{"report_id":"4e02ac78-e0bb-4a94-b9fe-52b1c05bd6a9","version":0,"status":"done","tags":[],"date":"2026-08-10T14:37:21Z","url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"title":"slon-7---at.ru","dom":{"size":12199,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5536)","md5":"97739d7a41113e560dbf15f236ef2ef5","sha1":"8428b10cb0c45ff5a7fb202459ad434abb2a3a3d","sha256":"fbe46377aaf3887133b21eb3cfdf4f6ccd3f5de0f0e209450848e7a7fc433520","sha512":"703f4570a464795edd574c15953bade92a097d69fda8c2fc14bcb89949ed6bd9f9ac4c01293bd97aab09924b5ee3339fb373fefb2bef2901b3a5a1ba058cc8b3","ssdeep":"192:Hg8ANqajQjnyJZ86VTVKVRf/N70EaGdC5UNgbFguATD+/kF2erCyL5TV9qv:fAcasOb9sJ7LDI+rDlDr/Zk","tlshash":"0b4288610416b03f0a037af9d23ebf4c74da40aede869900fafc15552bd1ee1da59739","dom_hash":"domhash9a2b6d07af81264146eace46135fa31a","first_seen":"2026-08-10T14:37:27.322738Z","last_seen":"2026-08-10T14:37:27.322738Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":0,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T14:37:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.reg.ru","ip":{"addr":"194.67.72.31","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":279116,"first_seen":"2012-05-30T11:53:54Z","last_seen":"2026-08-07T06:07:41.374208Z","alert_count":0,"request_count":1,"received_data":710,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"log.strm.yandex.ru","ip":{"addr":"87.250.251.15","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":66726,"first_seen":"2018-03-28T21:12:20Z","last_seen":"2026-08-09T05:20:26.462731Z","alert_count":0,"request_count":1,"received_data":363,"sent_data":914,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yandex.ru","ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-08-05T23:11:24.507994Z","alert_count":0,"request_count":1,"received_data":141082,"sent_data":6801,"comment":"","tags":null,"fingerprints":null},{"fqdn":"slon-7---at.ru","ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-08-10T14:35:34.149456Z","last_seen":"2026-08-10T14:35:34.149456Z","alert_count":0,"request_count":7,"received_data":314159,"sent_data":2723,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-08-03T15:36:09.733654Z","alert_count":0,"request_count":11,"received_data":2592811,"sent_data":5437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"files.reg.ru","ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-10-31","domain_rank":5588631,"first_seen":"2022-11-17T08:46:40Z","last_seen":"2026-08-08T06:50:21.339854Z","alert_count":0,"request_count":2,"received_data":206445,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"avatars.mds.yandex.net","ip":{"addr":"87.250.247.183","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":37773,"first_seen":"2014-12-15T11:43:59Z","last_seen":"2026-08-07T23:33:34.359389Z","alert_count":0,"request_count":1,"received_data":81869,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"strm.yandex.ru","ip":{"addr":"87.250.254.45","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":62019,"first_seen":"2017-01-30T15:19:59Z","last_seen":"2026-08-04T21:51:07.72172Z","alert_count":0,"request_count":1,"received_data":1360,"sent_data":1080,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"strm-fra-03.strm.yandex.net","ip":{"addr":"5.45.200.102","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":611357,"first_seen":"2024-07-29T22:45:55Z","last_seen":"2026-08-07T18:40:59.446199Z","alert_count":0,"request_count":1,"received_data":134681,"sent_data":719,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"favicon.yandex.net","ip":{"addr":"87.250.250.36","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":42374,"first_seen":"2017-01-29T09:03:57Z","last_seen":"2026-08-07T18:40:59.583616Z","alert_count":0,"request_count":1,"received_data":1103,"sent_data":570,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/ad8b7479f920713e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa234159c92b69a8fc1dca2fdb75ad2b","sha1":"3b7e61b648b7e0b673a8be7844f91df0726f72c1","sha256":"8ea0cbaf7fab50b4fd9aefa35d39f1c7f704320d800e86962545206225ad7ccc","sha512":"e574bc6666e13214f891dc5c96cf9932b9b65fa3e1d382813e0876c9ae1f5cb9838f1bd4bb2aa6097d6ac62b39a8544424e3393d57e7ffe0daf31c97a5a0778d","ssdeep":"768:/S8S2XuKTeA/lyujtCrPjCa7AbCGRCbpISN34EtlGIs2gFZmrm0ZrdzS8HUVdnJa:6ay0H6rAvKi8tkJaTEcX","tlshash":"df03b58db1e1f0a24a97a0b4813f210ff23b6895a81d9440f766e4d17cba99f5073f6d","size":38510,"data":"","first_seen":"2026-08-10T07:23:56.280374Z","last_seen":"2026-08-11T08:17:49.497636Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/vas-bundles/bundles-es2017/loader.bundle.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"55cbdeb11663e868f9ce18b765f75fc0","sha1":"f6af2cc69542ed19437d449c61bb87fdd39eabc6","sha256":"ca0534fce221d1d1f481e76893e87cf211132f4fcd63758ca5f29861c86e8c8c","sha512":"c5e5a6741e76df469e9715e139068394f1b8b6d5041ed68a62a316a505333f3d06f8812f9822bc3413a4750e77790ff76d6de5d151496b42af93a6817c8d87f1","ssdeep":"12288:ZTDX3F2j89gshAyHqh9MQD5AkLDOmTY33SHeCe6amuuw:Z3l5XHq9MiD/OmT+SHeCe6buuw","tlshash":"5d256ce97391b07943c790d8c47b050aa3386984680c412cf9b9edd3a59be4da376fbd","size":1025641,"data":"","first_seen":"2026-08-10T13:56:04.104556Z","last_seen":"2026-08-10T23:57:21.872523Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bae51b8e92fcd4a4ae6d8007b20907b","sha1":"2d349dcc80d19591a083ac2989fa2b941e6e7001","sha256":"d8a0560358c51b493362768b5e550e2a0f7e5403e9a5e58f37e0eb28ab75c594","sha512":"965511c40a366a367bcd31fcde5ff53ba352eea23c004732a706f9e90fee8b03473b7253a441febd3f64bdab4c0b883d34bfa7475fa1f1c21b048beb6dea852a","ssdeep":"","tlshash":"39a02208a020220888a230b2c2b3f0280aab000c0c088a0203020008080200b8088afe","size":60,"data":"","first_seen":"2023-03-07T01:15:28Z","last_seen":"2026-08-11T20:54:01.89897Z","times_seen":2884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-08-12T02:14:03.270556Z","times_seen":15008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"15c4089d1e32973c5727325e1076c386","sha1":"097c486112fd84a3b3975c91c72891a9e5246950","sha256":"e7ae699b7fef5d8d20b096bcf7c379698dbe6a7c4afca57af7124979bd20a2a7","sha512":"dad4407274ac4d55f7b33a8d0d757b3678de7085eea62e3e55ff908a248678dc28ade83bc3e7b87667ae792703c3123f01f3a330a617f8d4ab416648673a0bb3","ssdeep":"","tlshash":"3ed012176671257501936010581c041d16520153574c45547f0c301d2bec11a269669c","size":241,"data":"","first_seen":"2025-12-01T21:25:25.735676Z","last_seen":"2026-08-11T20:54:01.900167Z","times_seen":806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ea5ef37a854257a32c8c12a03f3f52a","sha1":"905dfa6483419c0a655864596e548c5f1b4809f7","sha256":"43f26a30c926dbf36fb3ade9b713f090d9a7f986a04a600ad46d36cfde92eaa4","sha512":"37380cbef7f2b660758ed984d96c75ca38c39e73072d0948d98624f46a3d20f1ff486e2ffccd9c42d4fed8fbbc0c9822fd3b0c57483f8acf64795767c339b03e","ssdeep":"","tlshash":"1c1128049db7406c044375b6c66b6310a1d2e127952ed808fc4cf9486f50b6c3ea6fbc","size":933,"data":"","first_seen":"2026-08-10T14:37:27.362206Z","last_seen":"2026-08-10T14:37:27.362206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"beabc55f45407abedbcfbe49b941704a","sha1":"9881eb4ee279c099ab6b080e8ce3bf8db52f42d5","sha256":"e2b1f18afdf49b57dda527712db64ddf5ac4aab9d3f580281c867e256db049a4","sha512":"b39d0a34470e42adf74b4faf5c8ebab364f783cb5f6d9b99e1ccbddd437afb57b0a576cb31795ef3d636913c4925e02ab56a8dd3733d82f128dd9019a5a67cd3","ssdeep":"","tlshash":"8c11896c68a5012c96f37279a9ec7280781a1507aaa1d40cfe5c64050fe0c39ba75fdc","size":900,"data":"","first_seen":"2026-08