e8d6ecc4a46d3ba82e89c42f4a","sha256":"0bb5df219d96e28aefe38664551ac19f71ee0535a68b9474eeadf372eb88904c","sha512":"c4e07bd604e72eae8e4cb8978dc3ea17fc1a2046feb107f2ea25ea8a34ba3ef7b35b99295c387c9419d2d6464420e8067a5d2ad28bf7f7aa261c5bf458dc225d","ssdeep":"","tlshash":"3ee0ab9d2ca7b16733e87a39c6238aaa7365070034839964cf17c82538659d28886c8e","size":433,"data":"","first_seen":"2026-04-21T03:42:41.50519Z","last_seen":"2026-04-21T03:44:07.123432Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d6816fe4e756d867c837b0b3413c3d3","sha1":"6a214e1efe181c614dd4f97989772f54924ba843","sha256":"80985008b592f2a062eccc4c5c2205a369ec4135e33faa29ea1285d890473b00","sha512":"6d0fe1a111e17be828656264040581c6c3b98994964291ff86454b383298692f6baab488838dc776ae8788d3fc9f6c94297b5959865edb98003766f3817ab26a","ssdeep":"","tlshash":"a8f0bb90c35d65a301d2e6273c6cabd3c4ce5292c4f311bbe0f75836681825e158d7f0","size":560,"data":"","first_seen":"2026-04-21T03:42:41.506239Z","last_seen":"2026-04-21T03:44:07.126974Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd7af40667c37d06e0b3d76c75aa20ec","sha1":"4ebaf7bd76e279418c7d72647b0265054733cd53","sha256":"68559368d40dd3b60956b126405842e7b53d1ea2b1f1ef8de303e0864e0afd97","sha512":"b7cb0f2e2b20829cb170f439f7024f731499175ca123b5ccadf0bc93dda74e53bb19090ac6ed7824a2c7b689d31fd30476b7397de82e5a9e9ca295d2ee4df648","ssdeep":"","tlshash":"d9f0b490c71c687502a2e60b2c2ca7dbc8cd2212c4f340bfe0f7683714a931a198dbb0","size":570,"data":"","first_seen":"2026-04-21T03:42:41.50745Z","last_seen":"2026-04-21T03:44:07.12907Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.js?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f64f3a3a0c620a6756d36abaff1b4a6","sha1":"4738d7f9885db2cb9370766974c8f6b22e9ec29d","sha256":"00501810e93307a8882a74d864e7547fd1458deea539361dc1124ac133799a4b","sha512":"d889ad95195fd9556688666c8e6f5b132863196e1d53b07a4cdc21fe1c7f892072c4d10db63dd6544ea8ffd2e3e1325e5573e2e1b9ce20c5c52092407ae7dad0","ssdeep":"768:nopHucrre3DeGGG8MinEAs3j0TGE8jGookOlxNV7TWlOvBuZRgydn/RcSf2bK/Jw:F8hC3jIG+kOvVbyJJ1CD","tlshash":"5163c64c7a537234026f20e7256b140d22366b3e600b96a8b428cded6dbed15735bf3e","size":70851,"data":"","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-04-21T17:11:28.378125Z","times_seen":39804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widgetapp/2026-04-14-10-40-20/remediation/remediation_1776163220800.js","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"89933b8b7c393b91afbcca6152a6d807","sha1":"49796fa7bd7474ddbb3810af3b1589cc0d45f1b1","sha256":"16567ef660f15089d36a114c3a21f5533293a352ebba6376734053ca25c3808c","sha512":"db6472084f5e65bc6ed4d5faf89b238e968287a5135bf6a39514d5feca22065784fc8ce190b07e5b62a0e19874f19d66df72f478bdeebc4d4c5baa61027aafe0","ssdeep":"768:WZmcL//ssIDbk8C9Yxh5z7DWsDSmnADmdKvl4lkhiUyPHLMIDUUd6QyNxJAdEVDa:gL//5YbD7D/DSmnAEkhiUyPrMYUUd0Na","tlshash":"7023f8fe70417037167b257ed42fe34f72763a0a610a4110ba1ad4aa2dbce465627f7c","size":47204,"data":"","first_seen":"2026-04-14T11:15:06.112243Z","last_seen":"2026-04-21T20:04:58.802051Z","times_seen":699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd48e5fc1ac7ddd7fdbc14786897b75d","sha1":"1ebfb3cc19f79b9cf7faaebbf8bde2f512187624","sha256":"03807a53c7df729f575b19481842024af4685f64d0022492b3250a442d565d5c","sha512":"146be060dcfc102fd54b7a9e96b1fd10a68e6ca2a0a7f8e4c101211c291cbf21c2c81283260401a3c6771bdde3723fa5717d0068068ed9ac19f116b2d89c0718","ssdeep":"","tlshash":"73e0c6fb28d4069946bc17b8d3b3820870220448740eae31fa4d8c405874c9e108e8cc","size":345,"data":"","first_seen":"2026-04-21T03:42:41.50854Z","last_seen":"2026-04-21T03:44:07.125693Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/q2w3-fixed-widget/js/q2w3-fixed-widget.min.js?ver=5.3.0","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a47a4cdef27a7d9abb74545b6458df","sha1":"9e486c563fed6fb091a40a34449716af3ccec697","sha256":"9a7d00291b90b8045d042a9a713a9cceba928a35c18c99d1eeea2ca14c09614d","sha512":"1c055a7d4cdc8fc5d52b7fecdc757ef5c7d7d546a4300cd483c5d9abfe92bd34aeb04c9dc35db9954b7ed61ecde5d4b4c7dd76d78ed3221db22e1c764fad2f43","ssdeep":"96:/f/YtqF30HcnAMccyX8b1lh8PV3tlr06LAD0c6XU:fYtk30ifh1bWt9P8UU","tlshash":"83915160db08359f80b641d669ef6e3870b45e5a6b02f8d18909f0f450a4f98d1f76fe","size":4360,"data":"","first_seen":"2023-03-07T01:32:38Z","last_seen":"2026-04-21T10:25:02.734892Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.js?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"da3c57326c30dcf6d59a3a4f866e9189","sha1":"a4b2552b79bbca0948fde4860748dbe09c564706","sha256":"fe2ac5219992a3608a5c9e2bc4759fac8fb2189b88d7a674d395ff6c435da536","sha512":"ff414e9aae5f0357023ccef3934b31ff8de7403e5d84116d4b74aa0c4d9900cb31546da683794a34e6d92fbb792143f79b5986252c24ae114d76327028a3a8e5","ssdeep":"768:lAQnzb0qC3AZ1hGI4kf0iwY5Z60mF/OH23r80OxQ8GgEmaf5WE/+J6pPS:lX5C3Vkf0iwY5Z6J9OHuTOxHGgEmaf5W","tlshash":"1e23d48639183d3357da5cacc4af015dbb301fe6488390a0b96ef1587ca8d81927ffa5","size":48518,"data":"","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-04-21T15:15:37.590117Z","times_seen":972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"6152afc7e55b4c2f5a9a130ed2d6df49","sha1":"0fc5a6d1d7ad665f07fa7d6874efa10c1b343a8c","sha256":"960cf15a21686f55001af47826bd7f1cf62a72a716bd3c7cdc2ecb9e08089680","sha512":"8e0cae6e644990bdb662465831cad3265627acaa291aa8ec6da9d69b9f799fadbc398b45fbfc1f03332d83a89ae9f8aaf3a4275fe35a4d6edac9c561adc967eb","ssdeep":"","tlshash":"14c0c03e772235310a0c10fd387ee78c19f031fc4011e4104c9eea6dc408c810c32c10","size":189,"data":"","first_seen":"2026-04-21T03:42:41.509626Z","last_seen":"2026-04-21T03:44:07.130431Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8095c3a0641dddb8fd21fb4f0fcba8d3","sha1":"02b3b818ea007136223c72a6a7f77e9c50e69943","sha256":"35ce5963f813b2a0be5e9fb58e6fa6c4bf362af868bf2ab478421b75d2194ab8","sha512":"57cd24095018972e25c06ff47d7fd756aa50be5d0fdb00460509fe1572ad45cf88e58ddefa8431d2962a954a3ad1e90187e3a660ba303a76f1aeb135087dae38","ssdeep":"","tlshash":"95019ee300e58e4f09726bd1e8797d5cb8dd5163e800cbabae9d424bc791155d150f0e","size":795,"data":"","first_seen":"2026-04-21T03:42:41.510776Z","last_seen":"2026-04-21T03:44:07.131339Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/swiper/swiper.min.js?ver=4.4.2","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"06b841d117ab49f48e5e35d824857301","sha1":"1e25275a47d95d8f83cace2ae8ae75ec74cd8cff","sha256":"df178d935914fb63c2880bd93c76c7cae03e199962799b58cfff6916f60b9e3c","sha512":"0f36457c5cc2f76581421a49d3337a25445653d9679d6c1ecc0dad098bd83dcc9b1d455c1027eda18bcf76a494cca5f369c324d6805d9a7d69f261536038f93e","ssdeep":"1536:xApNsiJ532VXrtnTN0K8V7wluJTryZjk5PuFzLlvp0XvH7WcWUwcPqYbsE8EtObb:nVXrfX67F2mgLlufH7WcWUwcPquzab","tlshash":"07c31849b35071d551e72256539ed601a3b62805b90ac1a831b2dcdbacbde8c03bfefd","size":124740,"data":"","first_seen":"2023-03-07T13:51:26Z","last_seen":"2026-04-21T03:44:07.069817Z","times_seen":777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widgetapp/2026-04-14-10-40-20/widget_app_base_1776163220800.js","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"35d7ad4f12868d6720a38a9f02b4388d","sha1":"8a4ac716996f07f75d537de765d6dc7f105996b5","sha256":"30dad64470a3cf0d4830d293ed3b9dfeccb573f01d5d20b672692d75182ff57e","sha512":"38709179738f00e9109bfa7b771d31e1d2042caf7997cf9538965d4a1071ff80f7bf717ad78d0a8d1f55072d06ed632d080367df2545c63e32707f920032cb2b","ssdeep":"1536:3O9VvoCZcJqUvwKLrYjhmok2loxmzdmFXJLPQJMJD1N8w1DWCSoB7NVw35ahT5iA:3mV3ZvFUmI1YJdYk3dM","tlshash":"a1f32cddb186b43613b7a4b9d03fa10ab2353a0d644d9610a925ddd838b89cf5633fbc","size":163852,"data":"","first_seen":"2026-04-14T11:15:06.022083Z","last_seen":"2026-04-21T20:43:57.888288Z","times_seen":714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c97d8097d46d5756072583e3372cb15","sha1":"453ca9650096b6f96a8ae1c6437ec189f8fbd8c7","sha256":"1ace927d30f87ec1e15087a367a2b0abeca2e898c762e604404387305c47a05d","sha512":"dcbbe8025f2b7af16d64fff2f4a55c3e89c0ba347648e289f02116a7445ffed7da21d7857ae74ac90d9505d99e06e4e6a68fc8d30c761c240cc160be166c92e6","ssdeep":"","tlshash":"0bd02b1b8e141deb93b16ff234b8676b9f8712e078303c911b99e2641ee944bdc191a1","size":281,"data":"","first_seen":"2026-04-21T03:42:41.511983Z","last_seen":"2026-04-21T03:44:07.132252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widget.js","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506fb3bc149e7a888a044e598386ab4","sha1":"3378a1ead0a89fd6b137a1cd5368ba8b175a2b00","sha256":"388852179b8115f892b5f936342e99e34f78e9e469c4c6750cc4de140e194383","sha512":"08e6b1a323d0d796e7b9711015cebd1b4ae5fcc6a7e62f0ae5e7f41d545bf3b8db9720a99db0157cf061ecc1ef686b19bf6d5942ed364aed4f077632de0618a9","ssdeep":"","tlshash":"3831947ab511f4370393145bb2abab583a3f306bb5028e52c42dddac6e18c9b503bc95","size":1738,"data":"","first_seen":"2026-04-14T11:15:06.139867Z","last_seen":"2026-04-21T20:43:57.959736Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f198cf787173a211a0c0c4507bf15a0","sha1":"e0538d0bfb8298a4554043d5dc368d4a2d6c5026","sha256":"ed20e9cb09999eb900dd1f74e114893bc232905f8f9e8ea31acc987f6998d003","sha512":"76ee4e1f4757b7a85f09e619c8c32c344012414bc86fc9fdbc13a461465e5f2de928e94c96d462fae1ec37c2afde78c0d22c470823ae21a824821b1fd2fed191","ssdeep":"","tlshash":"47b0121195e42dc392f09ae439787573d7c322013c24d84326ccc5455fa6046c88c3ab","size":103,"data":"","first_seen":"2026-04-21T03:42:41.513287Z","last_seen":"2026-04-21T03:44:07.133068Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.1.19","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b2a166fca2fe9491eb729703420fa20","sha1":"6f280e3d0b2b763738be6f1f4a71e067010d1a57","sha256":"205988b80eeedc442aa4ba78fd4bda5b1b139415f3dc88043fc73adcd71cbae2","sha512":"02b7e8887e592e367eab88169650133f529adefdd13496aff6cc28f5a50219782cab06b91fe3b7446d2c0b2a504a3c013a9c22dcd1c9d6f325febef4e81acd2e","ssdeep":"192:qQMkvyDJBygO84Awju6qEL5b4J9EWwEtQfwD9no9:zMkvyDJogfwcMo9no9","tlshash":"0d1241127669dee3e5e73c7531dbaf0232520a28e34b8440a7356ee41f7c487796278b","size":9070,"data":"","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-04-21T03:44:07.102667Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-55VT85","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63188eb6244c1e05b4083241aea2bdd5","sha1":"3a6035d565cc009e9aa855fd2256e0c216e20290","sha256":"b82d32f1df0d55edaf82622412ce5717b1996e5a037ef0da3bbabc3086443470","sha512":"ef35e742f96f44dc5e588522815a83afd1881a0cc91fe76c7efbb13c2792ced00c961cfb56d9aa7530035a2f386fcf2b0fec6cb4c4fd061e769f069f880a9190","ssdeep":"6144:EN9VD9ttWeRtGgYypeg8l+EwfUWgoHjKz5vn1j1THtxu:WttWe7GkT8wqJ1jrs","tlshash":"748408cdb3da74624393a478903f118bb27a7892f44cc899f185d8e42e7469a4277f7c","size":377235,"data":"","first_seen":"2026-04-21T03:42:41.434243Z","last_seen":"2026-04-21T03:42:41.434243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/js/script.js?ver=202103122","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b28746d544261581927012bb19231f2","sha1":"746f22f3f9e71c44f31b2821cf8408d546577cf8","sha256":"1827540a28a4e450ff772aedc9dc6bdeb9690971944ada0770054b8f92d23d07","sha512":"d10761e3910ce229a07b099a1be4d00d8b15554a49d3731a2f062212d3249e55c034ea94b570593f5b55936369f7446f38d7a1771a8c51bc0c1a8f6824b42258","ssdeep":"","tlshash":"cc518496f13d143705fb28aaa1b7b2cdb0210239de030586b4ac49351ff6e23fa85d9c","size":2911,"data":"","first_seen":"2026-04-21T03:42:41.41651Z","last_seen":"2026-04-21T03:44:07.007338Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js?ver=3.6.0","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-21T20:49:09.315142Z","times_seen":453084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/includes/mmenu/jquery.mmenu.min.all.js?ver=4.2.5","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"98365aed485b9fba1b067ed4da70c949","sha1":"fa5b7a7b79e77644dcbf6df7e7e7178d3c80c389","sha256":"3118915562e6e2f88c09f8193ba8670c3820b0ef93650d1aff4d85309ed6ee4b","sha512":"dda3cf98dfd157970ea9e01937771f713f9479b80b025775970c347f5f56862ed0230ff30d977ff092c5ffc9358a0e7026229fc6bf05fc91a3d7d824696e9e28","ssdeep":"384:yaSCLD2RDiC23FZgsMsu4QMfeMZ7UAq1HN60F2jNsAA:yaSNUCOZgsMslQMGMVUNz6GrAA","tlshash":"4fa2b64eb600b5a28697e266b15e411ad437081c920b490c75b8ddeb5e7f81c66e3f3f","size":22631,"data":"","first_seen":"2024-10-26T02:22:46.539489Z","last_seen":"2026-04-21T03:44:07.092296Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/slippry.js?ver=1.2.1","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"eadb4f130bce97fc06c59219a30ad43a","sha1":"8eb34ff35485fb467383f04271bd9ccae7c4466b","sha256":"9e66fb269656b4bf96a098b6a434ddb450b8dc46211ef5d06a51d16f598da157","sha512":"01f6fb904b3415415a8219463d46e9d1a84e0d8416e4ae6668baec2bc8644431949754e6d599e537c51d02f0edcbca0f48fc8aa74a14e0e2af77d0b5256657f7","ssdeep":"384:Tb6J7rXW8X6/veDxnudt7Rv29Q3MyZS77/6XErjQrmriUu:TuJ7rGo6/Kyc7/6aQrmGUu","tlshash":"37b2984a27b3123a4c7b707f5f8f894422b68003551ee93c7dada24d9f8147946e1beb","size":25175,"data":"","first_seen":"2024-08-19T15:29:02.419466Z","last_seen":"2026-04-21T03:44:07.081448Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-21T21:08:23.655564Z","times_seen":806035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/myfunctions/css/myfstyles.min.css?ver=20210301","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/myfunctions/css/myfstyles.min.css?ver=20210301 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 15:21:14 GMT\r\netag: W/\"624323ea-1068\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4200,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4200), with no line terminators","md5":"7f2407f9dfacd4a33f12d8dbfbd2daee","sha1":"d093f89c7a8fe53695ab1fa51897e06b782b8db0","sha256":"d0df7f1e2f67326a69fc372d9336775cd8a6125831fb0e3929d61bdb2e8c2096","sha512":"611762f4bbbd285055fea74a69125ad55241b552df71574ac92ca15dd86d318063386f69433edf1bdbd9aca369c58d4398d2093842adab53b41d91326d16f300","ssdeep":"96:10A92jbJfcL4QuWxWpT6RK91czE6j2Lwdg8rgqptW:1ebJlOJgMPW","tlshash":"ed81247357500c2df61bc66de998f5e3e020c542eaab16f6d9213528ddc33d50ba3b88","first_seen":"2026-04-21T03:42:41.352554Z","last_seen":"2026-04-21T03:44:07.033194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/9-sq-com-ua.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/9-sq-com-ua.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 6983\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-1b47\"\r\nx-ray: wnp48933:0.016/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"cf584e630fc31d63027bcdf1888f6317","sha1":"70135ed35fb2326e8333a0a086032023acc2db74","sha256":"ab72a7a0df86c6f5871c9f3df89705009275453316566c7b005e843b15443860","sha512":"bbcad12cf6776f2b56a79afdbd25d039b747d08fd08d564fbc436ebdce9cd19f3dd4f622f1368cbb19a6e95f296d2e85af5f6f6638b210334d826dca9f8edbf1","ssdeep":"96:3leOQW/43i50yUsA1bE+qwUDdleY5IKf4KBMkwvo2UOis4Su6A4rKbCebbY:VeOt/4glU9BqDeIIKFmwSis1a2qM","tlshash":"94e10874c317cb2b6a21fb00a65f54822bc7022e394fdbe5b54803939c88b62547dacf","first_seen":"2026-04-21T03:42:41.354746Z","last_seen":"2026-04-21T03:44:07.059893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/style.css","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/style.css HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/wp-content/themes/emulator-child/style.css?ver=1.0.0\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 15:13:08 GMT\r\netag: W/\"62432204-982f\"\r\nx-ray: wnp48933:0.010/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38959,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (404), with CRLF line terminators","md5":"22ff16f3f8ba11a66cf7ed201897010c","sha1":"93a9e30a4cad8dd321144f0a33fef86068e9d78d","sha256":"650bcbf5d82a043dfa3f2d8aefc65adb05db1058ab1499ffa7390cb3f1b02def","sha512":"092e748c901c4af3f3744542d5d13b4bac4a7afaeed9a8a79e5ecc0a7d11a47aadd1efd3ce81b45bbd89abe39eb1007a001d5f7e507a0d94960fe1ba870014b1","ssdeep":"384:ZGmDRiXEdc5qn7BfmjvluBURAzTedukYAriX4sshV4k8LBWwd6NWwrfM/Sljr4XF:jl7lmjpAe14g4kuOuabAggp4c/t4K","tlshash":"3903c5208692311fb1679527ff929b487e2c403bfa07a6fdbda42a34d1de179427178c","first_seen":"2026-04-21T03:42:41.35628Z","last_seen":"2026-04-21T03:44:07.084012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2019/01/avatar-podlepeckaya-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/01/avatar-podlepeckaya-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12222\r\nlast-modified: Tue, 29 Mar 2022 16:03:47 GMT\r\netag: \"62432de3-2fbe\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12222,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"60ae2617e3bae6f8678ae95690358fdd","sha1":"8dc0f71840b22e9b4b0f4eee46f5f8d7611a274a","sha256":"c435f7953644d1165a6c08b98f96f6827757ff87650b0483149a50cf923d7075","sha512":"6b9c0fad98acb2168cc65a24ea86538fcd7a2f256664553da429b41f21504ff1f3b823ad81d8742253d993cd5ec7f055266689259f2edf234594ca1c47814ceb","ssdeep":"192:CfJ62/oBJU7hnMWN4SQbImstB7CAcNrfsHFATbzVaWVAQwDTsZVIMcNml:SJNoA7xXrmstB7CAjHFATVUOIjNo","tlshash":"b242bf14846c055052fa4ffa2be3b551f8088fa731dee1197bb8d820f074aebf065629","first_seen":"2026-04-21T03:42:41.357696Z","last_seen":"2026-04-21T03:44:07.015488Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/03/avatar-burdiukov-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/03/avatar-burdiukov-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8600\r\nlast-modified: Tue, 29 Mar 2022 16:05:44 GMT\r\netag: \"62432e58-2198\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8600,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"c4edc021437243c016836dc6d71b397f","sha1":"f0c12f77bd475487513743e5a2dbf72cb744ccdc","sha256":"7c94000729a2adb008067719eabbb89ff5215105ae9b8a3b36aad8a31e2ddd53","sha512":"b470499132bcf0784e38cd577c0b405fd1f976c98223f6c96f0c9a8c68ed2b8010bb8e2ba26496ee04c98387d8e21646f9f2a445c6d63231572732d2ace374c8","ssdeep":"192:Cf7V2ia/2ikAiGGmrcAvLiCke8EuM9V4LCF5GxHn95:SRa/2tAjGNAjiBe8rMX0A8xH95","tlshash":"0202bf158681ced1fc534dc90f32768622259f69ae89e885fff6fae0c0b46c95750261","first_seen":"2026-04-21T03:42:41.359637Z","last_seen":"2026-04-21T03:44:07.021733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/banner/komponenty-pitaniya.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /banner/komponenty-pitaniya.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 108153\r\nlast-modified: Tue, 29 Mar 2022 15:11:18 GMT\r\netag: \"62432196-1a679\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108153,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x666, components 3","md5":"c56a3d5da9a6ff2dda01478ec500174b","sha1":"5564fe42b5f7a15938e4f9d5dd202e2cb5d41ee7","sha256":"5c562540ab5a709af5a558fdb0908761aec55ce25d34feefb026c3875554c555","sha512":"597b785d155ed98d95edf9671cf46701b677cdee75a65e4e2f44934c4fe1445bcbeeb35b9f2f543f57ff66025ed2675ad59f60a22924a676839281694d8d9dcc","ssdeep":"3072:kA28Q9SMq2a5ch4VbskZILJnppbbq2/IQjb2XZSGv+D:r28Q9St22chuIkmLJD3rYZRmD","tlshash":"08b312d406781484dfdb6eb6ea8dbfcc1c09d65811ec885d3005ab7ab97d886cc3d2ad","first_seen":"2026-04-21T03:42:41.360901Z","last_seen":"2026-04-21T03:44:07.010497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/kak-morskie-chervi-pomogut-regenerativnoy-medicine-3fbriexh3x7c1uk521b3m2.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/kak-morskie-chervi-pomogut-regenerativnoy-medicine-3fbriexh3x7c1uk521b3m2.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7228\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1c3c\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"0c88b7452735d90abcc5d6266aea8fed","sha1":"166a746ed553d6af32e42e20807ead1539546ad1","sha256":"afd8f5e06993d79425634a8dbb32da4ad337e8c2fd3ff33e8accf7a1fe4e6c81","sha512":"179d51b84b6b50ccbdb91b05308ed76492093bc39e1ff02298b6aaca78606d0c28ae3fc5e221c241712bec167c37f20635b94fba3615dcf4487b439366252f1f","ssdeep":"192:///iQ8EK0ND/p130bfm3xxyFMbkLCKzrpcPpfos2:nf8EKszADAxyVL4PpAD","tlshash":"4fe1aeee500287f8dc9cbe018ad4e998a18e8d667334cf854e70daa344f85dddcbd895","first_seen":"2026-04-21T03:42:41.362026Z","last_seen":"2026-04-21T03:44:06.94589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/11-noi-md.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/11-noi-md.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 7784\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-1e68\"\r\nx-ray: wnp48933:0.016/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"becb48ecedac2e2bef9b2dae3137dc0f","sha1":"a3e9e75559f788f0c7aa40556e51cfb73b1d38cc","sha256":"ba58d46908575f08f7c0e6e05316e9b48c2f8c4363e85d78487809885e9d8c7d","sha512":"ae85b91bb3eee8f2a9f1f9b453717c578f9627856abf16c8d58e9f3760dc2134d3bc8eaf8d9cde9e51e0e2bd3b96274c262ab0ab10768b68734cb175de7395fc","ssdeep":"192:DPQ4CHmttPhbffi2+ub+2hsEKmdQhW32F2CDa:DP0mzS2t1GPmd/3AW","tlshash":"51f13970c703db9fae24ea0093ea40a37f82869e6815eff17554878315d1426a1bdb8f","first_seen":"2026-04-21T03:42:41.363302Z","last_seen":"2026-04-21T03:44:06.999512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.1.19","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.1.19 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 16:09:28 GMT\r\netag: W/\"62432f38-236e\"\r\nx-ray: wnp48933:0.004/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9070,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9070), with no line terminators","md5":"6b2a166fca2fe9491eb729703420fa20","sha1":"6f280e3d0b2b763738be6f1f4a71e067010d1a57","sha256":"205988b80eeedc442aa4ba78fd4bda5b1b139415f3dc88043fc73adcd71cbae2","sha512":"02b7e8887e592e367eab88169650133f529adefdd13496aff6cc28f5a50219782cab06b91fe3b7446d2c0b2a504a3c013a9c22dcd1c9d6f325febef4e81acd2e","ssdeep":"192:qQMkvyDJBygO84Awju6qEL5b4J9EWwEtQfwD9no9:zMkvyDJogfwcMo9no9","tlshash":"0d1241127669dee3e5e73c7531dbaf0232520a28e34b8440a7356ee41f7c487796278b","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-04-21T03:44:07.102667Z","times_seen":108,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/12/avatar-alena-avgust-300x300.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/avatar-alena-avgust-300x300.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 101912\r\nlast-modified: Tue, 29 Mar 2022 16:06:45 GMT\r\netag: \"62432e95-18e18\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"1cca285653c98f58a74eefdc79481cfc","sha1":"869eac4ee10a916a2876df66550f703af5039921","sha256":"51ea583746fb9ce38521d6d4957d4d8cab1a8d6539fc2459c035e8ec3a17ba69","sha512":"e07ed11d5db9fe3ec5c2d38bf7fc50849841f4de7f238705b04691ce851c16c0d5e5a606e63bd82da18ad48db74a4a4181e414342151e5a59a805f9de3f1327f","ssdeep":"3072:rYSIHbR8axUbykuqZPV/vkdSJbFOspUBY+B36/s:ch982wkqZPKd2bppUBY+UE","tlshash":"9ca312027f4c4da63fda2b32e960da304746c1fb634d794a40e6339489ab7daed543c2","first_seen":"2026-04-21T03:42:41.365061Z","last_seen":"2026-04-21T03:44:06.94888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:42:29 GMT\r\nexpires: Fri, 16 Apr 2027 08:42:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 413975\r\nlast-modified: Wed, 10 Sep 2025 16:48:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-04-21T21:05:52.454582Z","times_seen":4016,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":138,"dns":1,"connect":24,"send":0,"wait":8,"receive":1,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:42:29 GMT\r\nexpires: Fri, 16 Apr 2027 08:42:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 413975\r\nlast-modified: Wed, 10 Sep 2025 16:48:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-04-21T21:05:52.454582Z","times_seen":4016,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/styles/2026-04-14-10-40-20/widget_base.css?v=1776163220800","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:05.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1667503734.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 08:31:06 GMT","end":"Wed, 08 Jul 2026 08:31:05 GMT"},"fingerprint":{"sha1":"5A:74:01:86:76:CE:B0:E6:30:B5:2F:B1:6C:31:A3:23:FE:3A:E0:4D","sha256":"63:1E:DC:25:77:87:AF:FB:B2:7B:00:55:F8:0E:C6:0F:94:40:39:C8:22:4C:F2:10:55:38:1F:86:5B:60:E6:A4"}}},"request":{"raw":"GET /styles/2026-04-14-10-40-20/widget_base.css?v=1776163220800 HTTP/1.1\r\nHost: cdn.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 10:42:48 GMT\r\netag: W/\"99bbb6987238ecdc3bcdf26f787ef724\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=864000, public\r\nvary: Accept-Encoding\r\nvia: 1.1 67a9db8bae62321fca21cfd1c50bec56.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: zFeei4vsUiR3yTh4P2ctXOfI9cqcl8RecmXRcJdAC7cMxbmLIrTfLQ==\r\nage: 449\r\nx-77-nzt: k+FdOVUSFe2jtYxB7trhz3mNlwPGjXWcQ9EFYcHZQ2ejfKQ48R7LN/nveeop5bCqgr1x+kg\r\nx-77-nzt-ray: fdb541231a2c155d0df2e669dfd46525\r\nx-77-cache: HIT\r\nx-77-age: 578921\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":31472,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31472), with no line terminators","md5":"99bbb6987238ecdc3bcdf26f787ef724","sha1":"460a4bee2dfef02f892847f9557338a1c90a816d","sha256":"4ee6eb624f613eeb870b284faf6e982750b9f28371407bec46b161e5eb93fd2e","sha512":"804a953a544ed10e092e0f367ba09b311ae7c77a4856adc3332477133bef5d2ad4ddb397eb245e08a90b129d088dc57c0304a06a7b3cf6ffe00abade27827022","ssdeep":"768:f/UgHDIFbJd/mvpTLr/KWRO6AH28gwsL49yH5kzHNjYviFLWpM:n/S","tlshash":"36e24f1f91f6243d5406cf5cb247667c347d90046bd2e9ba9c7ab3aac3098db3e71298","first_seen":"2026-04-14T11:15:06.04933Z","last_seen":"2026-04-21T20:04:58.780244Z","times_seen":697,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/includes/mmenu/jquery.mmenu.all.css?ver=4.2.5","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/includes/mmenu/jquery.mmenu.all.css?ver=4.2.5 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 16:09:42 GMT\r\netag: W/\"62432f46-9456\"\r\nx-ray: wnp48933:0.010/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37974,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a58f6cf4625be439475f9e76fb6e5780","sha1":"3a230aa526e3cae27899f1b2b002ca3ccfbabc5f","sha256":"6974beb55f4ac82fa6b2cfdbbc05bbae7f330a6307ed627f64094cb961645fec","sha512":"f004b3c6df9d4f4edc8a35eb14d68a5e82cd615bfa36b595caeeefaffcdd8f881351cf16117b7bcca03b776c9e6f76bc73754b1968a9488e61885c8efa43a295","ssdeep":"384:ORM00XQFsMMf3PITtKLl1u1D1B1f1t1f1213s6VY1OJEh64G9aQD:ZXQFsMuPITtKPoR3NjNQLaQD","tlshash":"2803c162adf30684761a817fa2c34bbe373cd202664a9cfb7b45504bef4d78854f1a52","first_seen":"2024-10-26T02:22:46.526868Z","last_seen":"2026-04-21T03:44:07.023914Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2018/09/logo.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2018/09/logo.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26530\r\nlast-modified: Tue, 29 Mar 2022 16:03:08 GMT\r\netag: \"62432dbc-67a2\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1107x157, components 3","md5":"dcf71220c193a567ad2854ecfed9af3b","sha1":"f46d6572f5ec8fc19e12272944f66f9164512a14","sha256":"c9930d5f00f6f6436c68c20dfaddc361da5a52c931f220fda4fc41f34ebef758","sha512":"1db9c467aacdd4d21f02653f0d58bbc6b3e12882868353f514d59eda410b122993fc4255746483f50449025fc5c919ba3b159535d63a6e9235705f80e30ec4c3","ssdeep":"768:uXrJeq0Wa52yIjDy7c/d/JXjvQHrEmp1oAzvG:uXtBzaSK7c/d/xcf2mvG","tlshash":"38c2d1d82a77ca67d8a50c77672c829b597f0f6246468cb4a0e228abc8577f5147e20c","first_seen":"2026-04-21T03:42:41.370186Z","last_seen":"2026-04-21T03:44:07.045348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-includes/js/wp-emoji-release.min.js?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=5.8.13 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 15:12:45 GMT\r\netag: W/\"624321ed-4705\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18181,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15224)","md5":"116c86c56f8db0bb63f15ceda50fdc98","sha1":"75e308982ecf7cd43644b8b426e6aa1a0b0fbe26","sha256":"def5de6254be138b8b35d680d1fdd8b07827d03b8626daebfeeb4157ec330ea7","sha512":"7124c3a6d306b5aa53639a722eeb7e5cc2d144f5a698e4086bb49d5554e5e1afcc28e096b1bf0e8d96b8751dd6d2cfaeb52d6343cecb174a81a2c49726e3369e","ssdeep":"384:cn50kJuPTb9Uh31//bEP+XgA3S9CleffJmp3:c50KU9Uh31//YWXgA6ffC3","tlshash":"3e820a9bb33a4e9f343e3bd78d968f4dc9da555321c0f078dbeeb68129a00568274c90","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-21T19:48:47.839629Z","times_seen":41193,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/css/reset.css","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/css/reset.css HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/wp-content/themes/emulator/style.css\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 1524\r\nlast-modified: Tue, 29 Mar 2022 15:21:31 GMT\r\netag: \"624323fb-5f4\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"214b9acb0e9cec75a3ee6b0b39a6ea7a","sha1":"ac11b7f48efa905f6d95caca7d1fb7773dbdda3b","sha256":"9cd4ad26881dce9f3bde966fafbb3008f6b0698343af37ec2991b0a045e5e7c6","sha512":"8043e5f1e6758be8f2e57c010528dc8c88715aca0b92b7d660e4b3b5552f09c8b59c345a186ce0a641fd4245ef82d33d361cc65e904efefed0d2ff092f8a9477","ssdeep":"","tlshash":"7831652d5621acd093e7c06d7e94ee149b2d4232be4e4cb5e487fa3e850a08d14f23ec","first_seen":"2024-10-26T02:22:46.557899Z","last_seen":"2026-04-21T03:44:07.048873Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=3.1.19","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.css?ver=3.1.19 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 16:09:28 GMT\r\netag: W/\"62432f38-3e52\"\r\nx-ray: wnp48933:0.010/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15954,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11843)","md5":"30f64a741bc93036f3122eea50392b8d","sha1":"67c96d166ca3ac5321b4fbf905eb5b4bb4dfbdaf","sha256":"661e00570c65c29528d9ce6ee19e5e9939986716c293def67b07f8b6a191b018","sha512":"998acfd7cc5f154dd0c44d8cc7d4659b60fc58ee205496b7bf6b650985bd9442cc22cbbbec43c239f0f852e9a3ec02537929e885ead04200a2ea3d759f456282","ssdeep":"192:z6B/T2d2Y/TV6w51BY0njIN7JtPqCqsWYeuN/GBOUkl8/d7jRir:2Bb2DjIN7JFjKudGBOUklL","tlshash":"f262523695321219a537eb3b1ef022897312c122a5c21adee6de77318bc770e25f92d5","first_seen":"2023-04-10T08:07:22Z","last_seen":"2026-04-21T15:15:37.623233Z","times_seen":1359,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Tinos%3A400%2C700\u0026display=swap\u0026subset=latin%2Ccyrillic\u0026ver=1.0.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css?family=Tinos%3A400%2C700\u0026display=swap\u0026subset=latin%2Ccyrillic\u0026ver=1.0.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 03:42:03 GMT\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5330,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76284f7129c3a29ba859a79531a9e124","sha1":"cfa28613b4859cc94a38d32f11303c5b53b8baf0","sha256":"1835cc338319827a4afbbcb6f675fe9982babf71375cd0792dfc238c4715ca1f","sha512":"430a377eb4c7d2ca5e6384f7184de6e8cb9acd7112bf1854d0aa99f770e8b7faf387b66f65c2d70e6ca52afdc10cd7a36560a1b808fa7c705388ce9e24d85efa","ssdeep":"96:bOEaP5rOEaPqFZqOEaP0OEaPpeOEaPviOEaP8OEaPPJc+u2OEaPoNmOpaP1rOpal:8hMoTR5H1rjeZN1r0hAxMe17J","tlshash":"eeb15a92041ba400ea4b5cc263df7e33ad4e50197449d17e9ffe1888ecfad2613a8b5d","first_seen":"2025-09-24T07:29:57.298376Z","last_seen":"2026-04-21T03:44:07.018416Z","times_seen":45,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":235,"dns":0,"connect":27,"send":0,"wait":47,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/06/avatar-but-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/avatar-but-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14688\r\nlast-modified: Tue, 29 Mar 2022 16:06:08 GMT\r\netag: \"62432e70-3960\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14688,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"1455277e3e55edf5b653842783d04c1d","sha1":"55d0a46db16fdba7b3f180d673bb1e5e38343f07","sha256":"14e628d517bdf52510d5dfee8d11d2af64ae7677525e359353816547cf81bd1d","sha512":"a9d0b79d6fd1045bc22734c7bed42884a62d1f2d07cb2ef0bbe0fb2ec64925679bdab38af94e0a08b867da6ae6648b0fdef4a6c57b588f0b55201e8124a314c5","ssdeep":"384:SYaYAPZbSwQ2kfAQ42fTmDXaKNPbRfDzVMQ:SdPPpw2ExfTmfJF7","tlshash":"ca62d0f96463e7246d9e1eb5eb0a7e9b13835cd34c8627b801704175fba09e0c263a68","first_seen":"2026-04-21T03:42:41.375816Z","last_seen":"2026-04-21T03:44:07.103927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/08/avatar-todoryuk-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/avatar-todoryuk-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19168\r\nlast-modified: Tue, 29 Mar 2022 16:06:19 GMT\r\netag: \"62432e7b-4ae0\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"6dc73ea5148cdf7c462314a8d8b07379","sha1":"34fa03f451391f4687375a0d5eb5eeebd0b26254","sha256":"e7e318cddf6f69e3236cbed37f460939b0115d042793721d5fb1c27b6fb1c5d5","sha512":"06ffc82030a00e620e793a1093226c9c650722cea169fc28613f6fa824e8315208232bd6b1421743b65da87e9c08e3f5460b616e9ab3e919bf7cd4834fd7c4e4","ssdeep":"384:S5xiHiIq9AEF7Y2nW7y3YfgYJ0rkXhYSZhQJi3XHgRokdvFXukk5Ca:S5mEpYL7LfqwX3DHT2vFXy1","tlshash":"9b82e17b2d2702904c1e5c8f2054b0cfb9a3a50a6fbc653ecbf0d5a5c6b41ee17a4845","first_seen":"2026-04-21T03:42:41.377559Z","last_seen":"2026-04-21T03:44:06.969903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 374\r\nlast-modified: Tue, 29 Mar 2022 15:13:06 GMT\r\netag: \"62432202-176\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"73d29ecb3ae4eb2b78712fab3a46d32d","sha1":"05ea352ab14ccf04386a4c7d112ad4fec944d551","sha256":"c2711e9edc60964dcb5aada1bfa59c2d68d3d9dc1baf4a5ee058b4c1bd32c3eb","sha512":"7623bf487f1bcf2978090ad34d1b316381b69328007b364f20a17016b511bb08735075e32c47877b1450bbb27b5b628a647fd5d87aa670cd77bd42016feba78c","ssdeep":"","tlshash":"4ae09224b50abd62d72ed7177d28c86cb36917bd7c1b9a7c56e5082892060583161e08","first_seen":"2023-04-05T02:48:12Z","last_seen":"2026-04-21T20:18:14.486823Z","times_seen":10765,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/2-lifestyle-segodnya-ua.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/2-lifestyle-segodnya-ua.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 8293\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-2065\"\r\nx-ray: wnp48933:0.014/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"1693c6380d8edfba033e87ee01dd0018","sha1":"61d98dee66420e5313c8c6392e2e2e5022944d12","sha256":"58285b8845975a33d3e00e257c88008111e2c6ffcfb6b837d5e1b93d88738f1b","sha512":"0152d10ef7e335b48a9490b333c703b3990e4095c1b9c5717ab1fc50fe9c9e8201b97bbc4709cc0facaa470f5bd8b6bb91b75a42c62b6db6b0f93f2196cc1a65","ssdeep":"192:04f8qyMmqmKN/XXtYnGcVD5+3cJGe5vYbvFG6tqWxov:0K8q5mA/XdYnGcd5ke5SFGwLav","tlshash":"aa025bf1fe96843eed571b8e71307118c0ee4d144d4d76ebe60ba449e16b62c2af7182","first_seen":"2026-04-21T03:42:41.379748Z","last_seen":"2026-04-21T03:44:06.961242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mebel.bestforwork.com/api/wowmebli/company/rating/413","fqdn":"mebel.bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mebel.bestforwork.