-10T14:37:27.363784Z","last_seen":"2026-08-10T14:37:27.363784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6357d37a3edcc55461f4e2f0e501316c","sha1":"87ad2975e234cb0cdf779750962c55691b95de40","sha256":"14d02a3502d07296225450c5b4f8eeee501864367bb3885c7bef31763ad2d634","sha512":"fe8e301537d2e6c63e52e941a0c2858f1a7d67cd3824809fd00b3196a15a0a8d78bc3effe3465a1599f3d374c9bbe68b7362a6eb7eb50dc1d1ee14751ade9b59","ssdeep":"","tlshash":"1cf00ea53cdc84398337102267bba2487479a93a2c4afc15f54cc4812f99efc18bb98c","size":530,"data":"","first_seen":"2024-12-31T07:10:36.5379Z","last_seen":"2026-08-11T20:54:01.902054Z","times_seen":2498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eventHandler","is_inline":false,"md5":"5b057d8aa1e34436f8d5fd111b6491ce","sha1":"02b8cad77321003b4b409e66834f858541576457","sha256":"4ab09ea291b2663ca5bbf7dc04757e161bdbb7ce39a4add0865e5fd5458db231","sha512":"0355002a1535fe31144fd551611d520d2a7189ec7e210962ce3b9ec8f2a055e39a6a5c5b189534e90cb50c0a6c811a2f84a6f12a6e1a6a05719c51aa878c9187","ssdeep":"","tlshash":"d18004043c445cc45c1405013373d3053f5c05051105f4d1c5d3344330411574f1017c","size":38,"data":"","first_seen":"2023-04-11T09:22:34Z","last_seen":"2026-08-11T20:54:01.904878Z","times_seen":2864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/parking-rdap-auto.js","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"daacb0eadbbe89b15a54f55858a487ee","sha1":"871c07c2fc8fed3b0d3e9484b829e87c25c87a49","sha256":"48883fa5b4644faa17ff9ff6d093f8712df13bf9ec08fe8d707b7fe1355ab4b6","sha512":"e38ceb363ddb465357517d89c00216855f3efe388890dd89a3788ae5edf558e66c7f1f41f22a387e313bf63afafc5c5dc306160ff98abee00ae388429000a1a4","ssdeep":"384:2oDRuENCSoVeV56kz4DAClPb93ZC8ompYA+MJlsNjD8ZubaSsOFxbnUI:wkcAClbJl2D8Z0a7OFxbnR","tlshash":"5962b98078f61e6d27f215d6590b0dc2e4174a043c558c84e78bf572baedc3f917ab2a","size":14578,"data":"","first_seen":"2023-06-30T16:30:07Z","last_seen":"2026-08-10T14:37:27.324707Z","times_seen":1531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","size":49523,"data":"","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-08-12T12:21:44.241971Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/517802cb41c14c78.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7c882db36e7c31778729aac3539037e","sha1":"850e58b1172517c15e06044f62d3151aa390c1b9","sha256":"5344c56bc9e5cfe8fa90aec882dfb196f88fde5f0f63f6e72c4db353e6447a61","sha512":"73456c3f3f44b07e1e2d16b52c3c6d7d3668b49c2a48eec27304ef603e13ef911cdf1f2fe0bc60c7dc172d582908cf89639d76ed811e0773eb1e2ff35e69e78e","ssdeep":"3072:3cJJjYo0HoKiMQTIRmclT7TUxTWaLUeWBWv8Q1VioJAGhXaDQ10N/j+MA0dpNZaT:3cJJKIKiMQTIRmclT7TUxTWaLUeWBWv/","tlshash":"25e3c78db2e1b47142d7a0f5503f6a0bf23a6459a4098094b72de9e16fb898f4137f3d","size":156643,"data":"","first_seen":"2026-08-10T07:23:56.284832Z","last_seen":"2026-08-11T08:17:49.491461Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/0f0e0dd0e1dccca7.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f77e93a6078fc2019695251632467b5","sha1":"dc9ea4ae18ddc90d639b602a312ae03a83514a74","sha256":"fada6817e538bea4c9dcbc3b85e3596cb3ad2450bf07ccd371618f48de6c519c","sha512":"657948bea7ab9a9507ba3b385462dfb3c6a984c0c0dd5fb32d10ed1641ce00f6220ae455baccf9475c5a50dc8f8026954a4f94f77d59f00ae340b932334f7429","ssdeep":"12288:KX0UtnhBcnzBUJg2/kvxAtTjcFk/jl+G39Kvogpv7+3:KX0ULJg2/kvxAtncFk/jl+G39Kvogpvw","tlshash":"f7e4d88af5e1b06142e7a0f9803f150ff23a7a15550980a4f62ae8e57eb858f5137f3d","size":679980,"data":"","first_seen":"2026-08-10T07:23:56.282463Z","last_seen":"2026-08-11T08:17:49.490873Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/3b72aaed0bb98346.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0eeef18e84dc0d8b5096541da14259b","sha1":"1f3799d0547d24977f4646f96059e6643daf1c65","sha256":"47ad62583e5290bb59b6eb4f5ab40e100760bafe22fc4a61ac1ac9d7b7dd8e91","sha512":"bf95b34efdf5e612d0300d16f008cf5c1656ee393942996052bf509c755afed6471b2f774d01a22406ccc34d4d764d782d579aa2c65e5dfa3f0cb2553aa6974a","ssdeep":"96:uHjwRO8i2b4XfmP5IWiwYVdFecX65V8i92PbxCSmaXmpwXTqTv1J0a2q2:uHjC+27P5IJwYtXHJZQwQv1JzL2","tlshash":"4f8118fc3680337693c216d490bb9206b53a0d21980a71a2f05d94517eb4fa760fff5e","size":4158,"data":"","first_seen":"2026-08-10T07:23:56.304901Z","last_seen":"2026-08-11T08:17:49.485131Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eventHandler","is_inline":false,"md5":"c49d56f44059c342bf0c1861ae3b6904","sha1":"9778326eb13bb7caf7272efb71d0e3262676326f","sha256":"466c504ae63ff78f98f291ab8d7fcc10a1e10b29c22251ba746e326d27fee79f","sha512":"5c1cee5e18a0eb6c6cac6aa0c75a6b50af2b994a9e75a50cd361c36d6e8059f081f2b363e425cd993d7673c5af8660959e39f1551cf67d76ecb16247ff5238b0","ssdeep":"","tlshash":"6790026418809c585d251e01631aae045ad454424118a8518145242224451025580179","size":46,"data":"","first_seen":"2023-04-18T10:46:20Z","last_seen":"2026-08-10T14:37:27.366622Z","times_seen":1508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba214fa0ba96a0b8cac9183fcde99daf","sha1":"4f9f5570e0bc4f6a3440fd4f3aa66f9b18696ba1","sha256":"88f8f4c9dbd7d34056c0b899abc5cb2e9a15faeb9e1cd9d518cdf747bac6f649","sha512":"0ef637a173dee2a88046c2a5fda4d1384058369db74b97cf006a9753ec0ccef4a91b3f1d0a30da0736b488229bfe753b9a9ce5ed8d7461cc00074e4e13640fde","ssdeep":"6144:QdvdFrFavKZzgD7sFcz6WJKO2OUGCvA2NGhjUSCAUHYVFxwnrNOe+weRYNPdfiRz:arrAeGbjsmf","tlshash":"3194c69db1e2b4a143d761a4803f5a0bf23a6955780e9090e325e8d5bcbc99f9133f3d","size":409139,"data":"","first_seen":"2026-08-10T14:37:27.367285Z","last_seen":"2026-08-10T14:37:27.367285Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/02b361cada0c0ea9.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"22a0e65a028be39bf6747dc7c95c4105","sha1":"cf2e4b1484075fefe126790336a2907449179d36","sha256":"3bbec80d4e5220abc8f2b242fc73f6096a87673628093fdb0221dad3d4e80af9","sha512":"8a23c94d0334d670e32ecdfb94cb713a220f75533565102d75a625220f86b3cae57f4c75640e9daecd12b580351652495f8c9ddd3999ebc0e1c090c2618b1781","ssdeep":"1536:q21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:gN1dfXIQkN+nF/JH9zf6","tlshash":"985475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","size":305380,"data":"","first_seen":"2026-08-10T07:23:56.30664Z","last_seen":"2026-08-11T08:17:49.50265Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e28de8572712134d1bc4a77e52bafe5","sha1":"dea7f17d1a27bb63cb09902e4e21ad59809f2480","sha256":"4cb8e701d93fbf469464d6711bf8aec61ea16595a804ee56d926e999ae12920a","sha512":"0699663a24d534849484ec03b3f2cebf8ea5dd856d9c0760de18332920aa940d097ac8edf246fe153ac91cd1d9c06c9ca04994f654f39a7297032d3847dcef74","ssdeep":"192:iHFHNNSZkrXmgldEq88LX15yvOYq7YLYIP3qt4MV+9XE:iHFn8CX+q8Y1yqcsLWMQ9XE","tlshash":"8a12d9f932a1b8c012f669c1085f557b01ba7e07b90e255b472659927d240ce60f2fef","size":9232,"data":"","first_seen":"2026-05-27T08:51:43.706545Z","last_seen":"2026-08-12T11:18:05.595142Z","times_seen":2950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d754269422d94f98d69252e63d2024cc","sha1":"2258f9d30e0785989a536f5fb220b6be68219328","sha256":"9858dd7119d0f2eccec9bfa316d4aa0f99b6ddef5e1320cd1722f735674bc6da","sha512":"e9956dc4f9326cb89b82cc774831de1656309a9423f2a764fd156944e9c2560d02f4ed9a049ba2770c97636ba1b568b4dcce303c81e305dd0d0254f917002028","ssdeep":"1536:dBD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0i:P5SGX7g8BYlyp2z2BWoy5Xix","tlshash":"9434c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","size":249149,"data":"","first_seen":"2026-05-28T17:31:03.147441Z","last_seen":"2026-08-12T11:18:05.65812Z","times_seen":2116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/93d08bce4a4cdfab.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1531c194c84938fd640bbf59bb343e3","sha1":"ec3c28c41b05f7223aa6c1eebbc0f4c8c6426e7d","sha256":"86e1d97e5a157aa1b1730d2dfd97c4b660c1232b69c1dd291df689fe74bd723e","sha512":"bf2170edb4d607ff9fef9e4b65b742e1c2a8091bc0059d9f467b6cedd86faa329c6b3633de61471aa4e5be4b2a35814773811c8a17444564bc739222899561ce","ssdeep":"768:68xL2igtTWmD1qCtD1WCAGOVD1yCmaC/QxFWCC5sf9pxl61:68d2igtamvrOV0XQHK1","tlshash":"bd03089876e5f4b042a394b5403f250be3357f1a801ca080f226dae46df9a9f5272f6d","size":38742,"data":"","first_seen":"2026-08-10T14:37:27.341206Z","last_seen":"2026-08-10T14:37:27.341206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/manifest.js","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d276783c3eff75365ec2af2eb275b4dc","sha1":"13be1a62346242bc92b7b2d61cbfc54556d69505","sha256":"c1e2076faa42b9dabb88ded60783c45dca8163ecc05cb63b375275b67bb82edb","sha512":"21f9b5025cf0f942c04f315a01dfad3148e525328e8162ef6256f234085f43cf7f627efd0aeedc241ff7e45efaad4ecd041d8fbfbe62a36d475789eed85a3d87","ssdeep":"96:9s2RDpVjtVzQuHLn6h7u1ixk8LDk1y7VAU20Jc8De+/:9Dp7Vrrn6h7u187VbMa","tlshash":"8c91b7ba2354e5bb269009d05a2ed197fa157037252b94f0ab1bdc76f87cec08466b70","size":4278,"data":"","first_seen":"2024-10-13T12:37:54.659345Z","last_seen":"2026-08-11T20:54:01.891846Z","times_seen":2758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/head-scripts.js","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e2d9b76e9458363d6f965e0f4270960","sha1":"cf4eda3788fc9b76ab694233838018075713e1a6","sha256":"951819b4acc883fa5e8e3bf3ade8bf32e79bc7895de07f2665097b8c15ccb748","sha512":"37a79eeb3bc0b14c36e2ef6e836a37a511141c2265076c8f51f15477e166995c0462c1f1c610ac31980f1d1d89abc460a80fecbb3066a6e221ac4019a0b84870","ssdeep":"768:hZgOQuhhf/wNvdVnR4I/6rorELrKN260RJB9:X3l9/wlRCMUrp","tlshash":"be839344faf0aea51679a111b36bc4c3f967425090e3841466cef9e4ec6f53e71a3b2c","size":85185,"data":"","first_seen":"2024-10-13T12:37:54.663849Z","last_seen":"2026-08-11T20:54:01.888491Z","times_seen":2747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reg.ru/domain/shop/get_parking_info?dname=slon-7---at.ru\u0026rand=0.004556563999108865\u0026callback=ondata","fqdn":"www.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.31","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d7ec76983f870b982770f4e10fb928a","sha1":"772d3382703716788a9e635b314211832126d5dd","sha256":"36aecca8f6fa1690b163b0a8ee06eabeaba897740e672bf726ed8e493833b2c2","sha512":"6fd4431a0ec1a0feb9790e902f3c67efce6cae1038f3b1ed910ff308bc5d32e9fe0ee679095238303568f69d15ac234fb4e27d4032ca1514c11b333ed6697867","ssdeep":"","tlshash":"9ba02208a03c8cba0bc000fb3a0fbc0ac22e3bea28000e80e03300033030acfbb08008","size":78,"data":"","first_seen":"2026-08-10T14:37:27.334211Z","last_seen":"2026-08-10T14:37:27.334211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"introduction_type":"eventHandler","is_inline":false,"md5":"223df5584c6ae20363251af3f42518ca","sha1":"a9fc6f70a65fc4af507feebef6435dc898bcac3a","sha256":"82839328e0573e00fd00bee3854b0f53cd9c83681558a65e7206f5d75cb1e4f8","sha512":"f3fdf1f8a2432d8f691d16af1b08cdab01daad5f39afe49d10b9f1b3e54e4427d3c99f452070468dad5e565715a4578badd0f1cce1583132a9cb0028348bb518","ssdeep":"","tlshash":"1890040c5c40dc7c5c1415433333df44175c05033505dd5141d1141430041434d0057c","size":42,"data":"","first_seen":"2023-04-11T09:22:34Z","last_seen":"2026-08-11T20:54:01.905494Z","times_seen":2843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"slon-7---at.ru/parking-rdap-auto.js","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:54.270Z","timestamp":1786372614270,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /parking-rdap-auto.js HTTP/1.1\r\nHost: slon-7---at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 10 Aug 2026 14:36:55 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4278\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-10b6\"\r\nContent-Encoding: gzip\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: d6f0c6fe43d553356ac79c825ea98eb3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14578,"size_decoded":4643,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3635)","md5":"daacb0eadbbe89b15a54f55858a487ee","sha1":"871c07c2fc8fed3b0d3e9484b829e87c25c87a49","sha256":"48883fa5b4644faa17ff9ff6d093f8712df13bf9ec08fe8d707b7fe1355ab4b6","sha512":"e38ceb363ddb465357517d89c00216855f3efe388890dd89a3788ae5edf558e66c7f1f41f22a387e313bf63afafc5c5dc306160ff98abee00ae388429000a1a4","ssdeep":"384:2oDRuENCSoVeV56kz4DAClPb93ZC8ompYA+MJlsNjD8ZubaSsOFxbnUI:wkcAClbJl2D8Z0a7OFxbnR","tlshash":"5962b98078f61e6d27f215d6590b0dc2e4174a043c558c84e78bf572baedc3f917ab2a","first_seen":"2023-06-30T16:30:07Z","last_seen":"2026-08-10T14:37:27.324707Z","times_seen":1531,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":909,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/vas-bundles/bundles-es2017/loader.bundle.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.480Z","timestamp":1786372616480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306089/vas-bundles/bundles-es2017/loader.bundle.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 231609\r\nlast-modified: Fri, 07 Aug 2026 15:39:45 GMT\r\nexpires: Wed, 09 Aug 2056 21:08:50 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"b47251daead96befec604c15f730ae70\"\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 8\r\nx-request-id: aabc5748ea720551\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1025641,"size_decoded":232505,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65483)","md5":"55cbdeb11663e868f9ce18b765f75fc0","sha1":"f6af2cc69542ed19437d449c61bb87fdd39eabc6","sha256":"ca0534fce221d1d1f481e76893e87cf211132f4fcd63758ca5f29861c86e8c8c","sha512":"c5e5a6741e76df469e9715e139068394f1b8b6d5041ed68a62a316a505333f3d06f8812f9822bc3413a4750e77790ff76d6de5d151496b42af93a6817c8d87f1","ssdeep":"12288:ZTDX3F2j89gshAyHqh9MQD5AkLDOmTY33SHeCe6amuuw:Z3l5XHq9MiD/OmT+SHeCe6buuw","tlshash":"5d256ce97391b07943c790d8c47b050aa3386984680c412cf9b9edd3a59be4da376fbd","first_seen":"2026-08-10T13:56:04.104556Z","last_seen":"2026-08-10T23:57:21.872523Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-Regular.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.154Z","timestamp":1786372615154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:55 GMT\r\ncontent-length: 98868\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://slon-7---at.ru\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"dc131113894217b5031000575d9de002\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nx-request-id: 869c46dfbd359651c89c5a0eacf00b54\r\nexpires: Sun, 01 Aug 2027 14:36:55 GMT\r\ncache-control: max-age=30758400\r\nContent-Type: font/woff2,font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98868,"size_decoded":99754,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98868, version 1.0","md5":"dc131113894217b5031000575d9de002","sha1":"f96348260751ea78b1d23e9557db297290bdaf28","sha256":"d612f1212b452af07f1a5defb2b672e76a91f7139e7499fa48bb9b2b985c22d6","sha512":"0aa4420c7b7dcc70238371f9d21d521d0673caf4c1883eeb2d3254c5a1dad941f4569f418350ffc61e93303466c504179b90ba0acf008250dc9c2c6ddf6f850b","ssdeep":"1536:kWKd1QBjcSqfPdRBUJEW8yB7F2W4Ob2RdFoEw1r4FM9OcU/0UDTTj:m10zEWfB7GObYof1r5icUH","tlshash":"70a312ac58ffdf34aa65a9fcd27856761094223d83edc0ac90a200c6c7b65794fdcd98","first_seen":"2023-04-05T14:51:38Z","last_seen":"2026-08-12T11:30:44.64029Z","times_seen":28293,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":3,"connect":43,"send":0,"wait":180,"receive":43,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.982Z","timestamp":1786372615982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs_render-033ae686.