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:26:42 GMT","end":"Sun, 07 Jun 2026 22:26:41 GMT"},"fingerprint":{"sha1":"D2:2E:11:08:4F:8E:D0:29:DA:D7:A0:86:8C:C4:3E:00:6E:02:DC:CF","sha256":"C8:23:91:CA:B7:A0:3B:09:41:98:6B:03:75:79:E1:8F:79:83:D8:34:3E:3B:3C:44:CE:E9:21:08:7E:A4:A0:F8"}}},"request":{"raw":"OPTIONS /api/wowmebli/company/rating/413 HTTP/1.1\r\nHost: mebel.bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bestforwork.com/\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nallow: POST\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: Content-Type\r\nx-ray: wnp48933:0.030/wn48933:0.030/wn48933:0.020/\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T21:09:26.829386Z","times_seen":14031612,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":206,"dns":113,"connect":43,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2019/12/avatar-aranovich-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/12/avatar-aranovich-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17321\r\nlast-modified: Tue, 29 Mar 2022 16:05:21 GMT\r\netag: \"62432e41-43a9\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"ecead07bcd25a4b5f16387265f5dc373","sha1":"bb49fde81c4cd87838b017e3e425a56187554c3d","sha256":"2a808b925d30d38bf26d918f383d6d7d055c646a61607d9629936e15eb549265","sha512":"ba7df4eb3c8087ba9e273a6bfe1cc434f4f2ac32b0dca5f7fcf08250efe9ac4cddda126f22217cff1f92b033c65881e950b825cd91db0e7e8d44b92bdd08e579","ssdeep":"384:SoGT3wRMU7yfQkr+r2BM0nCtcFAJyaqgj22R96uAIkyodbbSVh1:Sv8l7CQkr42BzCyaqgx9RANV2h1","tlshash":"2672cfba01d29880d7288c3e495c4d94165dd978a283aed413bfec60efc7dcd464a5cf","first_seen":"2026-04-21T03:42:41.382112Z","last_seen":"2026-04-21T03:44:07.064371Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_on.gif HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1009\r\nlast-modified: Tue, 29 Mar 2022 16:09:24 GMT\r\netag: \"62432f34-3f1\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"1e483d25aa3a2c769c7e680eb75b52a3","sha1":"2dfe501fc81cd6939bd014cedb41af85b4e3c7af","sha256":"be1b058eb9e3fef483e425718456e8bc58fda7d4a81de0d6e794b1e03dfdbd01","sha512":"ff9aa8e2a8a2bcd79ef89edd9cd21689adeb62bc9d38a88040ad09b4c32ec02404fd381d26bc0f36d2e6076ee6d7466b01e46fc73ff796315ffce63930580043","ssdeep":"","tlshash":"4d1110e52f6eb518fa9603706d0c1970ef27f91b5d707310774b5c9aa2801b2d0f8264","first_seen":"2023-04-17T13:44:54Z","last_seen":"2026-04-21T03:44:07.028336Z","times_seen":268,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/01/avatar-druzhikina-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/01/avatar-druzhikina-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13499\r\nlast-modified: Tue, 29 Mar 2022 16:05:25 GMT\r\netag: \"62432e45-34bb\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"d1c1b2caea0a93c73dd1056a003e44c9","sha1":"300c5b06513e1da1053e5c5d1512f18821aa6a6e","sha256":"7e07ab817c82ae5c230530b6f73d0d67fd30b72655aa547757ac08f9a5bf94b8","sha512":"401a0a7f72ae119d40e8d758d0676dac77005c37853d70796911aefa850b780ec9f2407d72318d975b24e4af70242e2d7a685f9d37bf8b83eb53108801489df5","ssdeep":"384:S2kSeMTnI5JxE44HH7ZzMvz0e6wkfLkElUhLW07:SFpMTI5bH4n94zZhkjksUJW07","tlshash":"5952b03359453ebc0121dc2f1508b2d7d7a9ce82ba695340b2fbf6f2e9f94d60589528","first_seen":"2026-04-21T03:42:41.386366Z","last_seen":"2026-04-21T03:44:07.019996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2018/09/avatar-fateeva-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2018/09/avatar-fateeva-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13281\r\nlast-modified: Tue, 29 Mar 2022 16:02:57 GMT\r\netag: \"62432db1-33e1\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"9d3b33ca85f5223d057f98a7ba2e98fb","sha1":"cf6710af85c343609bd309e8e867d4ff6c61e071","sha256":"6d225182fdaf776f35813dfde7dac66c3b9306aded7f134154a8463c793c4fe7","sha512":"20dc87345a450177ccd8d70dcb2d4463ff77513bb98fe31ca0f20070cba6f24720b11f40a7d8c2e0e63972a58a0b0add55fa659f8d4b7e27555b7231c0d0c148","ssdeep":"384:S+iI8dxD85GqxypyrFAuAfgIirlZlWyL0hPxWz:S+mxD6cocfgD/ll4vWz","tlshash":"5052e15c2706c7acffba6d50c9d2dbaf05d08bcb702083903b30c6a9e5254d4b3a49a3","first_seen":"2026-04-21T03:42:41.387897Z","last_seen":"2026-04-21T03:44:07.070591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/07/avatar-purgina-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/avatar-purgina-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12074\r\nlast-modified: Tue, 29 Mar 2022 16:06:16 GMT\r\netag: \"62432e78-2f2a\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12074,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"4e5ddb9fd16105e437e8d480ae28d02f","sha1":"fec2fd4f0c12aa527a1112e9a63f742bfce5532d","sha256":"94e17e2eb38be195f4070bbe26c3180ea58c2b3af9b5331b7a632dfcb74106d6","sha512":"541b46b00f6a0ee50ca76cb03cfe83a61efda1bdbe055fd466fc4fe1cb2876edf3e403e9ecf4039a2ba4ef766016205ae3b21c350037ffb3efe9946d69a79350","ssdeep":"192:CfKi0sDtiTMlmlnHQvF75kQ4KHLlYuojO8eTa6KrjNXAlWznC:Sb0K3l6G5kQ4mxdyj6KrjNte","tlshash":"2742bf33e7a0bc6248f09fb1513e10ced795cad23409e7e82379c5b184984c13e9639d","first_seen":"2026-04-21T03:42:41.389395Z","last_seen":"2026-04-21T03:44:07.039212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Condensed%3A400%2C300%2C700\u0026display=swap\u0026subset=latin%2Ccyrillic\u0026ver=1.0.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css?family=Roboto+Condensed%3A400%2C300%2C700\u0026display=swap\u0026subset=latin%2Ccyrillic\u0026ver=1.0.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 03:42:03 GMT\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7794,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d29e37fdba025066dcc12edfa5afd93e","sha1":"6f91fb176c1444a291ccbed4975e3ac869c9f184","sha256":"5f84bf82bb8c6d41f2a3a30ddc2d0af56169f882b54a5f1ac6cbd83732ca0d43","sha512":"33818fb24bad4e600237b703c74dbd5c9d61bcf828dcd173cb4001fe3015c733c870dd7c665e31a3edcbd8c66ad65835a404be96b135fd0eb264fcf8b81753d8","ssdeep":"192:ANm1AQNm17QNm14Nm143rNm1vNm1N+Nm1sNm1AdNm17dNm1lNm143KNm12Nm1NXs:umeem9emcmQRmDmcmEmezm9zmFmQwmul","tlshash":"3df14b95442aa804e7475cc22bcf3e36ed4e62112048c5aadffd1c98acf7e25235878f","first_seen":"2025-09-11T19:00:10.01834Z","last_seen":"2026-04-21T03:44:07.036629Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":294,"dns":0,"connect":14,"send":0,"wait":72,"receive":0,"ssl":338},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2019/10/avatar-lisovoy-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/avatar-lisovoy-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8005\r\nlast-modified: Tue, 29 Mar 2022 16:05:08 GMT\r\netag: \"62432e34-1f45\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"17c135e0995681da3ffe9934da88426c","sha1":"ce7ca436e039263cf1b6820e2321bd6180ab4e55","sha256":"61fecf6535fcd3a202447b10d59ed585c3a6fabba1f5f29dc4abb1bb6118a671","sha512":"c43a2a2e36d36165913647ed87e073e03ee9d25276ba2cb998dff3e50676e1e350c316f579552cfdc9c9fc580c27137e00edad3a08b055b2955e3c986af26c06","ssdeep":"192:Cfv+Xb+gMHCLWHuHPfJW1vNk5s6VB2SZ+hgWI7IAwX9g:Sv+r+cL2uvhW11mJ/NZ+hHIsBXi","tlshash":"18f15d03dd10c853936a6aa86ec34eeda25aae9cc8432bb95172defe16544f51c0f10f","first_seen":"2026-04-21T03:42:41.39102Z","last_seen":"2026-04-21T03:44:07.031323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.js?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-user-avatar/assets/select2/select2.min.js?ver=5.8.13 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 16:09:29 GMT\r\netag: W/\"62432f39-114c3\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64131)","md5":"0f64f3a3a0c620a6756d36abaff1b4a6","sha1":"4738d7f9885db2cb9370766974c8f6b22e9ec29d","sha256":"00501810e93307a8882a74d864e7547fd1458deea539361dc1124ac133799a4b","sha512":"d889ad95195fd9556688666c8e6f5b132863196e1d53b07a4cdc21fe1c7f892072c4d10db63dd6544ea8ffd2e3e1325e5573e2e1b9ce20c5c52092407ae7dad0","ssdeep":"768:nopHucrre3DeGGG8MinEAs3j0TGE8jGookOlxNV7TWlOvBuZRgydn/RcSf2bK/Jw:F8hC3jIG+kOvVbyJJ1CD","tlshash":"5163c64c7a537234026f20e7256b140d22366b3e600b96a8b428cded6dbed15735bf3e","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-04-21T17:11:28.378125Z","times_seen":39804,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/koronavirusy-covid-19-3fbrhvped5niufcr4i0s22.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/koronavirusy-covid-19-3fbrhvped5niufcr4i0s22.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8445\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-20fd\"\r\nx-ray: wnp48933:0.012/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"19d7108b3b7a63c5be8455088650c650","sha1":"0d1d242b302daf257dd75161ed6107a23aca90f5","sha256":"f35f95f2a74b0762981d3219fadc71bf4dfdeb2120b3cc683f36e735d8ef6003","sha512":"1c81e1735bd2886fc0746c6827ee3d000d7676451aa1449c8bbb30aae5c012ecd31714d5db4a0484f6fe2d22cdc81cebee2b861edbd4ff25c9ae2788a6b7b46c","ssdeep":"192://HkzWQOlu24Jn6K7jtuJaOCyql2LQK7N4wSh:nEzWnw+2JuoOC1l2LQWeh","tlshash":"8302cf6f73170195d1e67cfd4d115243eacbda01e80dbb58d5b0c3aad22c6cc29898ec","first_seen":"2026-04-21T03:42:41.392496Z","last_seen":"2026-04-21T03:44:07.024618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/11/avatar-astrahancev-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/avatar-astrahancev-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9282\r\nlast-modified: Tue, 29 Mar 2022 16:06:32 GMT\r\netag: \"62432e88-2442\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9282,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"affd7ee385d8244095ed8aa5bd603642","sha1":"c6d6dc360ba3630b6fe0ec06bf13e5eb4add0041","sha256":"50ec699c1e9574384cb0ac6315a06de9bf9f3b97ddb53aa1a5e67f65cd68a339","sha512":"a59305844f7feac0dc1deccab08290fc455b59ddcfada525462e890bda5309a910a887789c933359462d25102e646901e163c9d8ec7e0feef9cc743fd070c01b","ssdeep":"192:CfrUdVclQ6Zac4RWh4J1q5mDPt3NrYJ89nOsXt0SNvXeQMF:SrUdOBZKGP8dU2O6NvDY","tlshash":"f212ae571e1342ca56d98ee469192c28be082b4d9d70aefe3df3cf87b5182c5882e157","first_seen":"2026-04-21T03:42:41.395623Z","last_seen":"2026-04-21T03:44:06.963785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 01:56:59 GMT\r\nexpires: Sun, 18 Apr 2027 01:56:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 265505\r\nlast-modified: Wed, 10 Sep 2025 16:48:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-04-21T21:05:52.487966Z","times_seen":20392,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":102,"dns":1,"connect":8,"send":0,"wait":22,"receive":3,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-postratings/images/stars_crystal_32/rating_over.gif","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/images/stars_crystal_32/rating_over.gif HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1561\r\nlast-modified: Tue, 29 Mar 2022 16:09:25 GMT\r\netag: \"62432f35-619\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1561,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"6ffc4147436a93b1fa37b05d84573587","sha1":"d1393237d49c7c8c808ca7f276e659b58b94f57f","sha256":"2d38746600bead1cea82d737e1f36d2baf2524f0784312603a53cb1da64b0a7f","sha512":"80c401842ba45f481a1a7451a90028f9deffa9088608c16690a7febc983438a2fa37847e64a66e5e2e732cb812a5f2393e43b9a1bbf6d089bd60f97a853c2986","ssdeep":"","tlshash":"a631c62cc0389200cf544b31ced4ced5a01b3010535b4b915057a770a53f2e153c6f11","first_seen":"2026-04-21T03:42:41.397149Z","last_seen":"2026-04-21T03:44:07.035706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/inview.js?ver=1.0.0.","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/js/inview.js?ver=1.0.0. HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1264\r\nlast-modified: Tue, 29 Mar 2022 15:21:32 GMT\r\netag: \"624323fc-4f0\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (505)","md5":"4edba1c65592e5e64d420fe20104eb79","sha1":"a0e2be2157e43e2dae20e43d08af042151dd75d3","sha256":"423e09ae1666148e2718bd7aacfb05d17888e0554eb51fc343ef4317ef7d3b62","sha512":"d02491ef9bfac2839800067fd258adabdd6e36ab53de020f59b4fd82950cf922c32ae0771ccdee813a668c66a35e5f5183a8edd506d6efd89dbb44ea73a9ca72","ssdeep":"","tlshash":"3d21e0297301302ed0df64e3b1ae1d091863a237d302a8d5953ad8d9167c47835afa9d","first_seen":"2023-03-07T01:02:52Z","last_seen":"2026-04-21T03:44:07.073783Z","times_seen":419,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2019/09/avatar-pylev-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/09/avatar-pylev-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11209\r\nlast-modified: Tue, 29 Mar 2022 16:05:01 GMT\r\netag: \"62432e2d-2bc9\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"7d4a1335831584059857891d6300c046","sha1":"7596577ddff2764682ac3cdfd5dbe186f7b45a42","sha256":"cbaf0e685a7f6d28398addc6ad26ae820d54166e470bfb18c8ba4a5354d8d264","sha512":"b7d3560bd2cccfab55e39f3384ee2342ffc618c5ae813824dc518a893bb4a0577a7b9b252ac84e43d058a89bb8142c26ead1475d0fa4e00acdd333495a9bb8c5","ssdeep":"192:Cf/kDq+x2Vb7i/iKSMK0i5vwosZx+LHkEAKQJ2QvSRpP2pUTnUeINpzsjNDcE:SsDFsVb7IiKSMKlrVQgQKRpP7TnUFuD/","tlshash":"11325b07a84825e3d4188fe8bf8b0d999a6d6711f8133eeb58309fc176911d78c8e17d","first_seen":"2026-04-21T03:42:41.39855Z","last_seen":"2026-04-21T03:44:07.009408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-admin/admin-ajax.php","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 24\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24,"data":"action=social_count_ajax"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 421\r\naccess-control-allow-origin: https://bestforwork.com\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nset-cookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361; expires=Tue, 21-Apr-2026 04:12:01 GMT; Max-Age=1797; path=/\r\nx-ray: wnp48933:0.800/wn48933:0.800/wal48933:D=792927\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"ProfilePress","description":"ProfilePress is a WordPress registration plugin that lets you create login forms, registration forms, user profiles, and more.","website":"https://profilepress.net","common_platform_enumeration":"","icon":"ProfilePress.svg","categories":["WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1451,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"da8f98ada5030a7c617e346b78db6812","sha1":"71bf247a2bdb2a57f26c3d0fc032b763e77aadd8","sha256":"f8576b6d6243b042092b464249cdb3696850314776da3332bdd27dd8fd85daa5","sha512":"544ff9c4aba1a642efc18da7eabf04f2d10b03469fdbaeec5d3022a7539007df6d5e2431b30959ca636ea0a1f254cd7a4358c8c18e32726436a2af8813492ac5","ssdeep":"","tlshash":"8f319c91d3d2a0bb1833d5d39696776be1d0c06ec9df010271bd06290f8de4b7423924","first_seen":"2026-04-21T03:42:41.399634Z","last_seen":"2026-04-21T03:44:07.002498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/u-ryzhih-bolevoy-porog-vyshe-chem-u-drugih-lyudey-3fbrif6isi9ply1vtroetm.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/u-ryzhih-bolevoy-porog-vyshe-chem-u-drugih-lyudey-3fbrif6isi9ply1vtroetm.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9086\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-237e\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9086,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"ca94192b6afa5c9485d480a4ce4d1ef8","sha1":"7a8733e077ff70f45681ba37a51ff4f0957447e7","sha256":"99274e743b67a5f88ac01e67b7e2a60b2d5024699ca3c03dc7fd4b62d3757917","sha512":"6eb991b39a220c14a427abeb490403ea807b0b9ab35491f8828136986814342296c9f7a85212ea4ac28e920c0df2e0be6bb17c05a2646a7a67a0533bdf60f58d","ssdeep":"192://9zmvKEO3xHPvmZtm9g0pQ5ex1BUM2ySJhbTS8n:n9ZEO3xHPvStADVBqJh/T","tlshash":"4212bf5333ac6b81dd42ecf9740b226924da7f00eacc6f09ab70c0dea2504d56ed2969","first_seen":"2026-04-21T03:42:41.400499Z","last_seen":"2026-04-21T03:44:06.954653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/pulsoksimetr-3fbrgcala4lh916a9hhma2.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/pulsoksimetr-3fbrgcala4lh916a9hhma2.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5566\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-15be\"\r\nx-ray: wnp48933:0.012/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5566,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"bed8f87c5042d8ff2bbe7d7c50036e1a","sha1":"cdd6dbd505a6ebb264470fa9ed481d79c5a182b5","sha256":"931e860b206fb3e8051fd46f3760be6360a78328ddd6f89dfa053b0fb04f5459","sha512":"7714f99398cb2778494312059d1dc722cb5b6b83338b568958362a8a74118af5f69c753249161b07c534bac109fc83f5d20a876194ad3011e88e00a4e0f65c2c","ssdeep":"96://EMM3psfxUzc1e3seWJrnLPhJ6zL8MUYdsKSFTQcA1bb69YxIRMlxBBAqB://p4yZUzl6NzMRdsbecAgyF","tlshash":"f4b18e9bc21307cb6b0bcdd5289ba611357d3f995b198f1632b4d3ee54801c848adfca","first_seen":"2026-04-21T03:42:41.401458Z","last_seen":"2026-04-21T03:44:07.101732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/vakcinaciya-3fbri8e9cphjjbqt0zp05m.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/vakcinaciya-3fbri8e9cphjjbqt0zp05m.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6300\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-189c\"\r\nx-ray: wnp48933:0.013/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"4314822eba2234c691b5a367a26e3c5a","sha1":"b0b0600c05c086a96c00165c5efae7f9fad48725","sha256":"dc0b128c18c045f945ee3f2a6c010df240228024fe34797e9d1ff0d31b4e8169","sha512":"86619c17c7a8fc8b71ed2346010436881a0e187004b723d8a38a04f756d35daef1c2e4b24572ad156dda6e69c88b0416a783a9274eaed18ee1db0101e30eeeab","ssdeep":"96://EtR10jXY5g88qu4Qg3pkSiNPfgagfPVHRqd4PDEHIIBeZHHbqzvSmp3l://Wejo5d8f83uStnTPoHHBm2vz1","tlshash":"f7d19ee9a60268cb15c09efa8d3315275ea4b892e9fcb74c3fb4e43217660e4c8c9c41","first_seen":"2026-04-21T03:42:41.402515Z","last_seen":"2026-04-21T03:44:07.05547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/13-hy-wikipedia-org.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/13-hy-wikipedia-org.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 61947\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-f1fb\"\r\nx-ray: wnp48933:0.016/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"e6b708a449e9c62e7c98170306a858a3","sha1":"aae369192562dbbe5631a007938c37cc827009aa","sha256":"a799e57069c77c27aee34a3e872d07fa2afd6f189d1652011ebfcae9c4809783","sha512":"6f87cab9aa6a579148045b169309673d98f08e64635242e83e6add15cc6cd693b9a10b3ef4f70c8df98a5c9af632b59b99c7b4bc6c87b3a972cc8e3abf040667","ssdeep":"1536:4X4z9xvt1QzyS0nqNpmtlpINe12jtJytStpkFwA:4X4/zlSGwmt3IPj7Tp0","tlshash":"fb5302c691888e9fdf387e148db151b0f5717883463ab8d14844a678fcc51b39a627fb","first_seen":"2026-04-21T03:42:41.403694Z","last_seen":"2026-04-21T03:44:07.072669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/css/slippry.css","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/css/slippry.css HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/wp-content/themes/emulator/style.css\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 15:21:31 GMT\r\netag: W/\"624323fb-2935\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"71e041df1804fc3b67621de97e2d69d3","sha1":"f2b06ab1781afebf39215de2a169fca53f0de44e","sha256":"e9c8c31c9ada0e8cbe4bb4e7c328825cc0d4f352bce6adbaadd4aa18bf1721e9","sha512":"e00ee6c9607c1857714c633dc0716f3cc42035c6e0e5dd3db3962b594bf9bf58ce454414a475732de7a642894025c6ccd0b307a0af25a320a09f0e289391ee91","ssdeep":"192:rlrlrLr1rNrjrJrfr4lzajd4tiWblHuXyh:rWRMY9uXyh","tlshash":"6c22321428b30118216ed514dbe79bf9927ce2536525dcb9f382266b8f146cc238e6e3","first_seen":"2024-10-26T02:22:46.559784Z","last_seen":"2026-04-21T03:44:07.042031Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2019/01/avatar-izvozchikova-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/01/avatar-izvozchikova-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14938\r\nlast-modified: Tue, 29 Mar 2022 16:03:47 GMT\r\netag: \"62432de3-3a5a\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14938,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"c737798aeeb3c655f0040ed17deb343d","sha1":"e18f6e80bce53eb32db81209fe12449b97816aa3","sha256":"a37d527bfcfd1bcfdcd50583367027de6d0e41bcd44e12c96161a96459f806bf","sha512":"ec0029c1234dcbb18e0953a58b46b1aaefb6e4ed2f4f8551451e53c72bb70874fb40d57dc77262eae115287491b0811d3914e5e9873043f7f38f59b61ca8366a","ssdeep":"384:SN69ATVP8kTRLU8sf1RySvoCa0wWdzmkt9PE3gyjT:SNUABP8oRL7SRyvCCkHE3H","tlshash":"ed62c0f0aa00eda8cb516f35dc230b97a09bffc16e15651d4af6d3980f0c4d560e5849","first_seen":"2026-04-21T03:42:41.405906Z","last_seen":"2026-04-21T03:44:07.034835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2018/10/avatar-ogneva-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2018/10/avatar-ogneva-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6883\r\nlast-modified: Tue, 29 Mar 2022 16:03:17 GMT\r\netag: \"62432dc5-1ae3\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"6f8161d0f10f5e899b786534e003c065","sha1":"c0aa09446d7b01eab80eaea11f5b03a49ce41052","sha256":"13f301dcf4dab61f7dd49656242c0c3cf87147f8e47bf719bb17d42f714bb6ad","sha512":"918542631395ce5dacd23b2ba660edad723dbd8cceff123940a942600a4e3290f85ab80c5aeecc8c53a501c91ea175aeaeea598402d06f8f589fb4efc273e600","ssdeep":"192:4f7LR0TPkkMAIBe+f6u4kY/7+0RsHiF48AfcR7Jkt:E/oHM3BeWzOTsHK49fK12","tlshash":"2fe18e351c52f2a3ea21cab100e203a56f327e22165c1817b8c2da7d329a3bc3ce13d4","first_seen":"2026-04-21T03:42:41.407209Z","last_seen":"2026-04-21T03:44:07.014393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/chto-delat-pri-pobochnyh-effektah-posle-vakcinacii-ot-covid-19-3fbriejwl1lrppbiwfr4sq.