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 45019\r\nexpires: Wed, 09 Aug 2056 20:22:10 GMT\r\netag: \"f0e84c9dc13c60b7f85fb5ec13d7117c\"\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nlast-modified: Tue, 26 May 2026 15:44:21 GMT\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=946708560\r\nvary: Accept-Encoding\r\nx-strm-log-split: 2\r\nx-request-id: 534198a03a5313dd\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249149,"size_decoded":45914,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65499)","md5":"d754269422d94f98d69252e63d2024cc","sha1":"2258f9d30e0785989a536f5fb220b6be68219328","sha256":"9858dd7119d0f2eccec9bfa316d4aa0f99b6ddef5e1320cd1722f735674bc6da","sha512":"e9956dc4f9326cb89b82cc774831de1656309a9423f2a764fd156944e9c2560d02f4ed9a049ba2770c97636ba1b568b4dcce303c81e305dd0d0254f917002028","ssdeep":"1536:dBD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0i:P5SGX7g8BYlyp2z2BWoy5Xix","tlshash":"9434c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","first_seen":"2026-05-28T17:31:03.147441Z","last_seen":"2026-08-12T11:18:05.65812Z","times_seen":2116,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":62,"receive":20,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.984Z","timestamp":1786372615984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /safeframe-bundles/0.89/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11893\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Wed, 09 Aug 2056 21:11:49 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nlast-modified: Wed, 15 Jul 2026 12:02:36 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"2e7b6e3fb8d17570cbabde24df196cc6\"\r\nx-strm-log-split: 3\r\nx-request-id: 62447208b0d1c101\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49523,"size_decoded":12788,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49523), with no line terminators","md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-08-12T12:21:44.241971Z","times_seen":672,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/517802cb41c14c78.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.986Z","timestamp":1786372615986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306089/517802cb41c14c78.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 31624\r\nexpires: Wed, 09 Aug 2056 21:08:45 GMT\r\ncache-control: public, max-age=946708560\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nlast-modified: Fri, 07 Aug 2026 15:39:41 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\netag: \"a90dc82990e4a10f3afffc723d4350af\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 9\r\nx-request-id: c6254f4abeab5290\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156643,"size_decoded":32519,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"c7c882db36e7c31778729aac3539037e","sha1":"850e58b1172517c15e06044f62d3151aa390c1b9","sha256":"5344c56bc9e5cfe8fa90aec882dfb196f88fde5f0f63f6e72c4db353e6447a61","sha512":"73456c3f3f44b07e1e2d16b52c3c6d7d3668b49c2a48eec27304ef603e13ef911cdf1f2fe0bc60c7dc172d582908cf89639d76ed811e0773eb1e2ff35e69e78e","ssdeep":"3072:3cJJjYo0HoKiMQTIRmclT7TUxTWaLUeWBWv8Q1VioJAGhXaDQ10N/j+MA0dpNZaT:3cJJKIKiMQTIRmclT7TUxTWaLUeWBWv/","tlshash":"25e3c78db2e1b47142d7a0f5503f6a0bf23a6459a4098094b72de9e16fb898f4137f3d","first_seen":"2026-08-10T07:23:56.284832Z","last_seen":"2026-08-11T08:17:49.491461Z","times_seen":19,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":62,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vh/13524190/2a00000197cba7f12c5ebe3d3449c9c955c3/orig","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.183","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.426Z","timestamp":1786372616426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 17 Jul 2026 12:42:37 GMT","end":"Thu, 14 Jan 2027 20:59:59 GMT"},"fingerprint":{"sha1":"75:0A:A7:C4:5B:7B:ED:13:C5:83:AC:1D:13:52:28:93:A6:52:4D:F5","sha256":"00:86:00:9B:72:9A:BB:0D:50:89:E7:BE:57:D4:CD:CD:0A:9B:94:60:BA:A4:A9:AC:59:94:B4:6A:DB:5F:BB:FC"}}},"request":{"raw":"GET /get-vh/13524190/2a00000197cba7f12c5ebe3d3449c9c955c3/orig HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81283\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nlast-modified: Wed, 02 Jul 2025 15:01:10 GMT\r\ncache-control: max-age=86400,immutable\r\nx-request-id: 87c21fd44a913d6d\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=KLG\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81283,"size_decoded":81869,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.18.100\", baseline, precision 8, 1280x718, components 3","md5":"638e328ff50b34b388fbeafcfeb5cbb1","sha1":"d1bfd328033cb85ceb509400288d50954e0c10ee","sha256":"b4ec3df92f2f1f3cb2be82d3364d417548a53367a7e3f8b9c7b0d315545d3cf7","sha512":"d774ca7318cb3a1265d84e1a1b23a7a9379fa1b6a75e1210fbc885bea1f2cf142e85ce911127c4cac4a3f1b0de1032394e253b86c52b7a4edf2643b34117bd90","ssdeep":"1536:CBeZsI5TUwmHs2srjGisrAvyiaZPC7aFjKQwTgfAWQSNz:QC5IHSrjBsr2ypZya0xgAWQg","tlshash":"ff83025bdfb5e93251099fb578ccc57bd0090d38c27a4b24f490e46827b577a6ab18e0","first_seen":"2025-10-17T04:28:47.000002Z","last_seen":"2026-08-10T14:37:27.33247Z","times_seen":22,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":47,"send":0,"wait":95,"receive":76,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"favicon.yandex.net/favicon/immigratetoeu.com?size=32\u0026stub=2","fqdn":"favicon.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.250.36","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.441Z","timestamp":1786372616441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"favicon.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 20 Jun 2026 21:24:05 GMT","end":"Thu, 19 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"22:A4:62:39:D7:5C:B8:3D:43:20:34:F8:15:3D:52:4D:B9:7E:99:45","sha256":"A8:7C:F3:00:5E:EB:2C:DF:45:1C:7F:8F:96:D8:BC:3D:6C:6D:EE:9B:B0:CF:85:55:06:50:D7:4E:A2:3A:D8:C2"}}},"request":{"raw":"GET /favicon/immigratetoeu.com?size=32\u0026stub=2 HTTP/1.1\r\nHost: favicon.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 Ok\r\nCache-Control: max-age=43200\r\nContent-Length: 910\r\nContent-Type: image/png\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\naccess-control-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"Ok","fingerprints":null,"data":{"size":910,"size_decoded":1103,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f318e4041e45f405ad12f7d86e728637","sha1":"5f7ccbe8c0d6f0601ca0d647512541a05c398763","sha256":"2b53a75ed14ecb11d37ebdcbf3771caf32d9337fcb5d799ecdf6d02b37d4c086","sha512":"f0e0298f7c4309befd0b10e22c3223dfea3036a67ed0d1a2d926f33f6e44dcd7da8dda1fa31c422274cc081cd2fc7e6352971cc6b7c7d08878179346b135f4d5","ssdeep":"","tlshash":"b211bbf5c8f51c91c4146b8f583b285ed9c70de40a757c0138461a274305ed716bc756","first_seen":"2025-10-16T00:43:00.702604Z","last_seen":"2026-08-10T14:37:27.333281Z","times_seen":212,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":2,"connect":45,"send":0,"wait":50,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.reg.ru/domain/shop/get_parking_info?dname=slon-7---at.ru\u0026rand=0.004556563999108865\u0026callback=ondata","fqdn":"www.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.31","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.219Z","timestamp":1786372615219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 EV TLS CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 07 Nov 2025 08:59:55 GMT","end":"Wed, 09 Dec 2026 08:59:54 GMT"},"fingerprint":{"sha1":"44:8E:D8:54:C0:26:75:15:9E:B5:ED:77:FB:D0:73:17:AF:CE:AE:F3","sha256":"06:7B:34:65:88:F3:9A:6E:3D:73:2A:64:5C:03:87:9F:5A:95:BA:DF:45:E6:07:0B:F7:6A:56:5D:F7:ED:73:00"}}},"request":{"raw":"GET /domain/shop/get_parking_info?dname=slon-7---at.ru\u0026rand=0.004556563999108865\u0026callback=ondata HTTP/1.1\r\nHost: www.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: 194.67.72.31\r\ndate: Mon, 10 Aug 2026 14:36:55 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npragma: public\r\nexpires: 0\r\nset-cookie: SESSION_ID=d93fd5c3871a957fe0ea1ac300d4a6a7131d45a8; domain=reg.ru; path=/; expires=Wed, 12-Aug-2026 14:36:55 GMT; secure; HttpOnly\r\nx-request-id: f01bb9743c53677e9f58ccc15e17ed83\r\nx-frame-options: Deny\r\ncache-control: must-revalidate, post-check=0,pre-check=0, no-cache, no-store\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78,"size_decoded":724,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6d7ec76983f870b982770f4e10fb928a","sha1":"772d3382703716788a9e635b314211832126d5dd","sha256":"36aecca8f6fa1690b163b0a8ee06eabeaba897740e672bf726ed8e493833b2c2","sha512":"6fd4431a0ec1a0feb9790e902f3c67efce6cae1038f3b1ed910ff308bc5d32e9fe0ee679095238303568f69d15ac234fb4e27d4032ca1514c11b333ed6697867","ssdeep":"","tlshash":"9ba02208a03c8cba0bc000fb3a0fbc0ac22e3bea28000e80e03300033030acfbb08008","first_seen":"2026-08-10T14:37:27.334211Z","last_seen":"2026-08-10T14:37:27.334211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":3,"connect":40,"send":0,"wait":70,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/favicon.ico?1","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.604Z","timestamp":1786372615604,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico?1 HTTP/1.1\r\nHost: slon-7---at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 10 Aug 2026 14:36:56 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 14134\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-3736\"\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nX-Request-Id: c57e3f5b5073cfa2fbe0244717a01057\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14134,"size_decoded":14488,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c79cecb75624b00f9e69b603e79bb4bd","sha1":"7f68e4de425b71357d0c569a44cd2848754bb8f8","sha256":"7fccb84339fd382be7267a5cf90e04e8fb96c99c82fecaa4a0ccbb36686bf5bb","sha512":"9d10ad7942269e75627302a7b41315dfac62392360b3f7f5f5d7a97dbe7c0485b48b15805a5c5b4f4af6cdb425a5d1311b92a218fc143cbfe2e2e3b7c6f70e6e","ssdeep":"12:j/qs0e3iiii+7777777777777777777777bOnCezeJ0/tRCX+X9Rrl2lb77oIIIk:jysv7HK7qXauUUUUUUNZ","tlshash":"4a52851c2b9eec0ec3162fba6819d29622757cfa89d045373cf66b1f2af52c55c70264","first_seen":"2023-09-15T16:38:47Z","last_seen":"2026-08-10T14:37:27.336593Z","times_seen":3014,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":602,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/ad8b7479f920713e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.980Z","timestamp":1786372615980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306089/ad8b7479f920713e.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11083\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 07 Aug 2026 15:39:42 GMT\r\ncache-control: public, max-age=946708560\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"7103886216aae1a2b892c65818195d8e\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Wed, 09 Aug 2056 21:08:45 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 2\r\nx-request-id: f2eab2db61a2b891\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38510,"size_decoded":11978,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38468)","md5":"fa234159c92b69a8fc1dca2fdb75ad2b","sha1":"3b7e61b648b7e0b673a8be7844f91df0726f72c1","sha256":"8ea0cbaf7fab50b4fd9aefa35d39f1c7f704320d800e86962545206225ad7ccc","sha512":"e574bc6666e13214f891dc5c96cf9932b9b65fa3e1d382813e0876c9ae1f5cb9838f1bd4bb2aa6097d6ac62b39a8544424e3393d57e7ffe0daf31c97a5a0778d","ssdeep":"768:/S8S2XuKTeA/lyujtCrPjCa7AbCGRCbpISN34EtlGIs2gFZmrm0ZrdzS8HUVdnJa:6ay0H6rAvKi8tkJaTEcX","tlshash":"df03b58db1e1f0a24a97a0b4813f210ff23b6895a81d9440f766e4d17cba99f5073f6d","first_seen":"2026-08-10T07:23:56.280374Z","last_seen":"2026-08-11T08:17:49.497636Z","times_seen":20,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":62,"receive":4,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/0f0e0dd0e1dccca7.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.984Z","timestamp":1786372615984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306089/0f0e0dd0e1dccca7.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 131121\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\netag: \"e2457f650bb3a7a8c19e7adf339e8367\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Wed, 09 Aug 2056 21:08:45 GMT\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Fri, 07 Aug 2026 15:39:41 GMT\r\ncontent-encoding: br\r\nx-strm-log-split: 4\r\nx-request-id: 8509e0cb998381d8\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":679980,"size_decoded":132017,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"3f77e93a6078fc2019695251632467b5","sha1":"dc9ea4ae18ddc90d639b602a312ae03a83514a74","sha256":"fada6817e538bea4c9dcbc3b85e3596cb3ad2450bf07ccd371618f48de6c519c","sha512":"657948bea7ab9a9507ba3b385462dfb3c6a984c0c0dd5fb32d10ed1641ce00f6220ae455baccf9475c5a50dc8f8026954a4f94f77d59f00ae340b932334f7429","ssdeep":"12288:KX0UtnhBcnzBUJg2/kvxAtTjcFk/jl+G39Kvogpv7+3:KX0ULJg2/kvxAtncFk/jl+G39Kvogpvw","tlshash":"f7e4d88af5e1b06142e7a0f9803f150ff23a7a15550980a4f62ae8e57eb858f5137f3d","first_seen":"2026-08-10T07:23:56.282463Z","last_seen":"2026-08-11T08:17:49.490873Z","times_seen":18,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":31,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/93d08bce4a4cdfab.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.443Z","timestamp":1786372616443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306089/93d08bce4a4cdfab.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 10678\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nexpires: Wed, 09 Aug 2056 21:09:40 GMT\r\netag: \"b06f0a5fc670e4e81bf9d060e5996c79\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=946708560\r\nlast-modified: Fri, 07 Aug 2026 15:39:41 GMT\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 8\r\nx-request-id: d9f6fbd16a9063b8\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38742,"size_decoded":11573,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38695)","md5":"d1531c194c84938fd640bbf59bb343e3","sha1":"ec3c28c41b05f7223aa6c1eebbc0f4c8c6426e7d","sha256":"86e1d97e5a157aa1b1730d2dfd97c4b660c1232b69c1dd291df689fe74bd723e","sha512":"bf2170edb4d607ff9fef9e4b65b742e1c2a8091bc0059d9f467b6cedd86faa329c6b3633de61471aa4e5be4b2a35814773811c8a17444564bc739222899561ce","ssdeep":"768:68xL2igtTWmD1qCtD1WCAGOVD1yCmaC/QxFWCC5sf9pxl61:68d2igtamvrOV0XQHK1","tlshash":"bd03089876e5f4b042a394b5403f250be3357f1a801ca080f226dae46df9a9f5272f6d","first_seen":"2026-08-10T14:37:27.341206Z","last_seen":"2026-08-10T14:37:27.341206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"log.strm.yandex.ru/log?VAS=1306089\u0026event=PrioritiseMediaFiles","fqdn":"log.strm.