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/chto-delat-pri-pobochnyh-effektah-posle-vakcinacii-ot-covid-19-3fbriejwl1lrppbiwfr4sq.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6551\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1997\"\r\nx-ray: wnp48933:0.011/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"38f434de27dadc86ee85c9c00fb22b55","sha1":"db23863864d982b0fb2834d2efb64340f2455dbc","sha256":"e944ae3b0cb8104509070c9ab6cbb3d5469f9e357dd895340764f59b9fc33073","sha512":"ed90ce3aa5b08284282879b699bcc0fa359fdad78482ed8f624f6b55c4264e598868bcbbe205dcf62607603114db1c5ea9e39d733cfaadbf092794d6052c4929","ssdeep":"192://JoQzp8Lx1ay+sauEVqFND1OWK9s3yVoxo87bNxvzq10q1e3:nJoQz3saXGND1O9s3yVoVFxbG1e3","tlshash":"62d18d3e7ba03b53d0023f371a1e411b92d6e5836064ae923d32c55e9aa0ccc51adb5f","first_seen":"2026-04-21T03:42:41.408428Z","last_seen":"2026-04-21T03:44:07.038241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/8-health-24tv-ua.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/8-health-24tv-ua.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 15806\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-3dbe\"\r\nx-ray: wnp48933:0.016/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"e575cfb7ebbebe0cce40e49ca62073cc","sha1":"8e8d29e0b6fa38328b1a40db7c62c0bc61438248","sha256":"c1ddda852202a5abc42afb857f28bca73a35cb8d05e1f6ed484e4d2a44190450","sha512":"ad429913597a6472c3509ff30eaf5f1eab1a07cc0587de871e95e5d7152af9fbc72abd04a5e7b914c22707f7866cd6aabf3cb90be07891a4e95354f3112a4164","ssdeep":"384:A6+kiqvAL6NT3mIttYD34oinBkmaG/MMOtJlzAdgr1DYpp19:A6tiqI+JmqqD34lh/fUlUduA9","tlshash":"0d62b04f12fd9f1fa68b741e789398acd88cae6778b08303e18833af445f879d991100","first_seen":"2026-04-21T03:42:41.409373Z","last_seen":"2026-04-21T03:44:06.967751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 18:02:24 GMT","end":"Sat, 04 Jul 2026 18:02:23 GMT"},"fingerprint":{"sha1":"2D:61:6B:E2:1F:84:60:5D:3B:D2:33:18:D8:BA:56:38:DC:47:29:43","sha256":"3B:55:23:65:A9:74:AE:45:C4:76:18:C5:04:CB:13:36:94:A3:98:2C:4D:13:F6:B1:B9:6D:6D:17:7A:28:CD:C2"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:10\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 88b6b57e9f85be12e9ce05be6fd2f948\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-21T19:04:36.071647Z","times_seen":13173,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":36,"connect":1,"send":0,"wait":2,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/custom.js?ver=1.0.0","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/js/custom.js?ver=1.0.0 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 15:21:32 GMT\r\netag: W/\"624323fc-f3e\"\r\nx-ray: wnp48933:0.001/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f8b95d2bbc95481ac4c74d0c618345d9","sha1":"2ea2cbc34fc939b3a2388c82351ab1dff14806a2","sha256":"f49cd400664dff03ff0bc88632ba9d3ea8f442f1844576ab71a468f2978c1c54","sha512":"53f54ead5666ecb043e3142d9fc43e72d3ca237e2bcd476b4fa8c4e23111526a4ba8764ea8606416cd0aec076f4be961a9bc4d4b0320a19ade73cbf6ac1e6acd","ssdeep":"","tlshash":"1e819704b0195abaadb3336dae3db508fb79567b724a4060f4bd485c3f720186242ede","first_seen":"2026-04-21T03:42:41.411464Z","last_seen":"2026-04-21T03:44:07.000281Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/12/avatar-smirnova-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/avatar-smirnova-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7588\r\nlast-modified: Tue, 29 Mar 2022 16:06:47 GMT\r\netag: \"62432e97-1da4\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"e44bb7a89a01ea2e5c6f22942e770b2f","sha1":"7abc955ae031024d8797297e9e7335a20fda6c4e","sha256":"d633117c68ece5972756e6fe26f1979ddecf5691039e64bfa08836a42fd227a4","sha512":"f49f41eacc50c073a05cba9f80de2cc4616fa8ce94dbb5949157f91451f52c2c7c81d942c27421bc1cda9fa3ef4cae6f6910dbcc35f43b321dc8171fe31e0437","ssdeep":"96:CfEukYVBk1IJhR7t0q+1A/IIxvvPLKvP2gDh9GevcIvp0C7ilcQaaybbdB4I/bXZ:CflVuIJtcgy/hfvfh0jGayXP4IrZ","tlshash":"9af19e1b53c213f0b7928dfaa9764faa8a8a669c6501165f0f35d72b62700fc50aa1d8","first_seen":"2026-04-21T03:42:41.412725Z","last_seen":"2026-04-21T03:44:07.041098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tinos/v25/buE4poGnedXvwjX_fmRR8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/tinos/v25/buE4poGnedXvwjX_fmRR8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 18:33:27 GMT\r\nexpires: Mon, 19 Apr 2027 18:33:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 119317\r\nlast-modified: Mon, 08 Sep 2025 18:12:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18044, version 1.0","md5":"57d57d77d715dbca1686d0141253e5e9","sha1":"bc6ec15f97f36057fdcc60eac77ad004ff3c9912","sha256":"6a83608e9d03e5311507c0555e03700912bf59e0d138a9c226dc4647f3383b5d","sha512":"065b0945652839b5771fc1aebae7bffab64aef84242faf054f5efb0d3a571e54f93f63b9ef306661dbe8237f3d33ef0d2b397903443cef8ddc940e56042e614c","ssdeep":"384:9eLXQR90KFaTR56selba2j/wfTluL6/HtauNOncmDcg8jFrS+w:YVGK/Telbr7wfTo6vt6cm4rbw","tlshash":"1182d1ce63f2060bf05bb55f3909adcd74717396e294609e50880174e7adbe5b2d231d","first_seen":"2025-10-07T10:37:38.760637Z","last_seen":"2026-04-21T03:44:07.074595Z","times_seen":25,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/kak-klimat-vliyaet-na-izmenenie-razmerov-chelovecheskogo-tela-3fbriejwl1lrppbiwfr4sq.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/kak-klimat-vliyaet-na-izmenenie-razmerov-chelovecheskogo-tela-3fbriejwl1lrppbiwfr4sq.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6851\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1ac3\"\r\nx-ray: wnp48933:0.011/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6851,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"f3b5bbcdeb339a933c84d3fd685884ca","sha1":"b3a0d7b0caa8ad358baa7bf6176e3157566bb6bf","sha256":"427570d5b6f0cbcdbc9538da318f8b8b9a0e1a0185614aaacc5a79c447e52253","sha512":"496d39aebd5d4eda8876b3a2c195c51ea19ac9b6761aa08b7e57cedb7b64156bf419bc61d9855b06a4691ad968be0cc4ef54f598162549d596abb9ed328ba4ea","ssdeep":"192://UIavTLH8EIwiTw9niTVGGouc4ypI45QhT:nUIYchjw9ni1o94yHkT","tlshash":"44e18dbbb98dc0628c061efb8e665deb55dc3555b8549b8d3772e1338c408c8f08e66a","first_seen":"2026-04-21T03:42:41.415558Z","last_seen":"2026-04-21T03:44:07.067756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/js/script.js?ver=202103122","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/js/script.js?ver=202103122 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 15:34:49 GMT\r\netag: W/\"682b4f99-b5f\"\r\nx-ray: wnp48933:0.003/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2911,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (888)","md5":"5b28746d544261581927012bb19231f2","sha1":"746f22f3f9e71c44f31b2821cf8408d546577cf8","sha256":"1827540a28a4e450ff772aedc9dc6bdeb9690971944ada0770054b8f92d23d07","sha512":"d10761e3910ce229a07b099a1be4d00d8b15554a49d3731a2f062212d3249e55c034ea94b570593f5b55936369f7446f38d7a1771a8c51bc0c1a8f6824b42258","ssdeep":"","tlshash":"cc518496f13d143705fb28aaa1b7b2cdb0210239de030586b4ac49351ff6e23fa85d9c","first_seen":"2026-04-21T03:42:41.41651Z","last_seen":"2026-04-21T03:44:07.007338Z","times_seen":2,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/myfunctions/css/font-awesome.css?ver=4.7.0","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/myfunctions/css/font-awesome.css?ver=4.7.0 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 15:21:14 GMT\r\netag: W/\"624323ea-90d9\"\r\nx-ray: wnp48933:0.003/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37081,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"a561656640be2224d05c0c72724932ff","sha1":"4359422ac062432429d8b89c5dad89d4ce76050f","sha256":"72a66dc4402be16a6acecd638a565700548415b8f6c9385653004876ca823723","sha512":"1cc7253230f716529cd60066ad6c8118e1b0a8f7ec21c8c394de1cfd946becd8a5841634aad83571f29e8fe7fe9a05e5ed0cc6cde1140eefadfde80c30660bab","ssdeep":"768:LMtI+A4CSIDqvnI+YTBrFPvVrJjhiRAiiEL:ItI+A4GDUI+Y9rpVljhiIEL","tlshash":"25f231ece5bf18904391e0d16386a370bb3dbb2c8d4a6d5cd2a6798cb1c1255d2c63ed","first_seen":"2026-04-21T03:42:41.417351Z","last_seen":"2026-04-21T03:44:07.05893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-postratings/images/stars_crystal/rating_half.gif","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/images/stars_crystal/rating_half.gif HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1009\r\nlast-modified: Tue, 29 Mar 2022 16:09:24 GMT\r\netag: \"62432f34-3f1\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"588b17094e80f6cd51f16d642151e9cc","sha1":"e8c3c64dd496a8d487450e8b594ab4f86c394215","sha256":"7599b02c78a3b4c19a0d7f6e3d7bc181d8f1abeda40de117d82ce2f4ff7f3dc5","sha512":"0844932d475f54169caa387261463224cf069067a21ab5cd1e9b2a8e776e1ebaf9301f0395320759262c6df59ad99604b0ea736fc5cc26264e7e6b90fd67ed42","ssdeep":"","tlshash":"221162eb8e0a75abc268b4b8a34f40d6b91b7844dd8e8647f0523cfda4462020031b34","first_seen":"2023-05-09T10:43:53Z","last_seen":"2026-04-21T03:44:07.019243Z","times_seen":117,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2021/04/avatar-vorobev-300x300.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/avatar-vorobev-300x300.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11930\r\nlast-modified: Tue, 29 Mar 2022 16:07:50 GMT\r\netag: \"62432ed6-2e9a\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11930,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"5c82852d9f77e1be7b5f9c70648c0ebb","sha1":"41a910d30872ef8d22a526dbc4eeae4d9744c78b","sha256":"8ef0195f12e448960dc3f2a0e826081087c64ba7e29ac1926671f1f317ad97df","sha512":"7f14b04383da4fba2cc7667d7e6b4f8d866d419614e3d5e52b5e358fb8fc14a4b50c057329b37c387ac8dfe2d7e23717ee19c5b7532bc4b5a59c4786f3c7f7d6","ssdeep":"192:/fn598fVBvPzVelFk9rCVGaugn8rQ7k4LsAhGxvi8UqWaIKR3x8iJQL1dQbQloZQ:HHqBvPKiMJ8r4kKsGevi8UbWmQ/jZZu","tlshash":"1a32cfd8435b98d0580acc594d7fc41b97cf835ffd00f93674b6952585a97fa820f4a0","first_seen":"2026-04-21T03:42:41.419131Z","last_seen":"2026-04-21T03:44:06.994872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widget.js","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1667503734.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 08:31:06 GMT","end":"Wed, 08 Jul 2026 08:31:05 GMT"},"fingerprint":{"sha1":"5A:74:01:86:76:CE:B0:E6:30:B5:2F:B1:6C:31:A3:23:FE:3A:E0:4D","sha256":"63:1E:DC:25:77:87:AF:FB:B2:7B:00:55:F8:0E:C6:0F:94:40:39:C8:22:4C:F2:10:55:38:1F:86:5B:60:E6:A4"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: cdn.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 10:43:54 GMT\r\netag: W/\"2506fb3bc149e7a888a044e598386ab4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=3600, public\r\nvia: 1.1 fb02145a1ed983434aacfc27d3e4a9a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: FVG4pxzMK6GPEPuJgQxrzVX4DBV0Z4wyk-Q8H6CZD9Uk5ACUjiXkRA==\r\nage: 449\r\nx-77-nzt: k/N7V+/U6UwfCHuyxEuyd0ffOcycnj0x6kOxUmCjOvbUWPa/bTf4QQGTzIxnz5ntXUwAWpI\r\nx-77-nzt-ray: fdb541231a2c155d0cf2e6695f6d540d\r\nx-77-cache: HIT\r\nx-77-age: 2774\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1738,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1738), with no line terminators","md5":"2506fb3bc149e7a888a044e598386ab4","sha1":"3378a1ead0a89fd6b137a1cd5368ba8b175a2b00","sha256":"388852179b8115f892b5f936342e99e34f78e9e469c4c6750cc4de140e194383","sha512":"08e6b1a323d0d796e7b9711015cebd1b4ae5fcc6a7e62f0ae5e7f41d545bf3b8db9720a99db0157cf061ecc1ef686b19bf6d5942ed364aed4f077632de0618a9","ssdeep":"","tlshash":"3831947ab511f4370393145bb2abab583a3f306bb5028e52c42dddac6e18c9b503bc95","first_seen":"2026-04-14T11:15:06.139867Z","last_seen":"2026-04-21T20:43:57.959736Z","times_seen":727,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":73,"dns":71,"connect":7,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widgetapp/2026-04-14-10-40-20/remediation/remediation_1776163220800.js","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:05.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1667503734.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 08:31:06 GMT","end":"Wed, 08 Jul 2026 08:31:05 GMT"},"fingerprint":{"sha1":"5A:74:01:86:76:CE:B0:E6:30:B5:2F:B1:6C:31:A3:23:FE:3A:E0:4D","sha256":"63:1E:DC:25:77:87:AF:FB:B2:7B:00:55:F8:0E:C6:0F:94:40:39:C8:22:4C:F2:10:55:38:1F:86:5B:60:E6:A4"}}},"request":{"raw":"GET /widgetapp/2026-04-14-10-40-20/remediation/remediation_1776163220800.js HTTP/1.1\r\nHost: cdn.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 10:43:35 GMT\r\netag: W/\"89933b8b7c393b91afbcca6152a6d807\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=25920000, public\r\nvary: Accept-Encoding\r\nvia: 1.1 a2fcaa589cf2ad79b72da94df54baac6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: UiaQezd2A7UMRkoxvLuMZxBkOdmcIdIV8hznPRTNuoLxhAVL4tGcDg==\r\nage: 1\r\nx-77-nzt: k81TK/Zq5tlx6Wid7bqjBfBMzGh35Mr79n+keit+pVwxcaPKt9PP938nbK5EzSuyVVG+9ME\r\nx-77-nzt-ray: fdb54123715d6b600df2e6698cdc5625\r\nx-77-cache: HIT\r\nx-77-age: 578919\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":47204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31991)","md5":"89933b8b7c393b91afbcca6152a6d807","sha1":"49796fa7bd7474ddbb3810af3b1589cc0d45f1b1","sha256":"16567ef660f15089d36a114c3a21f5533293a352ebba6376734053ca25c3808c","sha512":"db6472084f5e65bc6ed4d5faf89b238e968287a5135bf6a39514d5feca22065784fc8ce190b07e5b62a0e19874f19d66df72f478bdeebc4d4c5baa61027aafe0","ssdeep":"768:WZmcL//ssIDbk8C9Yxh5z7DWsDSmnADmdKvl4lkhiUyPHLMIDUUd6QyNxJAdEVDa:gL//5YbD7D/DSmnAEkhiUyPrMYUUd0Na","tlshash":"7023f8fe70417037167b257ed42fe34f72763a0a610a4110ba1ad4aa2dbce465627f7c","first_seen":"2026-04-14T11:15:06.112243Z","last_seen":"2026-04-21T20:04:58.802051Z","times_seen":699,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/07/avatar-miroshnichenko-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/avatar-miroshnichenko-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24650\r\nlast-modified: Tue, 29 Mar 2022 16:06:16 GMT\r\netag: \"62432e78-604a\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24650,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"470a84cbda0e9c2c176eb05d4489bb4f","sha1":"58aa4d142672bcf55495cec8fa044839529b4379","sha256":"8a08b107ed0370aac8a66442bef11124dc9e4aa5c0ebdd372bb9be282c3bcdc6","sha512":"093e998b5da52f68aaacb4ba20ed2816135b8454456fa3549a81507426739f93620c060f812f7daf079b27482dc57769fc9b1945215e406395ec05f4a510b412","ssdeep":"384:SQG9zjlQQTGux08j7ezxnkNYrU86jXfhfF4CgJO4tBpVftgCZw9J+CUznKl/mb:SpKfux024nV3Mfi9Tdvo+CpOb","tlshash":"08b2d01ab912eab3191a0d374e62707c0b540e5a750bb31c7ba8d36e98c59d0fe0e45e","first_seen":"2026-04-21T03:42:41.421465Z","last_seen":"2026-04-21T03:44:07.005532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19a7DRs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28864\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 08:42:29 GMT\r\nexpires: Fri, 16 Apr 2027 08:42:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 413975\r\nlast-modified: Wed, 10 Sep 2025 16:48:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28864, version 1.0","md5":"4b6dbec2924c348ec965e2ad24ab0f71","sha1":"ca4b40df4c0179bd79b393b176f2d5d19b0f97b4","sha256":"952fba48c212d73793dddc1a4b0589dd8098a335b58babe50dd3e9e03c223c51","sha512":"545845c2a371a1f68dc6ec589d9b87c843099fb8c2e8e1adf1a66cb36538b29969fd3db888e4ea41b011afec0b1959e89f72f8b201c7aedea7a0c9ec0a4b96ac","ssdeep":"768:eTZgucvPHL8H3nJuHrxvedCtA0CueYja6D+LlM2:e+lPr8XJuke6uZWr+2","tlshash":"e2d2f1bf8f08eafaa6efa674958c71f9cc805b3ac904624811133960475c580a7fe4cb","first_seen":"2025-05-29T21:26:20.484128Z","last_seen":"2026-04-21T21:05:52.454582Z","times_seen":4016,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":257,"dns":1,"connect":23,"send":0,"wait":8,"receive":1,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tinos/v25/buE4poGnedXvwjX7fmQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/tinos/v25/buE4poGnedXvwjX7fmQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:03:27 GMT\r\nexpires: Sat, 17 Apr 2027 23:03:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 275917\r\nlast-modified: Mon, 08 Sep 2025 18:12:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29256, version 1.0","md5":"81d59a343de4b60d1fba09785b225477","sha1":"5c9a5d91255621f211483db272cc20f3b9ccf280","sha256":"f463d13c221b6c50abbaa16a399540440a74ce5f286b902db8aa0602ab45dd7a","sha512":"6efbac66687ed906f4c5b8bbee14980891d04eebf4eb9387b17f152235f4e9e026250a88b90314265f5aaadb147aedf52598937fdf65b9f0a00c5f088a15fbac","ssdeep":"768:WpKN7WxSBUZwlQ7Kmx58YLXMm32iRIMND:WpKN7WIBUqlQf5/LHvD","tlshash":"50d2f2b4417cf6423add15299b93f24eee2b2f15c459d0f89dcc8a4ea336b421b33941","first_seen":"2025-09-09T12:14:26.471298Z","last_seen":"2026-04-21T12:57:04.975081Z","times_seen":318,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":75,"dns":1,"connect":8,"send":0,"wait":24,"receive":2,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mebel.bestforwork.com/storage/uploaded/company-logo/logo.svg","fqdn":"mebel.bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mebel.bestforwork.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:26:42 GMT","end":"Sun, 07 Jun 2026 22:26:41 GMT"},"fingerprint":{"sha1":"D2:2E:11:08:4F:8E:D0:29:DA:D7:A0:86:8C:C4:3E:00:6E:02:DC:CF","sha256":"C8:23:91:CA:B7:A0:3B:09:41:98:6B:03:75:79:E1:8F:79:83:D8:34:3E:3B:3C:44:CE:E9:21:08:7E:A4:A0:F8"}}},"request":{"raw":"GET /storage/uploaded/company-logo/logo.svg HTTP/1.1\r\nHost: mebel.bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: _ga_N0QYN0CXF6=GS2.1.s1776742924$o1$g0$t1776742924$j60$l0$h0; _ga=GA1.1.388685792.1776742925\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 10 Feb 2022 12:16:45 GMT\r\netag: W/\"6205022d-e4e\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Thu, 21 May 2026 03:42:04 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3662,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62c9cfea73d406d707055431a1dd3fe8","sha1":"d666b296002af9adbb33fc8149f7525cb33b20dd","sha256":"913798705b4e21ccc71a41d89b83d6a8c14aeef74e8761dcf3c3b7b431f803fb","sha512":"82d700cd6de9f365733fb359a85b3cf73b14ad4ce2e6ddd7623a2eaf787882603da4a72169106b1012c7b138139dc5f03e48ea62d282838461b557ab33724b90","ssdeep":"","tlshash":"997141e576d482a0b94497b1de36a47976a230fe71530020c391b91a34c59ffcdaabd3","first_seen":"2026-04-21T03:42:41.423004Z","last_seen":"2026-04-21T03:44:07.10579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/kak-vybrat-horoshego-vracha-3fbri504mt3gi0l9mlpatm.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/kak-vybrat-horoshego-vracha-3fbri504mt3gi0l9mlpatm.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6274\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1882\"\r\nx-ray: wnp48933:0.013/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"e4941aeb2e2bcb7b25ddc26d0785cf42","sha1":"c3a758e056c9956bfdbc07009d6b3fc607a4ac79","sha256":"e48794369ab6280cbb3895d1e64c49db6d762c0581cc165f27231e4a72b62e9c","sha512":"50c5974424b85c0822c4b07cfc71d8d1f28a951e9070ce71e3cecb2f60ed280802fd1c47d9060ae3adf4480fbdf520e25e5107aa08235a1227d90bdc82ca2a02","ssdeep":"96://EHpXoEw87F18larwV8FA1chzjO8hTXKKoxanX1HkKZ2rmQHBhtO0S://QpXoEw8hXrYWjOiTOCX1HEfHBbu","tlshash":"2fd18f69bfe65b746c85cc7c5fdceffa80e50044b159c2614ab5c108e7685f69809d10","first_seen":"2026-04-21T03:42:41.423896Z","last_seen":"2026-04-21T03:44:06.998229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.89","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/js/postratings-js.js?ver=1.89 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 15:21:29 GMT\r\netag: W/\"624323f9-d01\"\r\nx-ray: wnp48933:0.005/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3329,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (516)","md5":"830dae7fb9dfd5ac1879a83dd028083d","sha1":"6be6afca684e3305000879ad71f264f0c6549bd1","sha256":"c42425f18923921089911e70f39c6dd462794df2e42ac0596abc3884da6471fc","sha512":"a9bab7675e178d288189b7f377b332838a6ea8455d75b445e304953cedf269268c0458dd82658fe36f523ea6c7f212167d32dac3cebece0e0400fb5a0f2666ed","ssdeep":"","tlshash":"f2614c78206c66cf8b3630f2e42559216a7d6cb5ba40ce4c965e08d71b5b1683329e1f","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-21T13:58:09.671362Z","times_seen":2031,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/swiper/swiper.min.js?ver=4.4.2","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/swiper/swiper.min.js?ver=4.4.2 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 16:09:43 GMT\r\netag: W/\"62432f47-1e744\"\r\nx-ray: wnp48933:0.010/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271)","md5":"06b841d117ab49f48e5e35d824857301","sha1":"1e25275a47d95d8f83cace2ae8ae75ec74cd8cff","sha256":"df178d935914fb63c2880bd93c76c7cae03e199962799b58cfff6916f60b9e3c","sha512":"0f36457c5cc2f76581421a49d3337a25445653d9679d6c1ecc0dad098bd83dcc9b1d455c1027eda18bcf76a494cca5f369c324d6805d9a7d69f261536038f93e","ssdeep":"1536:xApNsiJ532VXrtnTN0K8V7wluJTryZjk5PuFzLlvp0XvH7WcWUwcPqYbsE8EtObb:nVXrfX67F2mgLlufH7WcWUwcPquzab","tlshash":"07c31849b35071d551e72256539ed601a3b62805b90ac1a831b2dcdbacbde8c03bfefd","first_seen":"2023-03-07T13:51:26Z","last_seen":"2026-04-21T03:44:07.069817Z","times_seen":777,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/04/avatar-osipenko-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/04/avatar-osipenko-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13281\r\nlast-modified: Tue, 29 Mar 2022 16:05:49 GMT\r\netag: \"62432e5d-33e1\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"423656ffdc7aba8b3ccc0b01b3a717d8","sha1":"4d881982f668e2f031c989654f94987304e9c7ba","sha256":"a488f9693057f50b861bc49a2ae27cbbb6bb736bf5e41619012c8067c40551e5","sha512":"8e1cee8a635466079db6133a35c7bbdba3ad4e9481400a1cc374cc8d58369b3dcf5782aec253e6ad9a95933c1dcc57790df593ffa86ecdb5e43da88744786eae","ssdeep":"384:SkcfbTEH1onTnzZbvd1B/hfZNNWVFa7d1KneTnB:Sdf8Vwph1B3NNWViQnejB","tlshash":"f952c017ef22528eef7a1968e1147d1b13bcecd1481816c77d32dd865632bcda10618a","first_seen":"2026-04-21T03:42:41.426069Z","last_seen":"2026-04-21T03:44:07.025778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/vich-3fbrh167w24rimywj03g22.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/vich-3fbrh167w24rimywj03g22.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7889\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1ed1\"\r\nx-ray: wnp48933:0.018/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"9272cb274d9423c5802c58676be0b446","sha1":"938b7e6d10a0ea711dc31bdf915fe17e650ff16d","sha256":"0f3b2172fbdeaf52dbb9f7b672149748cdefe97757f313d68071adc28c6fe68e","sha512":"f52b4b667943d9c4540ecd159a1e3d01d8fa83ae7e99e8d11fc05ebb828a87076d1b514ceca8e918767c28a022ca2920d7476f5e9295f2cac1af389e60a45969","ssdeep":"192://Pa7eU7MHlltnA4sPr4QPnImZ/uSWgUh8zmggtJTF3:nySUoFnnAbPRI5SWBmz/kR3","tlshash":"18f1bfa7f55d53e2606f8cf76b22423087c34e66f558d689343af588cac1cf1d096a23","first_seen":"2026-04-21T03:42:41.426999Z","last_seen":"2026-04-21T03:44:06.957216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tinos/v25/buE1poGnedXvwj1AW3Fu0C8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/tinos/v25/buE1poGnedXvwj1AW3Fu0C8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 01:36:34 GMT\r\nexpires: Mon, 19 Apr 2027 01:36:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 180330\r\nlast-modified: Mon, 08 Sep 2025 18:12:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26432, version 1.0","md5":"f794518bdbbe64871a1108e07c99e6d5","sha1":"eb5f9ea49f0e6a4df04718aa463204720fa11cd2","sha256":"e0a23c74d54fcac93ec7b8695ea8bd18ab355350c2a64cfe487ed1e2e6b58440","sha512":"6328cb702a7b37f1838ba7642dbf0bd2dc799cefe46745539e5553d17a01e9bd6bb716e6c96eed3599dfc785106d5e5390903b1c3e67e4dd95fed4bc8958612a","ssdeep":"768:mJe6RZWyWspUEQJ4ebSD1gorCySQK17IlLvVMb5vdI6cuHm:UshEQJbuvr497mvVMb5vtG","tlshash":"cec2e1af4c244c2322bd4dffce5b9f5b084f1adf9b8a966c79453621d98434166e384c","first_seen":"2025-09-19T09:50:54.6802Z","last_seen":"2026-04-21T12:57:04.983613Z","times_seen":239,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2018/09/cropped-favicon-1-192x192.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:05.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2018/09/cropped-favicon-1-192x192.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 5638\r\nlast-modified: Tue, 29 Mar 2022 16:02:59 GMT\r\netag: \"62432db3-1606\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:05 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"8899cdfc510fc62f7dadf664579480cb","sha1":"e1545f378dfddaa60f631d55b4e00443de12088f","sha256":"1fceb41c14266c62460bb151e2652642ededbb37506475dba12f9fba16644714","sha512":"6d752723ea24382bbdaab6eccb85047fc404d7ff839499544dd867e7b74c56eb6562748a1340bc333653b48a4b747f2ddf93ca567daa4a6676a057d145b9c5c7","ssdeep":"96:LNpmimpTt0cz11zkIs29OSSda6/SwcfUHE9VNIQqp5EZ5QVGd/T6rZQKYv/r1xOP:rmpT6OlkILM7a6KwZHETyB5HVa/a/sOP","tlshash":"15c15bba57b9bfcdc236ae6ff88cdb255445d0ca8e32af73818062d60550125de9601b","first_seen":"2026-04-21T03:42:41.428532Z","last_seen":"2026-04-21T03:44:06.996259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T03:42:01.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 23994\r\nx-pingback: https://bestforwork.com/xmlrpc.php\r\nlink: \u003chttps://bestforwork.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://bestforwork.com/wp-json/wp/v2/pages/8\u003e; rel=\"alternate\"; type=\"application/json\", \u003chttps://bestforwork.com/\u003e; rel=shortlink\r\nset-cookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361; expires=Tue, 21-Apr-2026 04:12:01 GMT; Max-Age=1800; path=/\r\nx-ray: wnp48933:1.600/wn48933:1.590/wal48933:D=1594055\r\nlast-modified: Wed, 01 Sep 2021 17:59:32 GMT\r\nexpires: Mon, 20 Jul 2026 03:42:01 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"ProfilePress:3.1.19","description":"ProfilePress is a WordPress registration plugin that lets you create login forms, registration forms, user profiles, and more.","website":"https://profilepress.net","common_platform_enumeration":"","icon":"ProfilePress.svg","categories":["WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"All in One SEO:4.1.4.5","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":122890,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1820), with CRLF, LF line terminators","md5":"62062f09274ba8fbb665dc3895507795","sha1":"7321fd509ad9da6ac7af909891a717da49f89943","sha256":"799c1ecf96557efe74639eeb51bbeb5fb54c29d357a3b7cc3e3252183a222a2e","sha512":"8b95deb53878929af0250d5a73f04baa56b188dd069179b3e768a8de15e94e61a6bb0d79ae1504aef270fc2d39af58e494ee07b58cc282f1d62faff58ea1d1ea","ssdeep":"3072:7/9kivsiBObcKC4T9LrP436xRAT7WqkccWox38Hdul4oFb:FBObcKT9L0OuTw","tlshash":"54c363b3054e68bf1231ba47e428ba09f5e7847eef87960273f1292db3d3d50866511e","first_seen":"2026-04-21T03:42:41.42949Z","last_seen":"2026-04-21T03:44:06.993145Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2061,"timings":{"blocked":186,"dns":95,"connect":43,"send":0,"wait":1682,"receive":4,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=3.1.19","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-user-avatar/assets/css/frontend.min.css?ver=3.1.19 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 16:09:28 GMT\r\netag: W/\"62432f38-117d9\"\r\nx-ray: wnp48933:0.020/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ddf36c190a99686b0858a612645a8ce5","sha1":"c08ca05274b82a64b83e76903137eba90819f744","sha256":"8adc377a6a5c1d3a9ab10793c57b6dc6fdfcff0de61f52dda905da037d1c1e7c","sha512":"e541ae0c17d8f3f0ddbf8c1e070ae6bd5d454a0a224b3e903ffed06fff668a6e16fe531630702cdfc9fb73f39393622e019d7e1c18c9cc076c551c59af71c841","ssdeep":"768:OxcDQPw74qdDzXe7gCpo+oiYOIYucizkrUM0Cfq+KXji0vYROsKnsnMux+KFPnrS:OxcDQPw71VcmTY5YxYgYV4","tlshash":"51637432fd94621a74f77c383ad93e3c3a3d801291875aade1526b1d43de4a71f5228b","first_seen":"2023-05-10T22:29:19Z","last_seen":"2026-04-21T03:44:07.011388Z","times_seen":48,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/kogda-budet-detskaya-vakcina-ot-covid-19-3fbriexh3x7c1uk521b3m2.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/kogda-budet-detskaya-vakcina-ot-covid-19-3fbriexh3x7c1uk521b3m2.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6295\r\nlast-modified: Wed, 30 Mar 2022 08:04:16 GMT\r\netag: \"62440f00-1897\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6295,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"11e24f40febc2d49a8a14fb18cc9e098","sha1":"fa6a84aea60af89f999e39a1235501c8c715e264","sha256":"09b29ef4164f6b8743f25d9dd3cff089f23a954ebfc052ee13c9e6e549dcb6ca","sha512":"545f3ed0bb5283076bb7fcd49e930a592bd93ce7c0b38e020ae811d5ef381bdff5dc66e26564ae09ceb941a75d9839ec946e987a78b73b3ae473fa6c12fba041","ssdeep":"192://Feq/FQUpJqzu08o/jZK/+tzzH60OPh1ld:nFeq/FT0u0rLjva0OPh1ld","tlshash":"16d18e1d9b3393a950a56e19cdab4515a0cc7b93f06bc190bdf0c272db115fe70a9a0e","first_seen":"2026-04-21T03:42:41.431061Z","last_seen":"2026-04-21T03:44:07.046963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/kak-ostatsya-zhivym-na-dorogah-3fbrhz81xcksns95wr74zu.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/kak-ostatsya-zhivym-na-dorogah-3fbrhz81xcksns95wr74zu.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6902\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1af6\"\r\nx-ray: wnp48933:0.014/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6902,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"06fd15fee1d15328898ed803150398c6","sha1":"9050545a3867e3a2528b0e9fbc0077bd06a8025a","sha256":"2b43163ae06ed35cc2ff25831dd0484b2361e78666bd08a56cc9980bb4ea0cf7","sha512":"40f36d368cd8856ef5111a053467f6b9f6e0a6c6a5f7dd00befb2a46d39262b2a061645610cc9b108f32c2a33ba43f77cafe613e4589bcc0e8fe8f0a2c62fe04","ssdeep":"96://Eru2u5X2Hm5WKKxB9dBNmZACWOUaMYwUVhKuE5g3f0sAKfXfXLk6/t4umZbJSa://5V5a9dBNrZaMYhhayP0szXf7kNlI6","tlshash":"bfe18ea40f93837ad0d3bcb03bd2070e7ee55d55b5085b92a873f5b286990dc84572a8","first_seen":"2026-04-21T03:42:41.432141Z","last_seen":"2026-04-21T03:44:06.994042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/7-et-wikipedia-org.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/7-et-wikipedia-org.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 58095\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-e2ef\"\r\nx-ray: wnp48933:0.015/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"ace03492afb21e9e01ea8fb679a05746","sha1":"27b3143f3f390bd2db7d954dd26c0758fcd10171","sha256":"59289b440ae779e8d306451d14d355e6d5a2d1a7eb9f0066ab640ee1456693a4","sha512":"486974644c7e4ca2ea7f4ee2538bfc90782c2d310303c8f006b43075ada10c6e12b699211f9a2a1196a7a3b9d0acd9436b4ddc396ddc58a6a5943a5a343fccdc","ssdeep":"1536:qD6QCB3j6jLBVRpGe6qRH+UnbdN3tBWIP47x9I5N:qD6lB+jLBVRpEqUUf7WIP47x9O","tlshash":"0f43f2ef751188afc6151804ac3b5bdb6ab2b02c7118b4bc32d4e0eb931675c25a9be5","first_seen":"2026-04-21T03:42:41.433138Z","last_seen":"2026-04-21T03:44:07.040162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-55VT85","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtm.js?id=GTM-55VT85 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\nexpires: Tue, 21 Apr 2026 03:42:03 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 21 Apr 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128860\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377235,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5461)","md5":"63188eb6244c1e05b4083241aea2bdd5","sha1":"3a6035d565cc009e9aa855fd2256e0c216e20290","sha256":"b82d32f1df0d55edaf82622412ce5717b1996e5a037ef0da3bbabc3086443470","sha512":"ef35e742f96f44dc5e588522815a83afd1881a0cc91fe76c7efbb13c2792ced00c961cfb56d9aa7530035a2f386fcf2b0fec6cb4c4fd061e769f069f880a9190","ssdeep":"6144:EN9VD9ttWeRtGgYypeg8l+EwfUWgoHjKz5vn1j1THtxu:WttWe7GkT8wqJ1jrs","tlshash":"748408cdb3da74624393a478903f118bb27a7892f44cc899f185d8e42e7469a4277f7c","first_seen":"2026-04-21T03:42:41.434243Z","last_seen":"2026-04-21T03:42:41.434243Z","times_seen":1,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":95,"dns":109,"connect":20,"send":0,"wait":38,"receive":54,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2021/03/tedeeva-madina-elkanovna-300x300.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/03/tedeeva-madina-elkanovna-300x300.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12027\r\nlast-modified: Tue, 29 Mar 2022 16:07:49 GMT\r\netag: \"62432ed5-2efb\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"32ad8124b5feecf5f51da42d4db51ec1","sha1":"5c7ad4bce9b9cfe310391215a8c897f0a198fea4","sha256":"4906daa72570ea9accc73758035c74a5a14bcba113312d188ed53bf4dd7f8ca6","sha512":"63802157e3d122e4f04865a7e4f6d142b5ff9671a86fe1e2841f1cb298873a56d7a715c7a59a8b55329c3d6bbcc114ab753616388d1794d7e9a47db730646df4","ssdeep":"192:CfXm68RjOxd3wEHNsYFbn0S/aIlSXxp0MhFo1R5awj27nYJg58XJ5TaQGZvtYlmb:SwupbWYFbnZaIlSBWMUPj27nnqnazxWw","tlshash":"bb42c0c696816238e01bbff8ac666a6750020f20e5a0a7475e71eb3bf124fc7350b597","first_seen":"2026-04-21T03:42:41.43537Z","last_seen":"2026-04-21T03:44:07.085592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/4-eo-wikipedia-org.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/4-eo-wikipedia-org.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 55649\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-d961\"\r\nx-ray: wnp48933:0.015/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"d72ab90b5913b1dba70cd8db0b282ded","sha1":"a5bf379447c73aa1abff2f3401c81f968df9b163","sha256":"fa9ecc84f466c565da68211ee685c389b87082e515a344f118b332510ef760f4","sha512":"ffc59c32c809ea13127fd2cd044b5e0fcb1d6607d0582827bd122915e9bf74c29da36858a0ac7863043cc41b6d389cc8b621df73207578c910405cf4796212a8","ssdeep":"1536:q2AT7XxuJbAC0iX9Uythz6VAf74e+ce+F5Jn:qxxuJbVbND4e+cxFvn","tlshash":"8b430185a9dd98b3ad4f985d872a19ec6cda33252508f48d86c870f0fda4b2c90bf153","first_seen":"2026-04-21T03:42:41.436453Z","last_seen":"2026-04-21T03:44:07.012425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 01:56:59 GMT\r\nexpires: Sun, 18 Apr 2027 01:56:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 265505\r\nlast-modified: Wed, 10 Sep 2025 16:48:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-04-21T21:05:52.487966Z","times_seen":20392,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":111,"dns":0,"connect":23,"send":0,"wait":14,"receive":3,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/myfunctions/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/myfunctions/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/wp-content/plugins/myfunctions/css/font-awesome.css?ver=4.7.0\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Tue, 29 Mar 2022 15:21:15 GMT\r\netag: \"624323eb-12d68\"\r\nx-ray: wnp48933:0.001/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-21T21:07:25.297386Z","times_seen":434165,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/6-nmc-med-cap-ru.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/6-nmc-med-cap-ru.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 70436\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-11324\"\r\nx-ray: wnp48933:0.014/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"8f481221f727d3dc8d3963a1b8ce2cef","sha1":"557f0ca4c809e3f9d462506294ad27237f4e73d7","sha256":"ee5ce1de0ace9559254cab781e5c330f31742d5421f2e206c82ee533113dcc96","sha512":"f7d1358316e2c2ece4ebec86eb9a388ccc2e34b3460159e29114d37fd97813fa9dc1f9622f5f4b8f71e7a01e62437ba55f0e90fe85567e838886dcb700e6f59d","ssdeep":"1536:Fg1nAXUOju8WDyuDTH3ePSyvKLlfYKkKekLm+UQyd/Es:K1+UOjNYyaHECLlQihtUNd/Es","tlshash":"e063f11fe22995f2f8999093767cbb2aa8c33a13d43105c8c72eadb4531fbb50530959","first_seen":"2026-04-21T03:42:41.438099Z","last_seen":"2026-04-21T03:44:07.091222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/09/avatar-kozlova-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/avatar-kozlova-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12621\r\nlast-modified: Tue, 29 Mar 2022 16:06:25 GMT\r\netag: \"62432e81-314d\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12621,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"8160ab589a3ac27e8e6311377352ff94","sha1":"32f1b1364c1fc24dcb92ea4a95c4f10ad594b9c2","sha256":"23bb850a001742008058b7d04c10ebc3c16cd8bac36683b78a8bdc5f28d7c8d6","sha512":"62afe9ca06949d81a84296c87c6d9941e1013081fb795aa6ac5075c88a80dfdfb8631242850518b4c239450dfa2336645ae5c2fe99dd6aab9d24ee18a341036b","ssdeep":"384:SXIzHHFyem9d/p47cc2ESVOp8P1jGqqcwMqBS240:SXIo9/47H2hRfqRTSB0","tlshash":"1b42cf0f6570d4cbd45a8de8a1836bba54061ea6f843b76b0939ced2f9300c68ccdc26","first_seen":"2026-04-21T03:42:41.439127Z","last_seen":"2026-04-21T03:44:07.017044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/01/avatar-mansurova-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/01/avatar-mansurova-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8674\r\nlast-modified: Tue, 29 Mar 2022 16:05:25 GMT\r\netag: \"62432e45-21e2\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8674,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"96ccfb35fe82c72757ff7c6a8c8cf2db","sha1":"dab750d8784e9747c1b17166680a1f6eb95915a1","sha256":"3715193d954efac3a0c2edd77aacec22cc5730d17b73d2a11d428bdd8288ee53","sha512":"86897fe9a931f953a161d27b795da06bf12ccf1df05d5a19cc86b5223da49b3fdc9c9aa25d44d7cf76a1079e6e0d4569cbd26204c20073a90e141003d2a7276c","ssdeep":"192:CfjN29icXdWHHbbfgst7LScXayNgkEF+pVAbcYS1c2:SjERdMHfXqyNnE65YGc2","tlshash":"5f026c1b8e029316f402def8be1adadc87152c15f96679f21537cfd2aa201caec0c49d","first_seen":"2026-04-21T03:42:41.4402Z","last_seen":"2026-04-21T03:44:07.098883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.userway.org/api/v1/tunings/OFpTghXpRg","fqdn":"api.