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.251.15","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.672Z","timestamp":1786372616672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"log.strm.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 03 May 2026 21:12:36 GMT","end":"Wed, 30 Sep 2026 20:59:59 GMT"},"fingerprint":{"sha1":"B0:81:9D:61:0F:86:27:10:19:4E:0F:20:B9:E5:29:FE:F3:71:5E:95","sha256":"86:14:F8:E3:BB:72:0F:F3:83:19:5F:4A:EA:38:F4:5A:51:18:9F:73:79:81:E2:BC:E2:3F:F8:1D:57:CF:DC:C1"}}},"request":{"raw":"POST /log?VAS=1306089\u0026event=PrioritiseMediaFiles HTTP/1.1\r\nHost: log.strm.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3232\r\nSec-Fetch-Storage-Access: none\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nCookie: pu=9071580301786372615; pi=RwF9xa6HAL71DoIrQqFjAXYm6j/W8YnJJNMC6FrbM7zE0fN3Yfe+KmsnbI6c+fstn6L7kneCzP8vs7+9ncBxpgTazGM=; i=klVH54n5DNEeGNBRgLnA9CcS7JJOlw/4k/OR/AXz6dCkQEFFwA+Dw/lqRNVlNwmmwOuXuGxKecWfNdN+VDNsD/l7wXg=; yandexuid=9124865301786372615; yashr=2089536251786372615; bh=YIfE59MGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; yuidss=9124865301786372615\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3232,"data":"{\"vsid\":\"1196814d0dfc98e4b82368d8aa6080b0e59bb99ba4baxVASx6089x1786372616\",\"pcodeVersion\":\"1306089\",\"bundleName\":\"AdLoader\",\"iCookie\":\"MwxCXG4DE1VoWwiLEePVo3GeSuHY88G/AGBmJwmH+PwAZaB/dDVXtcYe2wqrE6KdkPCVaEyRZXc8oWm5Va3MzHEV+fU=\",\"testIds\":[1387855,1471934,1534007,1654557,1645834,1646924,1638659,1584245,1642965,1636708,1541073,1648370,1647163,1637026,1653544,1648703,1513550,1648193],\"slots\":\"1387855,0,8;1471934,0,56;1534007,0,1;1654557,0,8;1645834,0,10;1646924,0,17;1638659,0,68;1584245,0,35;1642965,0,1;1636708,0,78;1541073,0,24;1648370,0,79;1647163,0,48;1637026,0,65;1653544,0,7;1648703,0,11;1513550,0,50;1648193,0,37\",\"rnd\":0.30861732654699203,\"pcodeStats\":{\"format\":\"constructor\",\"version\":1306089,\"actualFormat\":8,\"hitLogId\":\"4588939811768318286\",\"pageId\":\"17817361\",\"impId\":\"2\"},\"service\":\"VAS\",\"values\":{\"timeSpent\":2},\"sensors\":{\"initiator\":\"AdPodViewer\",\"method\":\"videoPixelRatio\",\"type\":\"webm\",\"codec\":\"vp9\"},\"timestamp\":1786372616670,\"eventType\":\"values\",\"eventName\":\"PrioritiseMediaFiles\",\"data\":{\"adBreak\":{\"adType\":\"preroll\",\"adTagURI\":\"\",\"impId\":0,\"sessionId\":\"\",\"bufferEmptyLimit\":10,\"bufferFullTimeout\":10000,\"videoTimeout\":10000,\"vpaidTimeout\":10000},\"adPodId\":\"a34sdf;1138388438;0;6fedd307ac27a002;4588939812079221070;0;17817361;2;0\",\"initiator\":\"AdPodViewer\",\"input\":{\"container\":{\"width\":394.6666564941406,\"height\":267.1666564941406},\"desiredBitrate\":-1,\"isVideoADB\":false,\"bitratePriorityFactor\":0.000001,\"mediaFileTypePriorities\":{\"dash\":0,\"webm\":1,\"mp4\":2,\"unknown\":3,\"unset\":4,\"hls\":10000},\"mediaCodecPriorities\":{\"vp8\":2,\"vp9\":1,\"other\":2},\"perfectVpr\":1.3,\"dpr\":1},\"output\":{\"invalidMediaFiles\":[],\"notPlayableMediaFiles\":[{\"mediaFile\":{\"type\":\"application/vnd.apple.mpegurl\",\"url\":\"https://strm.yandex.ru/vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/hls/master_25.m3u8\",\"vmafAvg\":96.45244598,\"hasAudio\":false},\"reason\":\"cannotPlay\"},{\"mediaFile\":{\"type\":\"application/dash+xml\",\"url\":\"https://strm.yandex.ru/vod/vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/kaltura/desc_3b2ebd86e2aace87fcd25012b69023b6/vrwDdybvMrxI/manifest.mpd\",\"vmafAvg\":96.45244598,\"hasAudio\":false},\"reason\":\"cannotPlay\"}],\"mediaFile\":{\"type\":\"video/webm\",\"codec\":\"vp09.00.20.08.00.01.01.01.00\",\"url\":\"https://strm.yandex.ru/vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/webm/VP9_426_240_400.webm\",\"width\":426,\"height\":240,\"bitrate\":213,\"vmafAvg\":73.06915283,\"hasAudio\":false,\"videoPixelRatio\":1.0793919197131987,\"videoPixelRatioReason\":\"normal\",\"videoPixelRatioSolution\":0.22060808028680134,\"mediaFileTypePrioritySolution\":1,\"mediaCodecPrioritySolution\":1,\"adbCompatibilitySolution\":0,\"prioritySolution\":2.2206080802868016},\"methodType\":\"videoPixelRatio\"}},\"version\":\"1306089\",\"location\":\"http://slon-7---at.ru/\",\"topLocation\":\"http://slon-7---at.ru/\",\"topAncestor\":\"http://slon-7---at.ru\",\"ancestorOrigins\":[],\"documentIsVisible\":true,\"referrer\":\"\",\"topReferrer\":\"\",\"currentScriptSrc\":\"https://yastatic.net/partner-code-bundles/1306089/vas-bundles/bundles-es2017/loader.bundle.js\",\"secureIFrame\":false,\"isVideoADB\":false,\"topDocumentFocus\":false,\"pcodeActiveTestIds\":[\"1648193,0,37\",\"1642965,0,1\"]}"}},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 0\r\nx-trace-id: 00000000000000000000000000000000\r\naccess-control-allow-origin: http://slon-7---at.ru\r\naccess-control-expose-headers: Date\r\ntiming-allow-origin: http://slon-7---at.ru\r\ndate: Mon, 10 Aug 2026 14:36:57 GMT\r\naccess-control-allow-credentials: true\r\nx-request-id: 1786372617389205-10018483270935700441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":4509,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":3,"connect":42,"send":0,"wait":52,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/manifest.js","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:54.264Z","timestamp":1786372614264,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /manifest.js HTTP/1.1\r\nHost: slon-7---at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 10 Aug 2026 14:36:55 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: W/\"6a02aafa-10b6\"\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: 88b9cb134f7661fac5c023d57fc8390d\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4278,"size_decoded":2547,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4278), with no line terminators","md5":"d276783c3eff75365ec2af2eb275b4dc","sha1":"13be1a62346242bc92b7b2d61cbfc54556d69505","sha256":"c1e2076faa42b9dabb88ded60783c45dca8163ecc05cb63b375275b67bb82edb","sha512":"21f9b5025cf0f942c04f315a01dfad3148e525328e8162ef6256f234085f43cf7f627efd0aeedc241ff7e45efaad4ecd041d8fbfbe62a36d475789eed85a3d87","ssdeep":"96:9s2RDpVjtVzQuHLn6h7u1ixk8LDk1y7VAU20Jc8De+/:9Dp7Vrrn6h7u187VbMa","tlshash":"8c91b7ba2354e5bb269009d05a2ed197fa157037252b94f0ab1bdc76f87cec08466b70","first_seen":"2024-10-13T12:37:54.659345Z","last_seen":"2026-08-11T20:54:01.891846Z","times_seen":2758,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/head-scripts.js","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:54.265Z","timestamp":1786372614265,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /head-scripts.js HTTP/1.1\r\nHost: slon-7---at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 10 Aug 2026 14:36:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 19126\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-4ab6\"\r\nContent-Encoding: gzip\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: ef9c57b355ec324a170aa0d64405ace5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":85185,"size_decoded":19492,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1406)","md5":"8e2d9b76e9458363d6f965e0f4270960","sha1":"cf4eda3788fc9b76ab694233838018075713e1a6","sha256":"951819b4acc883fa5e8e3bf3ade8bf32e79bc7895de07f2665097b8c15ccb748","sha512":"37a79eeb3bc0b14c36e2ef6e836a37a511141c2265076c8f51f15477e166995c0462c1f1c610ac31980f1d1d89abc460a80fecbb3066a6e221ac4019a0b84870","ssdeep":"768:hZgOQuhhf/wNvdVnR4I/6rorELrKN260RJB9:X3l9/wlRCMUrp","tlshash":"be839344faf0aea51679a111b36bc4c3f967425090e3841466cef9e4ec6f53e71a3b2c","first_seen":"2024-10-13T12:37:54.663849Z","last_seen":"2026-08-11T20:54:01.888491Z","times_seen":2747,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":619,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.reg.ru/fonts/inter/Inter-SemiBold.woff2","fqdn":"files.reg.ru","domain":"reg.ru","tld":"ru"},"ip":{"addr":"194.67.72.33","port":443,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.156Z","timestamp":1786372615156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.reg.