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"52.42.200.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.userway.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Jul 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"10:7A:35:EB:55:85:0D:A6:9E:BB:48:49:3D:72:BC:28:08:2B:05:EE","sha256":"12:92:5D:17:44:15:4C:2E:3F:72:52:57:26:71:0E:C8:6E:ED:76:75:C4:F5:72:D4:56:8D:CB:4D:33:39:FA:DF"}}},"request":{"raw":"POST /api/v1/tunings/OFpTghXpRg HTTP/1.1\r\nHost: api.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bestforwork.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 116\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":116,"data":"{\"s\":{},\"o\":\"https://bestforwork.com\",\"uid\":\"ff84ff98-7669-46ef-9cf5-7c0e72035639\",\"v\":\"2026-04-14-10-40-20\",\"c\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 644\r\nx-service-version: uw-pr\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, PATCH, POST, DELETE\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-service-request-id: usr85d3f4fc04c5498\r\netag: W/\"284-jTnKoXUUUsMstoaJKYNUgO36Ktg\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":644,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"39b62caec44cfbf6bfbbcae13ba28961","sha1":"8d39caa1751452c32cb6868929835480edfa2ad8","sha256":"ef6a951e4f8460ffc5cfb05e08915eaebd493059ce1ebc1a8110455eb23d8c1c","sha512":"bcb9701b02036b1658be03bab86dd4e1e38cf13f1771a006909859cb81ddcdd5f4443f76624d05638030f7ac8cb2fcab7fa57f45ae564bc323873eb44b489db1","ssdeep":"","tlshash":"3bf0998e041a5cf5cb96464a96053e12122c22aad8007e18bfe8a65444fb0ac1133417","first_seen":"2026-04-21T03:42:41.441491Z","last_seen":"2026-04-21T03:44:07.027129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":397,"dns":14,"connect":173,"send":0,"wait":179,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widgetapp/2026-04-14-10-40-20/locales/ru.json","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:05.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1667503734.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 08:31:06 GMT","end":"Wed, 08 Jul 2026 08:31:05 GMT"},"fingerprint":{"sha1":"5A:74:01:86:76:CE:B0:E6:30:B5:2F:B1:6C:31:A3:23:FE:3A:E0:4D","sha256":"63:1E:DC:25:77:87:AF:FB:B2:7B:00:55:F8:0E:C6:0F:94:40:39:C8:22:4C:F2:10:55:38:1F:86:5B:60:E6:A4"}}},"request":{"raw":"GET /widgetapp/2026-04-14-10-40-20/locales/ru.json HTTP/1.1\r\nHost: cdn.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 10:43:34 GMT\r\netag: W/\"4d4e71e9764c01bf0bf812886db0d867\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=25920000, public\r\nvary: Accept-Encoding\r\nvia: 1.1 6fa384f51cde51d7c86ee18d17ac3eaa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: 11TGHOM9FWMqbiJbExck72Cyc9qknCLIdT_nq2eRsmIMJ4f3GUf7Mg==\r\nage: 88\r\nx-77-nzt: kyvea9v8AVFqF/C8BYTeFuwP/OlDK/Y8+oEU25QClx8659njceaPIuGzSHt057bZeyndO+4\r\nx-77-nzt-ray: fdb54123715d6b600df2e669b6ac9d07\r\nx-77-cache: HIT\r\nx-77-age: 578807\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1012,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4d4e71e9764c01bf0bf812886db0d867","sha1":"39a87078f8bc344b4f530a9beab3ef43cd93cf55","sha256":"1b2d85f1b078e0bdb20588ba9a3f85c67241c68827dbaafeb8fe19b356fe0b26","sha512":"373d0a974ef651264d5e5cda5159308f3f0720aacb708525c9015d5605efc292987224fd83c5df4748873c7cbdf1daa7234fc33a0fe6ee17112c210aa543b409","ssdeep":"","tlshash":"70117b32766da4ad120c9022cd89771f565706febfb5422349bc3e2a11b1265402ee22","first_seen":"2025-10-14T21:12:53.431194Z","last_seen":"2026-04-21T03:44:06.978256Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/10-lv-wikipedia-org.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/10-lv-wikipedia-org.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 57103\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-df0f\"\r\nx-ray: wnp48933:0.015/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"6c2c7cf344c81f8229de9f785076d71a","sha1":"f550fab47a65dee9c53c02dc8c9ed374b6fc26c1","sha256":"13d33fd632d321b9f4df4188c72b1e53d08b2e46d25058efed330af0d64e9cf8","sha512":"5578883957ed1176e9f2326606a91b8cb40ac3d3c8c91a30107afb5c2f2f4a93d2d376a5a4a2623073057559e1fcbd0ff503fc39d7bed40c22749ee53ede03ed","ssdeep":"1536:/k/0oEhley31EXj73YAPqihYYphXMBOLAJ8Kvw3sgsR6DZn:/k/SrWY4peBlxDR6DZn","tlshash":"e6430220d3ff4d6c4e0c895a9a4ffee4b53e78cd675b185085add9a884f08d98088f76","first_seen":"2026-04-21T03:42:41.44492Z","last_seen":"2026-04-21T03:44:07.056381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/images/search-bg.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/images/search-bg.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/wp-content/themes/emulator/style.css\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 84\r\nlast-modified: Tue, 29 Mar 2022 15:21:31 GMT\r\netag: \"624323fb-54\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced","md5":"16c4af17cae2db84e32a2db7ec1809e7","sha1":"d6afa911c2bff19814b9e38fa59f6273add98aa5","sha256":"075bc32c0152784f632369ce7ff734d4bfa8291bba869aac45fb5f63161d8858","sha512":"580caad86d382c733b32d810d467592415838ce1df541913d897efb177130be1364f88546931be8d4516374b2cebe26d1ca1c7ce7785dc17fa4ba0b14d1a3ec3","ssdeep":"","tlshash":"d6a012f323635828c622013f601b0410cd306050190012858285d13468e24504080282","first_seen":"2025-10-07T07:38:45.102147Z","last_seen":"2026-04-21T03:44:07.095748Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foodandhealth.ru/wp-content/uploads/2019/02/doktor-300x300.jpg","fqdn":"foodandhealth.ru","domain":"foodandhealth.ru","tld":"ru"},"ip":{"addr":"80.249.131.8","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"foodandhealth.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:01:56 GMT","end":"Thu, 04 Jun 2026 02:01:55 GMT"},"fingerprint":{"sha1":"7D:2D:AC:C6:6C:BC:5A:6C:4C:2F:F9:C4:27:5A:CB:7F:1A:0D:14:AA","sha256":"BC:5C:B6:EC:DC:09:70:AC:2D:8A:26:F9:87:B8:F0:B6:F3:4A:45:79:C3:D4:07:94:27:80:FC:E0:3D:80:18:82"}}},"request":{"raw":"GET /wp-content/uploads/2019/02/doktor-300x300.jpg HTTP/1.1\r\nHost: foodandhealth.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7814\r\nlast-modified: Tue, 12 Mar 2019 09:25:11 GMT\r\netag: \"5c877af7-1e86\"\r\nexpires: Wed, 21 Apr 2027 03:42:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7814,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"4e4d4ef43c63a3c5a5d51211d4710081","sha1":"f2eb58c988cb41878c01680d9fbb08f30166dcdd","sha256":"fccb78b1563e34680ec2d04db2e74b411c8e46d32ade6cb13003cd439924b50d","sha512":"3131836f1d2de9f901cd6eaa8a022caefb5a29afb908746983667f6878d4d689331aa2f7b64ad6a1c3a10f28c2d5f28ad9a6fd7bb5548b1408cbd34f703e4357","ssdeep":"192:W/KXunqrrTlXk9U0oChSVhD5xE2RmUx+PS:e7nqrnswHRv+PS","tlshash":"83f1aed137538582f3a3f67389ab4db1ca0b276cf55a86cc224d946845eb19eee84224","first_seen":"2026-04-21T03:42:41.447815Z","last_seen":"2026-04-21T03:44:07.049578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":178,"dns":129,"connect":21,"send":0,"wait":22,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/12/avatar-evtereva-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/avatar-evtereva-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14665\r\nlast-modified: Tue, 29 Mar 2022 16:06:46 GMT\r\netag: \"62432e96-3949\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14665,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"d186f06bd5bb37c1cba293c9117a1e84","sha1":"d0443de6c0b47b156a5ef91762a0e2d498a5f262","sha256":"8ca4c5947be8c187a191750bbc98316cea553435dcbee31fff508bd7468d398e","sha512":"7de191a0912a3791899b8703a4b8727aeb5197ffb914605bf7f76a4ff198e84b2466f4a601e8b27cbb16afdfebaf92fa7bc124aead1391de8dd06e99eafffdd8","ssdeep":"192:Cfp2hSwP+O2BKPlFIzlw7hrw9rdxJ+MC/R38p5t2WqzMBQBQLpMr7MCEMyZcF/HG:Sp0jHPh7hs9QOlqzM2qLpkn9yZAlRy","tlshash":"3d62c06afe4c0015eeb64d320d9f165ac2804f0029b0d73277b6c278a1d0bbdc9ca55e","first_seen":"2026-04-21T03:42:41.449252Z","last_seen":"2026-04-21T03:44:07.008504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2018/09/cropped-favicon-1-32x32.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:05.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2018/09/cropped-favicon-1-32x32.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 864\r\nlast-modified: Tue, 29 Mar 2022 16:02:59 GMT\r\netag: \"62432db3-360\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:05 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"5a1d2b865073c97486ff56c42e485740","sha1":"3a601f52f527ac175a4f8eff8184a320e01f6fb3","sha256":"71dea87d42942d598eee3d3bb2a8812db4cc17017c90f98fe8656df5f2ba64d0","sha512":"a84f42e84381fc74ada1c0a3068503b8f18d81086f64ce07cda17430e6a57a4f5edab16de34f59347beee987b45a69b85d546236925dd0ccf11f419b2a6f1ad9","ssdeep":"","tlshash":"891196d4190f4d8547aab155401f1f46c9fe1e882e176bad098a8d78236d00fe986ba3","first_seen":"2026-04-21T03:42:41.450314Z","last_seen":"2026-04-21T03:44:07.006536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/mozhet-li-koronavirus-vyzyvat-besplodie-3fbridsrjaen1eual8n762.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/mozhet-li-koronavirus-vyzyvat-besplodie-3fbridsrjaen1eual8n762.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6949\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1b25\"\r\nx-ray: wnp48933:0.011/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6949,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"a7542457c8adcff5a38a7afbba0ae720","sha1":"2bc21a523c7c9b64b7c5b746c84c49405519c195","sha256":"fd9242fdc2ba4f6f5036ba5d500512c7222dfe035df6da61018d602d3b18cdc0","sha512":"57255317f3b57b6cfbddcc85e83ad19828d70729e7be8cae40f85d2e1c9dd7c5a1baf1f5e85299bcbadcef5cb3fa4804d21e8231c3885e596ecf1d0839d01a9f","ssdeep":"96://Etkg/aHtvhQ5vLEQW4I/5NPd+bujoLMFBsJQzJCcbZequyRO9uYCcx9J4mlQ+B://m/aNvheG4I/5NPegNtdbZt2CKJ4cx","tlshash":"b6e19e1e08569bd1c8b7edc9986e5daec42aa700bf5ea3d22bb3d2504710dc144d19fe","first_seen":"2026-04-21T03:42:41.451412Z","last_seen":"2026-04-21T03:44:07.052143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2021/05/purgina-olga-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/purgina-olga-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11733\r\nlast-modified: Tue, 29 Mar 2022 16:08:04 GMT\r\netag: \"62432ee4-2dd5\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"0882e730c5217cc977efcfe1c22b40c3","sha1":"1cc4acccb6b687df1d5f5a375184ce9a6636ff37","sha256":"ed42a93a264314eec127045fe07b0907a920e4377d0b54a1a4d3253e94687379","sha512":"ebc98908bab25c78d96a719660fb1092a9c711b0e14b98c5a43235847bc3f0ee95df6e3bace37ecd549b999cf0d5250629dea0d826468864e9e33fff99dad796","ssdeep":"192:/f6qB1NQ4OvcTFQAPl+njmwe5CtIVvWqcSZzFcgASPIcQSUCDl6kV9KO2jLTk:H1rXOEFQLawxtIGSZGmbkkVx2jfk","tlshash":"4332c05b9dc5cb10463e4f7e1de31dbf488a7f0ba91419cf2434d19971340db64ca619","first_seen":"2026-04-21T03:42:41.452375Z","last_seen":"2026-04-21T03:44:07.096559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2021/05/avatar-tipikina-300x300.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/avatar-tipikina-300x300.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23239\r\nlast-modified: Tue, 29 Mar 2022 16:07:56 GMT\r\netag: \"62432edc-5ac7\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23239,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"ca9aa67c50ef09c89b444d22e6bc7b2c","sha1":"8bf9a313c7bbe2ff83d7531a39e919fd4321b252","sha256":"3eb6f360132a55f6661feca3a8580b85bd0c230dab01cc29b22072f6746724fc","sha512":"cf1f1f090558fad83d477799f296b3071bbb4aa13e6403286d56b7c25f154947ba4d74336e658ab9460778ec76d6b0cbc8226ff53ac22c4896c1bc9a0a84a094","ssdeep":"384:HCED8FqA+hkSa9Lgi9kAQ489/GJbYKz0nKg1XY3Rx2l7YHPT6wnXNeCsqjPirpaa:HCE4qPySyg7TGJbYKBgKRx2p0fXNWqsV","tlshash":"55a2e1b0a5232661c1449ffda614be535a49fd80bcfc191b4dfcccc24f652d8a646295","first_seen":"2026-04-21T03:42:41.453232Z","last_seen":"2026-04-21T03:44:07.100844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/robotocondensed/v31/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 01:56:59 GMT\r\nexpires: Sun, 18 Apr 2027 01:56:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 265505\r\nlast-modified: Wed, 10 Sep 2025 16:48:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51412, version 1.0","md5":"9e5e97447fcc00eca79e97de3b337831","sha1":"efafc4ef0f1ac7fefb6e22be4ea9c681a53d415a","sha256":"8d230115e58faa2ed303bee567b91d1a792e0c958a0118998b53648b2ab7c057","sha512":"ff66693e0a9dfcf51c16540c713de433c308e0b4afb31b48aab7fc7b46684e24494468826219fcd82e0cb26a40ec4addb8db741553e66e496d6cb1d7c9513055","ssdeep":"768:18/PyhTHe3I1xDq5OqDPcdn9jxYzJ2LEWPf4FPkEsSfR7vpNfyB4dnzoQub:rr1HAcnlxwJ2LJwFfHuyNub","tlshash":"ac3302a818f688a9d57e19446f2b0d908566123731a2037bcb524f8b12e96e332ddb77","first_seen":"2025-05-29T18:08:33.81349Z","last_seen":"2026-04-21T21:05:52.487966Z","times_seen":20392,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":102,"dns":1,"connect":7,"send":0,"wait":10,"receive":10,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/style.css?ver=1.0.0","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/style.css?ver=1.0.0 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 15:13:08 GMT\r\netag: W/\"62432204-5808\"\r\nx-ray: wnp48933:0.010/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22536,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2236)","md5":"f5bc6d6505f3d68277082a99d2cce2b2","sha1":"124241f4beba4e1ef3c571b1bb9f1b238e0034ab","sha256":"00f68604c15cba067ce1cf4015d82671d2f0dfd761147593452c8dc066ef4a80","sha512":"886c4dd9037f609ae538f484f71c51ee4a1a86e82b73c53650a0f6665a7f5dd4c51a02a6dd5abaa920d2b65ea25e5268b28da6382230e0644b54b39cc1237db7","ssdeep":"384:ai5J63aoBqLzTXdWCWic1bwJEwK1giN7kgQPSH8+PxfBZZW:L5In4L/d1EboUPxfBZZW","tlshash":"eda211479e77204ce803604a7e9923bf5a748803279fee993aae536dcf4b957c071718","first_seen":"2026-04-21T03:42:41.454078Z","last_seen":"2026-04-21T03:44:07.001062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/u-perebolevshih-covid-19-mozhet-byt-pozhiznenniy-immunitet-3fbrif1zy7qitwb0fwhr7u.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/u-perebolevshih-covid-19-mozhet-byt-pozhiznenniy-immunitet-3fbrif1zy7qitwb0fwhr7u.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7039\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1b7f\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"8b12aae1b236730cea628bb3b14ab40c","sha1":"55638b12eafb6a9ef1a7eb76260f19ca3375bc63","sha256":"286960022998e4a6508e3e8fcf68368e7160c1952436b886d6c6d8d7bb788c08","sha512":"0d62e3f4fbb018d0228d3d0921abb596ba4ea2fa5da3edbe9c4a5488a2a1c3280e8a237c249aa82ac70a587525f06f2a7158b6be4473e1f810d532342df3ba65","ssdeep":"96://EXO32rbyaZNpFe0LHe2aM4IXh3Qy5FzW9Z6Dbpe9UY0GE0Zaa3ZrRHVLbN9GgP://qO32rxZDTaDIRdKyDDG53ZtVZjJnb","tlshash":"39e1bf34574549d82aca1fa6690588b5bdc1af4833cbc8240675c2ed8f7cee80edcd6c","first_seen":"2026-04-21T03:42:41.454956Z","last_seen":"2026-04-21T03:44:07.029132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/pochemu-nelzya-zanimatsya-samolecheniem-3fbri60bd5cyqek8pj6jnu.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/pochemu-nelzya-zanimatsya-samolecheniem-3fbri60bd5cyqek8pj6jnu.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8480\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-2120\"\r\nx-ray: wnp48933:0.013/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8480,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"0c96453f3fd1717ffa56bd0d79475d1c","sha1":"c93deed1bb2b141c7f1c73d57aea1d5058b167bb","sha256":"754d00656c2b11d8d13cda77fdade4fa58e4a154989a357b9469fc7e52948304","sha512":"8e6168e552dcd2ec78ef906554b835c8d181720802428ed2fce3ed03a51634b55ae94a03b34d0e218ddbd3bd30de1efeae1a41ac35463992f0d2df80bdd8a60c","ssdeep":"192://d0l9iUCcsI7WPwGY9vVZaqZKi/ONzOWU+9I0112sCqmne:nd0l9gPwGUvvx/azc+9Iu2sCq6e","tlshash":"8802a02d0a3e67d6478f4e3e529931065c597822b571cc762f73cdc0bba68f43868e68","first_seen":"2026-04-21T03:42:41.455809Z","last_seen":"2026-04-21T03:44:07.071576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/dmca_protected_sml_120am.png?ID=a6e7d2aa-4c63-434f-9d67-437e28529ebb","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 18:02:24 GMT","end":"Sat, 04 Jul 2026 18:02:23 GMT"},"fingerprint":{"sha1":"2D:61:6B:E2:1F:84:60:5D:3B:D2:33:18:D8:BA:56:38:DC:47:29:43","sha256":"3B:55:23:65:A9:74:AE:45:C4:76:18:C5:04:CB:13:36:94:A3:98:2C:4D:13:F6:B1:B9:6D:6D:17:7A:28:CD:C2"}}},"request":{"raw":"GET /Badges/dmca_protected_sml_120am.png?ID=a6e7d2aa-4c63-434f-9d67-437e28529ebb HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 2406\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31536000\r\netag: \"94e3bf34e0ebca1:0\"\r\nlast-modified: Tue, 04 May 2010 23:19:12 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:16:00\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/dmca_protected_sml_120am.png?ID=faba16d4-856a-464e-b1c4-08fc06afc6f7\u003e; rel=\"canonical\"\r\ncdn-requestid: 4c80df3245e80f62d14cc78b1b410940\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 21, 8-bit/color RGBA, non-interlaced","md5":"8c9d2ad6d86d97863039be03a6341b73","sha1":"5875e6de1a5d8b8311f8694c8ca372bdce9eecfc","sha256":"471e6e1914ad3c0f80611d2c94c11d06e34b18d41dde34b03d6598a34fa8144c","sha512":"f75f105103637bb4af9b419e8e096bb3695b10002add7cd73cd31affaf5b9cce963ed2a2e6347829f4904b7a24dbae4e3e4b5ac7776c71a865a82a528d4a5ac7","ssdeep":"","tlshash":"7d413a8f641c89bc02d7b23b30a770c08521b6b4be92d547bd8842a2b4595126c8eff3","first_seen":"2023-04-27T14:51:13Z","last_seen":"2026-04-21T03:44:06.988945Z","times_seen":63,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2018/08/avatar_medvedeva-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2018/08/avatar_medvedeva-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25049\r\nlast-modified: Tue, 29 Mar 2022 16:02:33 GMT\r\netag: \"62432d99-61d9\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"98f14a41ecb27b4e005e1a780c78f062","sha1":"4c3ac3f2fd945ee996bc0f838f99324c7cfac30c","sha256":"535c5c9cbbe9f2502b36dcd672b46c305eccd6e91b75c81dcc773114171a9b71","sha512":"151b635fd4a1e7cadab7db4dce4719b6f264afcf9442de340f33a28ec4fcbf66cd7e524f143fed9984992b9e349d6dd339ee302f741441ea545f302d128f074e","ssdeep":"768:S+WWf4mVIteTE6hOzSCUIUSCqyuf0KozsE:S+r5VnTE68zSBIUSCq9sBzsE","tlshash":"56b2e19d5b1705f1c46f6da4a5e65d32a3c4e760198c03bb0935e23fe301aea42ec6c6","first_seen":"2026-04-21T03:42:41.457165Z","last_seen":"2026-04-21T03:44:07.057978Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-N0QYN0CXF6\u0026cx=c\u0026gtm=4e64k0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-N0QYN0CXF6\u0026cx=c\u0026gtm=4e64k0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\nexpires: Tue, 21 Apr 2026 03:42:04 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157074\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472998,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"02e9689966fd25d56129acd851ad43aa","sha1":"c46388330e7c8baf0b91e57eedc364a060bf4960","sha256":"626d3c0e07073d44c449b1e528f5f09bf3a807dd4f657600593690b4714c4d99","sha512":"58ee86ca83317c4a9e884a6482e10ae8b47cfa14b07d66a1840d12fb7947a7e6eb48d96aee82c6cfcc0c56cda90679bc5d3d990f0686416375a141391dc44b9e","ssdeep":"6144:vdN9VD3httWeWtGgYyin8eg8l+f4fUWgoHjK8Gv1vlhP30Auu:PhttWegGVn8T8ln0n","tlshash":"67a4f9cdb3d674225396f478903f01cba57a29a2b44cc89af189cce42e7465a4277f7c","first_seen":"2026-04-21T03:42:41.458188Z","last_seen":"2026-04-21T03:42:41.458188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/lechenie-traheita-3fbrhcqdaz6373n3yp3rpm.