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 24 Mar 2026 10:56:31 GMT","end":"Fri, 09 Oct 2026 10:56:31 GMT"},"fingerprint":{"sha1":"DB:56:E3:C0:A3:22:98:B6:7A:BB:9D:E2:65:D1:38:1D:AF:24:B5:8C","sha256":"F2:E9:10:F2:BF:5E:6B:A8:94:03:EC:C0:5A:56:25:D8:41:55:BF:82:DA:87:DE:A9:24:F0:8C:68:B6:ED:A5:99"}}},"request":{"raw":"GET /fonts/inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: files.reg.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:55 GMT\r\ncontent-length: 105804\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: http://slon-7---at.ru\r\naccess-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"007ad31a53f4ab3f58ee74f2308482ce\"\r\nlast-modified: Tue, 25 Oct 2022 11:42:32 GMT\r\nvary: Accept-Encoding, Origin\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1666084006\r\nx-request-id: e4031b99c5b151d9743201fe5b559801\r\nexpires: Sun, 01 Aug 2027 14:36:55 GMT\r\ncache-control: max-age=30758400\r\nContent-Type: font/woff2,font/woff2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105804,"size_decoded":106691,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105804, version 1.0","md5":"007ad31a53f4ab3f58ee74f2308482ce","sha1":"dfa9f8f3d79bf8a0001fe72eeadad0490cba59cc","sha256":"152261291c938aa5aad6a56d52b47ffcb893d1c0387e76d7f270a7382ff786d5","sha512":"48aef263aca876ba4db5a596fbb8332524d6b440a8a516e1baa7899f2f1da0e1c44452d0380869ec455d27a6e0b931210b1fb669b36e36914ca27235f34e8558","ssdeep":"3072:wo/8sikhizn8CQRxZ9UXsfH0K1yjewt8G5VYqLS8b:a5z3iHCAHjaJtZ5dLS8b","tlshash":"6fa312cab961eaecd2b1d42806545efaacf3eff0c1e315225697014898accd35ed4f84","first_seen":"2023-04-12T20:55:47Z","last_seen":"2026-08-12T11:44:50.472972Z","times_seen":20420,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":1,"connect":43,"send":0,"wait":52,"receive":129,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.974Z","timestamp":1786372615974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-033ae686.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3886\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 26 May 2026 15:44:21 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Wed, 09 Aug 2056 21:06:51 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: public, max-age=946708560\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\netag: \"556781190b14c63983c333fb72e695d7\"\r\nx-strm-log-split: 6\r\nx-request-id: 89805a224842e081\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9232,"size_decoded":4780,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9202)","md5":"8e28de8572712134d1bc4a77e52bafe5","sha1":"dea7f17d1a27bb63cb09902e4e21ad59809f2480","sha256":"4cb8e701d93fbf469464d6711bf8aec61ea16595a804ee56d926e999ae12920a","sha512":"0699663a24d534849484ec03b3f2cebf8ea5dd856d9c0760de18332920aa940d097ac8edf246fe153ac91cd1d9c06c9ca04994f654f39a7297032d3847dcef74","ssdeep":"192:iHFHNNSZkrXmgldEq88LX15yvOYq7YLYIP3qt4MV+9XE:iHFn8CX+q8Y1yqcsLWMQ9XE","tlshash":"8a12d9f932a1b8c012f669c1085f557b01ba7e07b90e255b472659927d240ce60f2fef","first_seen":"2026-05-27T08:51:43.706545Z","last_seen":"2026-08-12T11:18:05.595142Z","times_seen":2950,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":62,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strm.yandex.ru/vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/webm/VP9_426_240_400.webm?vsid=1196814d0dfc98e4b82368d8aa6080b0e59bb99ba4baxVASx6089x1786372616","fqdn":"strm.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.254.45","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.687Z","timestamp":1786372616687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.strm.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 17 Jul 2026 12:44:35 GMT","end":"Thu, 14 Jan 2027 20:59:59 GMT"},"fingerprint":{"sha1":"0A:CB:0C:0A:00:43:91:42:C9:47:FB:3B:7F:2D:CE:6E:1E:E1:E2:83","sha256":"D1:AA:E1:0E:9E:8D:0A:73:86:F6:E3:6D:2E:69:72:C8:2A:64:BA:A6:77:31:5D:F5:5B:EC:70:B7:31:58:C0:AD"}}},"request":{"raw":"GET /vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/webm/VP9_426_240_400.webm?vsid=1196814d0dfc98e4b82368d8aa6080b0e59bb99ba4baxVASx6089x1786372616 HTTP/1.1\r\nHost: strm.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nCookie: pu=9071580301786372615; pi=RwF9xa6HAL71DoIrQqFjAXYm6j/W8YnJJNMC6FrbM7zE0fN3Yfe+KmsnbI6c+fstn6L7kneCzP8vs7+9ncBxpgTazGM=; i=klVH54n5DNEeGNBRgLnA9CcS7JJOlw/4k/OR/AXz6dCkQEFFwA+Dw/lqRNVlNwmmwOuXuGxKecWfNdN+VDNsD/l7wXg=; yandexuid=9124865301786372615; yashr=2089536251786372615; bh=YIfE59MGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; yuidss=9124865301786372615\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-length: 0\r\nlocation: https://strm-fra-03.strm.yandex.net/vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/webm/VP9_426_240_400.webm?vsid=1196814d0dfc98e4b82368d8aa6080b0e59bb99ba4baxVASx6089x1786372616\u0026noredir=1\u0026lid=293\r\nx-plg: host=strm-plgo-production-133.sas.yp-c.yandex.net; version=20377449\r\nx_h: strm-anycast-ru-net-production-63.sas.yp-c.yandex.net\r\nx-trace-id: 00000000000000000000000000000000\r\nx-strm-request-id: 439cb1bbfddec1f7\r\nx-request-id: 439cb1bbfddec1f7\r\nx-strm-log-split: 1\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 1200, \"include_subdomains\": true, \"endpoints\": [ {\"url\": \"https://dr.yandex.net/strm\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/strm\", \"priority\": 2} ]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 1200, \"success_fraction\": 0.005, \"failure_fraction\": 0.05, \"include_subdomains\": true}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Range, X-Client-Timestamp, X-Strm-Session\r\naccess-control-expose-headers: Age, Date, Content-Range, X-Strm-Session, X-Estimated-RTT, X-Estimated-Bandwidth, X-Connection-ID, X-Server-Time-Ms, X-Plg-URL\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/webm","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":2,"connect":46,"send":0,"wait":53,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T14:36:50.883Z","timestamp":1786372610883,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: slon-7---at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T11:40:50.230242Z","times_seen":17854559,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T14:36:53.732Z","timestamp":1786372613732,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: slon-7---at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 10 Aug 2026 14:36:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\nX-Request-Id: cedb61b6dd000113e981a24f358b98bf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10444,"size_decoded":3980,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5871)","md5":"ae575c612b0f5e0172ae73023c582a52","sha1":"0c064b892ccee1e9db3fa57e684ddfebdd5e2e0b","sha256":"eef6fe7eaf7ef7a354925eb71233a3c4987aa31371b9561f9bd082587dd1bfc5","sha512":"d215cb4ca0ae7b197886f4170ceed6f801d16514b527049cd71b473d1f1937cd79f8b20a844d9ece2ccb1b63a80d3d6998f3e2e16d94eddc364f97445909b242","ssdeep":"192:bg8o86VTVKVC/N7Ua2qUNgbFcuATD+/kF2erCyL5TV9qE:bob9sm7Ulq+3DlDr/Zz","tlshash":"662264514456b07f0a037bf9e23ebf4874dd00e9de869900faec105937d1ea1da6ab29","first_seen":"2026-08-10T14:37:27.349714Z","last_seen":"2026-08-10T14:37:27.349714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.978Z","timestamp":1786372615978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://slon-7---at.ru/\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-nginx-request-id: 5ef49bda92fd3fde\r\nexpires: Tue, 10 Aug 2027 20:18:16 GMT\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31556952\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nvary: Accept-Encoding\r\nx-strm-log-split: 1\r\nx-request-id: 3a19b1cc6c885bd8\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26004,"size_decoded":26903,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-08-12T11:18:05.645025Z","times_seen":29140,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":16,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strm-fra-03.strm.yandex.net/vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/webm/VP9_426_240_400.webm?vsid=1196814d0dfc98e4b82368d8aa6080b0e59bb99ba4baxVASx6089x1786372616\u0026noredir=1\u0026lid=293","fqdn":"strm-fra-03.strm.