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/lechenie-traheita-3fbrhcqdaz6373n3yp3rpm.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 46514\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-b5b2\"\r\nx-ray: wnp48933:0.017/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 170, 8-bit/color RGBA, non-interlaced","md5":"84e0775344c7b2678520fa823c91e439","sha1":"d85c3be5bc20d0235e3e2578b7dd49d3d2dc6080","sha256":"8b9b05479d6dc3855968b8821ae654d0e413c156cb4fa0bb1b5b02a9ecc0e796","sha512":"5586d7891622559e7136920e863b70ddcffe8d6b7b8dbeb7d13990a186702f3331bd5cba4fad956f09311a38d7b167825609b2f2699e7b567cc6bf289eb38cb5","ssdeep":"768:cvBHn85pfqjpd6cYTU+It1gqUnhZeiVnuv9sodmYk97GAoL5z:sH8Df0pdFtsnhIVTW97GzB","tlshash":"472302dbc27117b0d6b2668a73ba5c3c584bd49d4fbbcf9d2190720982b8544deb7d01","first_seen":"2026-04-21T03:42:41.459073Z","last_seen":"2026-04-21T03:44:07.075421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/uvelichenie-limfouzlov-shei-3fbrgsdkzktkz8pvkd5jpm.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/uvelichenie-limfouzlov-shei-3fbrgsdkzktkz8pvkd5jpm.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6309\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-18a5\"\r\nx-ray: wnp48933:0.012/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"46f6ef16f7333aa8dfef0bfb431ddf76","sha1":"e6effa44d50491b956f68262f88f6d9086a8536b","sha256":"b7a90918137337eacc9da1ae891ddd4241df1c8041fc6652fe18d702ea091115","sha512":"b2651b3d3373a0ff842bb1a3e6baf19ffc47ec0458daad9215a55f6a9f414ef17a1ea9b9f552ca1521661bb8dbaa4fb082eaed7d419ca965e5ba6c7ad40d8f28","ssdeep":"192://wRSln9mMtNrqT5Zdd4jwQT4EEDlHUoK:nRZNmfEjwQT4XDlH4","tlshash":"29d18e3ccb25ca9278870f2788cc7674b35c7076a019da9505f7eab3c946dd8e58a14c","first_seen":"2026-04-21T03:42:41.46311Z","last_seen":"2026-04-21T03:44:07.076779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/superfish.js?ver=1.4.8.","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/js/superfish.js?ver=1.4.8. HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 15:21:32 GMT\r\netag: W/\"624323fc-f7c\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c887a6aab797b1343009ea450407da6c","sha1":"7c1dc7b1451f88153c0cf5c66e405b51fdd13f6a","sha256":"657a0db93acd3b44772cb3c2c362d3d6bf7b04e100c6c12d8d81be0b891758a1","sha512":"b157ec4f9dafa81b4b506b87c2b322f8c288cb5444c9b72fc622427b63548bb08a24a09453f2167ccf205e4eb7f046724ebff304b8cbb9e44171f1cf43fb59c4","ssdeep":"","tlshash":"5a8171ccf38f759ba977227e412f01887b7e4a32e8884c51bc3b58186ee855d4796c6c","first_seen":"2026-04-21T03:42:41.464121Z","last_seen":"2026-04-21T03:44:07.004001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2021/01/avatar-elkin-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/avatar-elkin-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8276\r\nlast-modified: Tue, 29 Mar 2022 16:07:25 GMT\r\netag: \"62432ebd-2054\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"0053a913e4cf8dfe368af6a7fcd001aa","sha1":"09cc9e65c059b4a658e635774788ef521f3bdabf","sha256":"205caca1901f53f125b56d29c4d987f5c6ee5af854bc853341ed1ceee824cc63","sha512":"9618b84ddd7c47558a443157dba7c2b6f5f954d6e7df9dc2adb82dd8c5cee06036cdd5c76b8c34ba0dafdeae32a207c1b14d0f032073c6518a91f6be88f7b7a5","ssdeep":"192:CfeBspPrlhuXhrXeOkVAZQrguT9J1D0i6IGogk:See9n+hCOkVVrg6JKzoL","tlshash":"1c025a038a08e792e4114ce4fe164e482f245b4df9923afa42b7dfd759227f56c8a53c","first_seen":"2026-04-21T03:42:41.465145Z","last_seen":"2026-04-21T03:44:07.065368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2021/01/valentina-momot-300x300.jpeg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2021/01/valentina-momot-300x300.jpeg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14193\r\nlast-modified: Tue, 29 Mar 2022 16:07:34 GMT\r\netag: \"62432ec6-3771\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"80a8ad8c2afe6a770d5df4e40c991fa2","sha1":"a21b3f0d32ae96ef2c1409fab33731077ae71a19","sha256":"ed0037ad6de4aed03e7d5d81748c258f15a99a5d060f6936e3cf8392647a47c9","sha512":"c38e9726cd5380fb3196edfb6f2117826af53ec473d9fa2322de1300d639c0959d4e855078acbe2b2d813534d16039cd9dcd998e545f994bc51b26e1d93d543c","ssdeep":"384:So1KKNAPFHrBYEhU7kQ+Y7/CVhyHldDJFw8lR6wf:SopcHdYuU7tl7/CVMHfQ8lRBf","tlshash":"7452dfa99991b144dc2bacaa0435d0c39bc28da3fcd04f0477fac95bf4248ece51899f","first_seen":"2026-04-21T03:42:41.466172Z","last_seen":"2026-04-21T03:44:06.952415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mebel.bestforwork.com/api/wowmebli/company/rating/413","fqdn":"mebel.bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mebel.bestforwork.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:26:42 GMT","end":"Sun, 07 Jun 2026 22:26:41 GMT"},"fingerprint":{"sha1":"D2:2E:11:08:4F:8E:D0:29:DA:D7:A0:86:8C:C4:3E:00:6E:02:DC:CF","sha256":"C8:23:91:CA:B7:A0:3B:09:41:98:6B:03:75:79:E1:8F:79:83:D8:34:3E:3B:3C:44:CE:E9:21:08:7E:A4:A0:F8"}}},"request":{"raw":"POST /api/wowmebli/company/rating/413 HTTP/1.1\r\nHost: mebel.bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bestforwork.com/\r\nContent-Type: application/json\r\nContent-Length: 17\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":17,"data":"{\"companyId\":413}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: Content-Type\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjI4dzFWYm1DZWRGOXllUUE2R24rT2c9PSIsInZhbHVlIjoieVpsSk9qbU9kVHYraFNWRk9qQ2Vxc1pCbGhzTUhpZDQrUEpsNDVzTUptRGZOcjJuak10VTZpeWJKN0ZSU3EzSDRwWHUyTFhMRFhhbG5PaURMTU95N2IwTzZEVFZOT2tiNjNJYlFpK0dJMVlFS2w5eUJzZGpuNHk0S2c1Y1JMM1IiLCJtYWMiOiJhOWY3OTg4ZmQ3OTc1OWJkYWM0ZTc4ZmM1YWQ3NTQzNmVlMTUxYmE5OTQ4MDA2MjQ3YzQ4NzAxZWUxYjA4YmU1In0%3D; expires=Tue, 21-Apr-2026 05:42:04 GMT; Max-Age=7200; path=/\nwowmebli_session=eyJpdiI6IkcwTXRuYzRxVm43ODFcL0ZnYnAxUjl3PT0iLCJ2YWx1ZSI6IkllUVkwTG10dkRnU0NOcnN5OHJpM0NpbU9kaHByK2EwQWU0a3pxNm1GaXYzelorZFB1YzkwQUFtUUlLYmR3TDJtZXRVeFhDSTBaR1g4SHNJcWpYUVpaYnpqMEhNTGxJcmM1eThcL3pWVjVGTDBoMGxkY21oVGhGZkg1QVFPMDBUNCIsIm1hYyI6ImM3M2I2NTM4MWI3N2YwNGZjN2ZmYjBlYjU5YTZiYjhiYTA5MzIxZmNiOWI2ZmIxYmI4N2M0NjljZjRiMmJiN2EifQ%3D%3D; expires=Tue, 21-Apr-2026 05:42:04 GMT; Max-Age=7200; path=/; httponly\r\nx-ray: wnp48933:0.020/wn48933:0.030/wn48933:0.030/\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1edca9388a8be08181a1103de5177e4e","sha1":"95a113942400a7aa599087c256777242678750cb","sha256":"0cbafbf9170108281260fcacd0e47e362c592df13dd89e70c6444be1047f6018","sha512":"f9ec58dddc540e95021ff1fb86dba80f9e2eb44d22f4753d05672a1dd8420c0c799cff7b18e7d77dca5cc89c8aee3d4cdabc2cd7054327d7f17ff301b4eacb61","ssdeep":"","tlshash":"a8b0128295f0080db025099fbe04636474a51014b312032648cdcc27b9da410521140b","first_seen":"2026-04-21T03:42:41.467287Z","last_seen":"2026-04-21T03:44:06.991426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widgetapp/images/wheel_left_bl.svg","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:05.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1667503734.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 08:31:06 GMT","end":"Wed, 08 Jul 2026 08:31:05 GMT"},"fingerprint":{"sha1":"5A:74:01:86:76:CE:B0:E6:30:B5:2F:B1:6C:31:A3:23:FE:3A:E0:4D","sha256":"63:1E:DC:25:77:87:AF:FB:B2:7B:00:55:F8:0E:C6:0F:94:40:39:C8:22:4C:F2:10:55:38:1F:86:5B:60:E6:A4"}}},"request":{"raw":"GET /widgetapp/images/wheel_left_bl.svg HTTP/1.1\r\nHost: cdn.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 10:43:36 GMT\r\netag: W/\"fb78a83697549536d01d9a24f17b1360\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=25920000, public\r\nvary: Accept-Encoding\r\nvia: 1.1 098a60d50e7e132c276fd27b94c6212c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: WNteykW5MZ_NtUfHp1SCD8R7EB4za5m6PKsLmwxJNt4TW80eXhiTCQ==\r\nage: 5\r\nx-77-nzt: k3RX9pezh9e8OaaFyUX//UgansTryLtXW7xvBi09xUk3GLgsgD52l3HXbYydawo0IljGKmw\r\nx-77-nzt-ray: fdb541231a2c155d0df2e66916c81a27\r\nx-77-cache: HIT\r\nx-77-age: 430720\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":3298,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb78a83697549536d01d9a24f17b1360","sha1":"8d51c30ce122f2f1357fab04af8ad3e8686bc1ab","sha256":"1287c0d383b4a77003157ee795c07a817c8b8f44e36feffe34a94170397c1c5e","sha512":"4df11899d995e78f0ee17a74e43dc2769faaa4d310721e5981a88c293ee67e72c1d2cdfdf4c2ddd5336c1507e07b1df2759d589047cf85d9251961b5bc559cb9","ssdeep":"","tlshash":"2a6196ec07548ff17505026cd4d7d4d73d3418aab162c88caade7f985e96cd84c9606f","first_seen":"2025-06-26T05:21:01.209275Z","last_seen":"2026-04-21T03:44:07.043801Z","times_seen":44,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/12/avatar-fedorova-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/avatar-fedorova-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10210\r\nlast-modified: Tue, 29 Mar 2022 16:06:46 GMT\r\netag: \"62432e96-27e2\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"67b35e073043d16234a5fa71f91844d4","sha1":"7bc56a810dd02275876ef3b166bace203348680e","sha256":"dab799fe191d3c445ab46c021f16a4f0d64476342eba5a1cc96325c36222492b","sha512":"f3450111a0d13f324b7215358322b34c9851c777000d63d480426e81cbb970b60ab6805bb7e7444f46ab0f5c599c4d302c60080b156665d11c7936d0e15a6627","ssdeep":"192:Cf5cgTsZWYY2Dv3W3OG8Ne34wXD4JPOv0ylQ8FkOR9nTMPx4J:S5+ZWYYEvm+FNe4P0ZlQ8FkOR9TMxE","tlshash":"9b22d01b01b82279c2271f78d4665689c5555eae3da5010a3278f0f0d3c08da45c98df","first_seen":"2026-04-21T03:42:41.47524Z","last_seen":"2026-04-21T03:44:07.042812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/swiper/swiper.min.css?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/swiper/swiper.min.css?ver=5.8.13 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 16:09:43 GMT\r\netag: W/\"62432f47-4d41\"\r\nx-ray: wnp48933:0.003/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19777,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512)","md5":"80ebb519acaf9416da5f2d4aa82d792a","sha1":"b1fd935ef15d1ca11aba37baffb4ed4be2c677e9","sha256":"a0a799fa96b605d3919d8a5c3571e2710eda8752fb42155f034a12ec137cf96b","sha512":"6dad7868292c886000bda3dda23eaa9d7c95ba6283957424c6bf63586986e24da5bb8be47645c93efae60ccfdc50ad650f133e740286cefad9c8198c3d560068","ssdeep":"192:b2aNf/lSSyJWCh8zfi5o/mXDN3eBxwdJ5c:b2a1/lS0Cifi5o/mXOGJ5c","tlshash":"5192612c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-06T09:19:30Z","last_seen":"2026-04-21T03:44:07.062776Z","times_seen":682,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/5-vologda-bezformata-com.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/5-vologda-bezformata-com.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 16083\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-3ed3\"\r\nx-ray: wnp48933:0.015/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"6d4e875039dbc9e22a87b6d44d037c93","sha1":"f2ad51618f6ebab1c93f7df2fbd05217e6df3e0d","sha256":"2b5b581dae3cc8d5a9c912c210214f4737aa502ea72a8bd3436782a996b7ea2c","sha512":"055aaaba9106bc2d578b79c9ece2bd5ea559b6b838cc6b2864ba90d57a331f4651f7feb19728033008c247037b9b7fba02e8bb2145feeb80fe23adb5652c7f97","ssdeep":"192:TZlKLxV1m9Lty8ce7MI8jhtBKjEiCcGT3ODdf1UY8NU4LX0kdStepyEIy96yYyNR:1k389JyLm98FfKjE83UxHXbc/EIqN6sV","tlshash":"18728eb8a6d4d89198277f3f415718a5c479aebf02d9820d6b710cf65c38d7883e123d","first_seen":"2026-04-21T03:42:41.477385Z","last_seen":"2026-04-21T03:44:07.063458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/12-tselinacrb-mooo-com.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/12-tselinacrb-mooo-com.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 15009\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-3aa1\"\r\nx-ray: wnp48933:0.017/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"5b82d70582eef032579d89735cb32e35","sha1":"5ec76344ea3efe9c67a52eceadfe4c96c455a32e","sha256":"118d294d58eec513d91ec233e204aa52d03adc8ccee6a31060742bbceff4692f","sha512":"b3468afcd36d3db6f693e990851db63943aef80cf958f47dd6d96334bf7550b0a7a07c7b192324fefe9025a981d53c03a621056bee65ca2f5fc89976b25c7c7b","ssdeep":"384:U0gUOLjBUbRysLkEtlkSCZ4JNpeRN/7+1gPAf2pKkv:7gUOLjBuRtG1Z4peRNiePAf2nv","tlshash":"7362bffcd65ab40cb539669d0f479da812d588782caed7c548b8f09374af039c61cee4","first_seen":"2026-04-21T03:42:41.478734Z","last_seen":"2026-04-21T03:44:07.030194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/q2w3-fixed-widget/js/q2w3-fixed-widget.min.js?ver=5.3.0","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/q2w3-fixed-widget/js/q2w3-fixed-widget.min.js?ver=5.3.0 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 15:21:19 GMT\r\netag: W/\"624323ef-1108\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4360), with no line terminators","md5":"05a47a4cdef27a7d9abb74545b6458df","sha1":"9e486c563fed6fb091a40a34449716af3ccec697","sha256":"9a7d00291b90b8045d042a9a713a9cceba928a35c18c99d1eeea2ca14c09614d","sha512":"1c055a7d4cdc8fc5d52b7fecdc757ef5c7d7d546a4300cd483c5d9abfe92bd34aeb04c9dc35db9954b7ed61ecde5d4b4c7dd76d78ed3221db22e1c764fad2f43","ssdeep":"96:/f/YtqF30HcnAMccyX8b1lh8PV3tlr06LAD0c6XU:fYtk30ifh1bWt9P8UU","tlshash":"83915160db08359f80b641d669ef6e3870b45e5a6b02f8d18909f0f450a4f98d1f76fe","first_seen":"2023-03-07T01:32:38Z","last_seen":"2026-04-21T10:25:02.734892Z","times_seen":352,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widgetapp/images/spin_bl.svg","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:05.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1667503734.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 08:31:06 GMT","end":"Wed, 08 Jul 2026 08:31:05 GMT"},"fingerprint":{"sha1":"5A:74:01:86:76:CE:B0:E6:30:B5:2F:B1:6C:31:A3:23:FE:3A:E0:4D","sha256":"63:1E:DC:25:77:87:AF:FB:B2:7B:00:55:F8:0E:C6:0F:94:40:39:C8:22:4C:F2:10:55:38:1F:86:5B:60:E6:A4"}}},"request":{"raw":"GET /widgetapp/images/spin_bl.svg HTTP/1.1\r\nHost: cdn.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:05 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 10:43:36 GMT\r\netag: W/\"f1006e80919a554a181eeffcb6b3e381\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=25920000, public\r\nvary: Accept-Encoding\r\nvia: 1.1 e161fd49d3d858d9f9d1d337fc91ce8e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: 8BwgFD8jCTxoYWeSWNEfUyx-O_wVlzEpAB-A4DcUn8bO8-EXUFdsMQ==\r\nx-77-nzt: k+8ALTHkd3UxYaAT0o7UPn4wytHhR6WZH8H+gcSEmcP7MnPPL56niOrWySFHyNIFkpWCOgQ\r\nx-77-nzt-ray: fdb541231a2c155d0df2e6694a811f27\r\nx-77-cache: HIT\r\nx-77-age: 578870\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1977,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1006e80919a554a181eeffcb6b3e381","sha1":"988f7bcc6cdd620e89ccd21945a721aa0de33b71","sha256":"0866546ae9c65964cd912860db934e24d99b401dca5a2a206b8df2cacc60bda5","sha512":"e26651ab2b69576392d1767edb3565b479bcf2decb477b9e533b6e6b16304b91ae7725716aecca3c6735c3db97f5358be8c6eaeb08c0966d22cd5070c7aef341","ssdeep":"","tlshash":"f541efd154b88458c66e8078cbfbf599591b30cf23c146cdb66c2a10af18d7718773ba","first_seen":"2023-05-31T11:41:03Z","last_seen":"2026-04-21T09:07:43.931144Z","times_seen":1805,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/zud-ladoney-3fbriefdqr2kxnknikkh6y.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/zud-ladoney-3fbriefdqr2kxnknikkh6y.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6449\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1931\"\r\nx-ray: wnp48933:0.011/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6449,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"92cf5b128402c4280823db68b400a0ce","sha1":"19ff4513481a7223e5b34291103645db7f9258a5","sha256":"56412e483f510c383695930f187d70ca6d39040b4757fe3421e661d10db3bc63","sha512":"8335de746a6c7b9c8e8927be7bee102bbc1d90878653243470ab8e1ee2ed83eb3cc4a2625e5df01793b454c87e31ca347cf122e5c0900777727f5c18b7476184","ssdeep":"192://qOIcisQjsWFsqUw8dGt7pkkRMchbgod7:nqJsQjlyw8dGlpkahbg87","tlshash":"11d18e2cde5000c1e4268eef491510fa0aa653d0b156d25ca675d8bf9eb0de4ea4436d","first_seen":"2026-04-21T03:42:41.481531Z","last_seen":"2026-04-21T03:44:07.03727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/includes/mmenu/jquery.mmenu.min.all.js?ver=4.2.5","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/includes/mmenu/jquery.mmenu.min.all.js?ver=4.2.5 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 16:09:42 GMT\r\netag: W/\"62432f46-5867\"\r\nx-ray: wnp48933:0.003/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22631,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10959)","md5":"98365aed485b9fba1b067ed4da70c949","sha1":"fa5b7a7b79e77644dcbf6df7e7e7178d3c80c389","sha256":"3118915562e6e2f88c09f8193ba8670c3820b0ef93650d1aff4d85309ed6ee4b","sha512":"dda3cf98dfd157970ea9e01937771f713f9479b80b025775970c347f5f56862ed0230ff30d977ff092c5ffc9358a0e7026229fc6bf05fc91a3d7d824696e9e28","ssdeep":"384:yaSCLD2RDiC23FZgsMsu4QMfeMZ7UAq1HN60F2jNsAA:yaSNUCOZgsMslQMGMVUNz6GrAA","tlshash":"4fa2b64eb600b5a28697e266b15e411ad437081c920b490c75b8ddeb5e7f81c66e3f3f","first_seen":"2024-10-26T02:22:46.539489Z","last_seen":"2026-04-21T03:44:07.092296Z","times_seen":6,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/js/slippry.js?ver=1.2.1","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/js/slippry.js?ver=1.2.1 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 15:21:32 GMT\r\netag: W/\"624323fc-6257\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25175,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"eadb4f130bce97fc06c59219a30ad43a","sha1":"8eb34ff35485fb467383f04271bd9ccae7c4466b","sha256":"9e66fb269656b4bf96a098b6a434ddb450b8dc46211ef5d06a51d16f598da157","sha512":"01f6fb904b3415415a8219463d46e9d1a84e0d8416e4ae6668baec2bc8644431949754e6d599e537c51d02f0edcbca0f48fc8aa74a14e0e2af77d0b5256657f7","ssdeep":"384:Tb6J7rXW8X6/veDxnudt7Rv29Q3MyZS77/6XErjQrmriUu:TuJ7rGo6/Kyc7/6aQrmGUu","tlshash":"37b2984a27b3123a4c7b707f5f8f894422b68003551ee93c7dada24d9f8147946e1beb","first_seen":"2024-08-19T15:29:02.419466Z","last_seen":"2026-04-21T03:44:07.081448Z","times_seen":5,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2019/01/avatar-furmanova-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/01/avatar-furmanova-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12281\r\nlast-modified: Tue, 29 Mar 2022 16:03:46 GMT\r\netag: \"62432de2-2ff9\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3","md5":"773850c4e118af961008bbf84f6bd367","sha1":"4c07d8047ea2e8a277e08ed7dc82da3b6fa935ff","sha256":"14da03e911c6579dec88f6baaaed24fe3dc9c1259ab0a5dc14611e3ba5604564","sha512":"92f8e7555ed03320aab47b70d807064c9221f27e62df1519448fd5f1bab7dc82d0a0b5ba84d418d6cd78c43bbc967a9b0f1d21a5e16336e8ee8cf6e90549b889","ssdeep":"192:2X9ubAP5j+EtzE2HG1Cl8DyZ3vUIUP4iEj1y/KAwNVIsCiBKzlafESWKm5onLDBc:C9iAPfY2a8iQiEj1y/KAcVIriBilgq1B","tlshash":"a042cf4abb568660e8f9e5b1ab0f0f91b7cc647a41200bdf52fb6105a1ce878327315c","first_seen":"2026-04-21T03:42:41.486381Z","last_seen":"2026-04-21T03:44:07.06178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/1-ru-wikipedia-org.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/1-ru-wikipedia-org.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 57883\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-e21b\"\r\nx-ray: wnp48933:0.014/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"5b0d6fc19ec77b7719840a3416f51de3","sha1":"1933597b315f3fd1ff37f4c1ccab3e3cd274b306","sha256":"a58b7e0edc16f6f1248ef79ad6d7c82f6e164c5f887fec46aaeb0d288e87f7a0","sha512":"5cd430f0557d3dd14168cdaa70bab1fa92789b49774d8c65a5a0c6e044389aa0c5473e33220d628677d506615d39aaf1e48a75e9c53975afd57dffa44ac872bf","ssdeep":"1536:H2Ky0VLupIEmw+2SL1ex26vuBqwncwaYx:HU0VLYt+nMVvuBqwnrai","tlshash":"8043f0cbf6dd19331b56ac5ce12ed9c0e0caa918d5408b0c546ef1a46d9f23780b4fea","first_seen":"2026-04-21T03:42:41.487611Z","last_seen":"2026-04-21T03:44:07.001771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2020/12/avatar-miheev-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2020/12/avatar-miheev-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11892\r\nlast-modified: Tue, 29 Mar 2022 16:06:46 GMT\r\netag: \"62432e96-2e74\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11892,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"ce16db67a4d8360f7148f8666d342812","sha1":"e522db49f7e0171c0134941daefc07690d1c4810","sha256":"99015e332e6330a054aebd63e28c6e476679f88e175cbce03e0b071df5752278","sha512":"620dc81ef032478d57572161040d60bd87edd0d99e77f3f1f50e9e1aa403149f1e88d0ac1f46ec6da3692b14d011e2a153a65c38f06d5f62ea0cdf6c9461f13f","ssdeep":"192:Cf2wUiI/lJyQq0lL0WJ6y5jrqWTZZE4caJbQAahjiAUXB4dYfC:S2uI/lJyQU4r5jGz8QAahjiAUX81","tlshash":"3232bfae18bfc726dd6b1e2a068403b76847dc6455d1948dd670db1bbac06c1ede98c0","first_seen":"2026-04-21T03:42:41.489007Z","last_seen":"2026-04-21T03:44:07.060819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/2019/08/avatar-murahovskaya-300x300.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/2019/08/avatar-murahovskaya-300x300.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11095\r\nlast-modified: Tue, 29 Mar 2022 16:04:42 GMT\r\netag: \"62432e1a-2b57\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:04 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11095,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"9d67cec9a4cb6f42a9fa5a9949bc7803","sha1":"c7192bdf19aecf2a79bd2b7ef1501bf3c0b5822e","sha256":"c38315ebd075ae43eace195c88c25b93178b1568b123d993b5729e4cc9fb0271","sha512":"0d253a29b31a84802b6f8526d13b7d27d4a91756e480804eebe2d39401e9a0f3947af7de8c65132b3f8ec93b900e3ddf8adb2b6a94c18723142067c3c9b11cd3","ssdeep":"192:CfWamsXl2L9fuPzEp/M/TzLms6ArxE8vlmkBPOkYA8I/EQmNZNj:SWa7lw9fWoOLms6ArW+mgPOkdN+Z5","tlshash":"bd32aee35340a2d9f41fce661d46055442682f5ebd0ea9e4db36cdd184508c52edaebc","first_seen":"2026-04-21T03:42:41.490399Z","last_seen":"2026-04-21T03:44:07.09788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-user-avatar/assets/select2/select2.min.css?ver=5.8.13 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 29 Mar 2022 16:09:29 GMT\r\netag: W/\"62432f39-3a75\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14965,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14965), with no line terminators","md5":"bc523f920a653b0baf7e325592052fe1","sha1":"310a1dbec5d49fb39b18ab28eba63dac5cb95176","sha256":"044efea78208376302aad3808aaabdf3c2f7bdd80ba9d55c9e0e4d3baa7a3908","sha512":"8d45e011182fd8fe5c9c8891509a2cc227573a9af585ba47c544ca091a47007f6cdfd8b62bf5a8f2d8dec91471118c7dad1e19f1299900aebd7823a5b8773129","ssdeep":"192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOV:3u/TfXARQ9htWGSPcdwV","tlshash":"a362b935bacc2235b0bf8e7f6cf274946729dd5fc4111b9ab8e9e594c8e04540a8b60f","first_seen":"2023-04-05T02:37:48Z","last_seen":"2026-04-21T21:10:46.140227Z","times_seen":36898,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.js?ver=5.8.13","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-user-avatar/assets/flatpickr/flatpickr.min.js?ver=5.8.13 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Mar 2022 16:09:28 GMT\r\netag: W/\"62432f38-bd86\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48518,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48480)","md5":"da3c57326c30dcf6d59a3a4f866e9189","sha1":"a4b2552b79bbca0948fde4860748dbe09c564706","sha256":"fe2ac5219992a3608a5c9e2bc4759fac8fb2189b88d7a674d395ff6c435da536","sha512":"ff414e9aae5f0357023ccef3934b31ff8de7403e5d84116d4b74aa0c4d9900cb31546da683794a34e6d92fbb792143f79b5986252c24ae114d76327028a3a8e5","ssdeep":"768:lAQnzb0qC3AZ1hGI4kf0iwY5Z60mF/OH23r80OxQ8GgEmaf5WE/+J6pPS:lX5C3Vkf0iwY5Z6J9OHuTOxHGgEmaf5W","tlshash":"1e23d48639183d3357da5cacc4af015dbb301fe6488390a0b96ef1587ca8d81927ffa5","first_seen":"2023-03-07T01:06:39Z","last_seen":"2026-04-21T15:15:37.590117Z","times_seen":972,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/chto-znachit-gustaya-krov-3fbrhs6qsyq912gcc8uf4a.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/chto-znachit-gustaya-krov-3fbrhs6qsyq912gcc8uf4a.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7480\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1d38\"\r\nx-ray: wnp48933:0.011/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7480,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"be192697ea71ef92d893df2d00c9e8f6","sha1":"8ac9d266807cf31852a5910a03c5bb2a5377f051","sha256":"1b1597376c79e7e28650e60e0fffc5513d53ba24ba55bd21497a0876cb1e82ff","sha512":"01c410b56c9129370c1913e8ca3925fde4f9e33784d8ac596f104c9891f4d69ac1d3c56fa1e15800444616d3aeed8b51195778aaae4b42130568f8477bd96649","ssdeep":"192://Z3ZCsSsfFfhVFa7mGegqfKy2VouK21H9rITX5dXpis:nndRpPgqiy6oO99Ud5F","tlshash":"b2f19e86dd3216c06ea01e34a74fe2d071644af2fb7acb946af6c0b1ee154cf15c494a","first_seen":"2026-04-21T03:42:41.493063Z","last_seen":"2026-04-21T03:44:07.068813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator/images/bg.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator/images/bg.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/wp-content/themes/emulator/style.css\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3463\r\nlast-modified: Tue, 29 Mar 2022 15:21:31 GMT\r\netag: \"624323fb-d87\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3463,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"2eb1cac9f08a12554b49334732c57914","sha1":"fd0976e175f6a687746f62e1d64f3bf6ec4bfb6a","sha256":"52e2afef090caebb4804882f72c92f74cfc64a1bf732450678e9d0a2d49ad353","sha512":"db459d027a1ae3b84c90f7d2652796cb1351a564c301d4450e07234e0d0e8bd52c0c1ef6b52217baec710f9543424c925d745fc0ee9cf4d2655d75d90cd04bec","ssdeep":"","tlshash":"c6616b2ef704a1c7c7b2593b104e4992940ad96ccee10b1ff8bee828976d5212f06259","first_seen":"2026-04-21T03:42:41.494309Z","last_seen":"2026-04-21T03:44:07.013387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js?ver=3.6.0","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js?ver=3.6.0 HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\nage: 374354\r\nx-served-by: cache-lga21931-LGA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 98468\r\nx-timer: S1776742923.448370,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-21T20:49:09.315142Z","times_seen":453084,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":12,"dns":0,"connect":27,"send":0,"wait":27,"receive":8,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/chasy-stareniya-s-ii-dlya-prognozirovaniya-zabolevaniy-3fbriejwl1lrppbiwfr4sq.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/chasy-stareniya-s-ii-dlya-prognozirovaniya-zabolevaniy-3fbriejwl1lrppbiwfr4sq.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7567\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-1d8f\"\r\nx-ray: wnp48933:0.011/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7567,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"5326b40cb06cde97495cef00eb1bb6ad","sha1":"d9769e0310c87ee688a382eef15d84b2e2dc80e6","sha256":"feeffa8ee9f07dc904311611d4d21c5896d86846795526c223d7210df2689482","sha512":"c870057d1314cb714a1e0a1f864a292874a25429493015a34fe98ac2ff7c11f9f17b46b2e8df5f3118805c39589357c1801da55415f73c1999ff1e5634496f6f","ssdeep":"192://vl19Mn0NXF+3WhME3MBv/IQCuwoTV6MN0Bbhjz8IxWC:nvqug3i8NFTOhX0C","tlshash":"12f19eb7c32047086d301f6115977de891d5973bbc1069614f3acbdc8da48ee5acd9ac","first_seen":"2026-04-21T03:42:41.496259Z","last_seen":"2026-04-21T03:44:07.051188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/themes/emulator-child/assets/img/refering-resources/3-adme-ru.png","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/themes/emulator-child/assets/img/refering-resources/3-adme-ru.png HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 21238\r\nlast-modified: Tue, 29 Mar 2022 16:11:00 GMT\r\netag: \"62432f94-52f6\"\r\nx-ray: wnp48933:0.014/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"3a719549deca8d98961defa5b600ef2a","sha1":"9fe665d62240d68dcf0e5aadca736b957d5db9ed","sha256":"9ac20b663080e121b76cbf62b6ed23ff378d2c6542b034f5857f22ba606f60c1","sha512":"2536734d296332285d9246e67559e844e03a43fe7875a31a2b1285b3080dc53abb99088a5514bf1f2ba64a9f5e2369f90780ba925c2738b18a3ccfb9e7ccb5c2","ssdeep":"384:R6KMkr6R5J5p7AMDVIVpfSydyAUr/SQsDiolQ0KkkkkdtzGf27eXvSYebRGwBm/0:bvCTpPDGPfSAxSNwiolQZkkkkdtzYXvg","tlshash":"e892e1803750f6b96d78942c9890ca82bdf3c2c4326f79f090ad8719c796d9953bf455","first_seen":"2026-04-21T03:42:41.497576Z","last_seen":"2026-04-21T03:44:07.07794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.89","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/plugins/wp-postratings/css/postratings-css.css?ver=1.89 HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 1353\r\nlast-modified: Tue, 29 Mar 2022 15:21:29 GMT\r\netag: \"624323f9-549\"\r\nx-ray: wnp48933:0.000/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c9dc6f1ef374d733a82d1682278e5b55","sha1":"b5b6bc412bfca400a514554026d0841e4d0275d3","sha256":"c56b566e17c62870ce139b3a57bfb94a9d785792bd6ac2220d52426b8590d87f","sha512":"7790e66df0583771de6088cd9ea75f6da53ad6ac14f4a61bbae127f14683466d4093507df023bc3a826bef7f82356aec853278a5ad7a0219fb5f006e0bcfc546","ssdeep":"","tlshash":"c721def86e00051c8d3ad2473685fe40cf74008fbb0ecd6e7a4c69269303a092aacecc","first_seen":"2023-04-07T05:15:26Z","last_seen":"2026-04-21T12:18:51.716807Z","times_seen":1262,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bestforwork.com/wp-content/uploads/bfi_thumb/antibiotiki-dlya-lecheniya-covid-19-3fbri0lt6kfv8bgr5a8cne.jpg","fqdn":"bestforwork.com","domain":"bestforwork.com","tld":"com"},"ip":{"addr":"185.104.45.162","port":443,"asn":200000,"as":"Hosting Ukraine LTD","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:03.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bestforwork.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 01:38:20 GMT","end":"Mon, 08 Jun 2026 01:38:19 GMT"},"fingerprint":{"sha1":"E6:38:E5:6A:76:45:4F:36:B4:0D:DD:3C:43:B3:EC:75:E0:21:79:85","sha256":"C1:C6:7D:AD:2A:D7:83:A2:6A:52:D3:D4:9D:5E:89:1E:B2:C5:7C:2C:EF:44:0D:5C:A8:0C:71:03:4C:F0:A8:7E"}}},"request":{"raw":"GET /wp-content/uploads/bfi_thumb/antibiotiki-dlya-lecheniya-covid-19-3fbri0lt6kfv8bgr5a8cne.jpg HTTP/1.1\r\nHost: bestforwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nCookie: ppwp_wp_session=501e7350ed577f216d594277dca5fdb9%7C%7C1776744721%7C%7C1776744361\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 03:42:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4799\r\nlast-modified: Wed, 30 Mar 2022 08:04:17 GMT\r\netag: \"62440f01-12bf\"\r\nx-ray: wnp48933:0.013/wn48933:0.000/\r\nexpires: Tue, 21 Apr 2026 06:42:03 GMT\r\ncache-control: max-age=10800\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4799,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 170x170, components 3","md5":"eb81ddfe100c270f6c8836939a8a2d7f","sha1":"5e0fd796911d7a58ea084def591daf5269f47fe3","sha256":"9a9e207f761263ae815ea654954416531a566983891552b29970c82c21476c15","sha512":"0d3dc965f112c34a8e14ff6f7765d5b5b74fe30b82f479c42f1ca0fc6bc824c2294249231371288bc554d6561cdaf1c0c6d6b6d2f5075e6d2812d64867959a68","ssdeep":"96://ERlbT0tVexVYSgDzrW7po8TJ5ig3C5OlNlwDHbvsdccJhSuZ://0lbyVMqSeXWFo8Tr7KENlQHbv2cW88","tlshash":"8fa17da03f058b61dc468ffb9c498002c1c134f2a9fca34de636daf97354bda68675a5","first_seen":"2026-04-21T03:42:41.499515Z","last_seen":"2026-04-21T03:44:07.047934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.userway.org/widgetapp/2026-04-14-10-40-20/widget_app_base_1776163220800.js","fqdn":"cdn.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:04.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1667503734.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 08:31:06 GMT","end":"Wed, 08 Jul 2026 08:31:05 GMT"},"fingerprint":{"sha1":"5A:74:01:86:76:CE:B0:E6:30:B5:2F:B1:6C:31:A3:23:FE:3A:E0:4D","sha256":"63:1E:DC:25:77:87:AF:FB:B2:7B:00:55:F8:0E:C6:0F:94:40:39:C8:22:4C:F2:10:55:38:1F:86:5B:60:E6:A4"}}},"request":{"raw":"GET /widgetapp/2026-04-14-10-40-20/widget_app_base_1776163220800.js HTTP/1.1\r\nHost: cdn.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bestforwork.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:04 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, POST, DELETE\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 14 Apr 2026 10:43:35 GMT\r\netag: W/\"35d7ad4f12868d6720a38a9f02b4388d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=25920000, public\r\nvary: Accept-Encoding\r\nvia: 1.1 47bf742fc3975367a1788e300150d028.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P10\r\nx-amz-cf-id: 4p3EKly-uKoZrYwBYFI_YcHoHnI3lZpkV2bSJ-ljZrExm3SuN5M9Vw==\r\nage: 449\r\nx-77-nzt: kwqzazWWwDbkDetiixRIvAX0El8JJA7FDyM92O5kfv4tCOoAwAse/IKkLaWnTxDc5jh3vRo\r\nx-77-nzt-ray: fdb54123715d6b600cf2e66935766619\r\nx-77-cache: HIT\r\nx-77-age: 578921\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":163852,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31995)","md5":"35d7ad4f12868d6720a38a9f02b4388d","sha1":"8a4ac716996f07f75d537de765d6dc7f105996b5","sha256":"30dad64470a3cf0d4830d293ed3b9dfeccb573f01d5d20b672692d75182ff57e","sha512":"38709179738f00e9109bfa7b771d31e1d2042caf7997cf9538965d4a1071ff80f7bf717ad78d0a8d1f55072d06ed632d080367df2545c63e32707f920032cb2b","ssdeep":"1536:3O9VvoCZcJqUvwKLrYjhmok2loxmzdmFXJLPQJMJD1N8w1DWCSoB7NVw35ahT5iA:3mV3ZvFUmI1YJdYk3dM","tlshash":"a1f32cddb186b43613b7a4b9d03fa10ab2353a0d644d9610a925ddd838b89cf5633fbc","first_seen":"2026-04-14T11:15:06.022083Z","last_seen":"2026-04-21T20:43:57.888288Z","times_seen":714,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":33,"dns":1,"connect":7,"send":0,"wait":13,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.userway.org/api/a11y-data/v0/page/https%3A%2F%2Fbestforwork.com%2F/DESKTOP/WIDGET_OFF/status","fqdn":"api.userway.org","domain":"userway.org","tld":"org"},"ip":{"addr":"52.42.200.58","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bestforwork.com/","date":"2026-04-21T03:42:10.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.userway.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 03 Jul 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"10:7A:35:EB:55:85:0D:A6:9E:BB:48:49:3D:72:BC:28:08:2B:05:EE","sha256":"12:92:5D:17:44:15:4C:2E:3F:72:52:57:26:71:0E:C8:6E:ED:76:75:C4:F5:72:D4:56:8D:CB:4D:33:39:FA:DF"}}},"request":{"raw":"GET /api/a11y-data/v0/page/https%3A%2F%2Fbestforwork.com%2F/DESKTOP/WIDGET_OFF/status HTTP/1.1\r\nHost: api.userway.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bestforwork.com/\r\nOrigin: https://bestforwork.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 03:42:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 77\r\nx-service-version: seo-w-743ccf8a\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, PUT, PATCH, POST, DELETE\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: Content-Range, Content-Length, ETag, Content-Type\r\naccess-control-max-age: 3000\r\ncache-control: no-cache, no-store, must-revalidate\r\netag: W/\"4d-wYLRLrbWidRwnfhEvoB+Y2U04NY\"\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f3b84edcbb7d7e1cf47c38c8fe97788f","sha1":"c182d12eb6d689d4709df844be807e636534e0d6","sha256":"d2f13447bd89c56bad76bac2e4e551ac6b611f40503104b70ee26812afe5a94c","sha512":"4caf9b1f67466c5c7765ee76776641e946a625fb4b797639b5b03692fee17e0ec795a71f26444d33aa3b58d5cadc2f7d334f411dea7b9e171d2a1ad0796b43b5","ssdeep":"","tlshash":"cfa00444d444cf44cd415d45f5d15d745f737f47f4d515551755151cd4544c47504f10","first_seen":"2023-04-05T14:38:53Z","last_seen":"2026-04-21T20:04:58.795779Z","times_seen":14026,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