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"5.45.200.102","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.844Z","timestamp":1786372616844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.strm.yandex.net","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 17 Jul 2026 12:44:35 GMT","end":"Thu, 14 Jan 2027 20:59:59 GMT"},"fingerprint":{"sha1":"0A:CB:0C:0A:00:43:91:42:C9:47:FB:3B:7F:2D:CE:6E:1E:E1:E2:83","sha256":"D1:AA:E1:0E:9E:8D:0A:73:86:F6:E3:6D:2E:69:72:C8:2A:64:BA:A6:77:31:5D:F5:5B:EC:70:B7:31:58:C0:AD"}}},"request":{"raw":"GET /vh-canvas-converted/vod-content/2875798844408616965/87cff4d1-3232-4ce6-82fa-64e3bee17d23/webm/VP9_426_240_400.webm?vsid=1196814d0dfc98e4b82368d8aa6080b0e59bb99ba4baxVASx6089x1786372616\u0026noredir=1\u0026lid=293 HTTP/1.1\r\nHost: strm-fra-03.strm.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nRange: bytes=0-\r\nReferer: http://slon-7---at.ru/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: video/webm\r\ncontent-length: 133454\r\netag: \"169ae00dbff37076b03f54f66d9061c0\"\r\nlast-modified: Wed, 02 Jul 2025 15:01:13 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 5\r\nx_h: strm-fra-03.strm.yandex.net\r\nx-strm-request-id: 4d7cd0e1de79ae33\r\nx-request-id: 4d7cd0e1de79ae33\r\nexpires: Mon, 10 Aug 2026 14:41:56 GMT\r\ncache-control: max-age=300\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 1200, \"include_subdomains\": true, \"endpoints\": [ {\"url\": \"https://dr.yandex.net/strm\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/strm\", \"priority\": 2} ]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 1200, \"success_fraction\": 0.005, \"failure_fraction\": 0.05, \"include_subdomains\": true}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Range, X-Client-Timestamp, X-Strm-Session\r\naccess-control-expose-headers: Age, Date, Content-Range, X-Strm-Session, X-Estimated-RTT, X-Estimated-Bandwidth, X-Connection-ID, X-Server-Time-Ms, X-Plg-URL\r\nx-connection-id: 597130155\r\nx-server-time-ms: 1786372616959\r\ncontent-range: bytes 0-133453/133454\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133454,"size_decoded":134681,"mime_type":"video/webm","magic":"WebM","md5":"169ae00dbff37076b03f54f66d9061c0","sha1":"fb1436a49dd2436d914be9c2a8d2deea8ae303b9","sha256":"de9e127016c2a21f4c78ff4ee583ceecba119c117f122f1347c8349c19b34c77","sha512":"f729817f6e8d670383552dc132fc15ca7f7378ef356b6747afe769ecef5ca4d1591eb0a926507f3922146ed1e283b21007bc535dfd122a0b873ac39901346686","ssdeep":"3072:2uKONuFbpRI3+rcge44ducXx6E9hKBP3UE/6WIGUZIM:KhNRbtqcE9YPkKzUj","tlshash":"4fd312e6e66027a0deef197cfbb6580e6b81d8c6708610c3252eed0bd9bcad4455090f","first_seen":"2026-01-12T15:47:15.654231Z","last_seen":"2026-08-10T14:37:27.353768Z","times_seen":11,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":4,"connect":40,"send":0,"wait":45,"receive":84,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/02b361cada0c0ea9.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.982Z","timestamp":1786372615982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306089/02b361cada0c0ea9.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 28092\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=946708560\r\nlast-modified: Fri, 07 Aug 2026 15:39:41 GMT\r\naccess-control-allow-origin: *\r\netag: \"c4ae8400ca88c650134dd34db990dfd9\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Wed, 09 Aug 2056 21:08:45 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-strm-log-split: 6\r\nx-request-id: 500adeef41e7eb8c\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305380,"size_decoded":28987,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"22a0e65a028be39bf6747dc7c95c4105","sha1":"cf2e4b1484075fefe126790336a2907449179d36","sha256":"3bbec80d4e5220abc8f2b242fc73f6096a87673628093fdb0221dad3d4e80af9","sha512":"8a23c94d0334d670e32ecdfb94cb713a220f75533565102d75a625220f86b3cae57f4c75640e9daecd12b580351652495f8c9ddd3999ebc0e1c090c2618b1781","ssdeep":"1536:q21aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:gN1dfXIQkN+nF/JH9zf6","tlshash":"985475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","first_seen":"2026-08-10T07:23:56.30664Z","last_seen":"2026-08-11T08:17:49.50265Z","times_seen":19,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"slon-7---at.ru/parking-rdap-auto.css","fqdn":"slon-7---at.ru","domain":"slon-7---at.ru","tld":"ru"},"ip":{"addr":"95.163.244.138","port":80,"asn":197695,"as":"Domain names registrar REG.RU, Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:54.262Z","timestamp":1786372614262,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /parking-rdap-auto.css HTTP/1.1\r\nHost: slon-7---at.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Mon, 10 Aug 2026 14:36:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 18958\r\nConnection: keep-alive\r\nLast-Modified: Tue, 12 May 2026 04:22:18 GMT\r\nETag: \"6a02aafa-4a0e\"\r\nContent-Encoding: gzip\r\nExpires: Wed, 13 May 2026 04:22:18 GMT\r\nCache-Control: no-cache\r\nX-Request-Id: 882cd7bcb3859fd104874a8ad46942c1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":183441,"size_decoded":19310,"mime_type":"text/css","magic":"ASCII text, with very long lines (25481)","md5":"f02aa05f29aa86a85baefe0cb2fdd9f5","sha1":"227423a46928013d510160fcf52b527e93b324bc","sha256":"0e92a5c32b01644c566f05118a9d8053901ae650b4af9bed013603ee91825639","sha512":"0b1053931ad3a31c4ced22c432a538c32559d3ea4550ca05955e5cb9127235492ab8489598fe11160c6c9bd673ce81a5981c0ea7097971801cca434c6f7698f3","ssdeep":"384:Hq+8EpHAsL5pCAJLcmoQQ/rtYtmvIX99tB5DlQMCVghifjVmxRkCOd8SwbbjWfVQ:K+Ec+4gibU4bH3lKhd4","tlshash":"62049c064b700c3bd21f1da9d5e7d8c2fb462aa2a2fdc58ffd02f726d15e248672550a","first_seen":"2025-12-01T21:25:25.692819Z","last_seen":"2026-08-10T14:37:27.35631Z","times_seen":720,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306089/3b72aaed0bb98346.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:55.976Z","timestamp":1786372615976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306089/3b72aaed0bb98346.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: http://slon-7---at.ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1765\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nexpires: Wed, 09 Aug 2056 20:38:44 GMT\r\nlast-modified: Fri, 07 Aug 2026 15:39:41 GMT\r\naccess-control-allow-origin: *\r\netag: \"f69d1c8be9725391e45df2e7dcbb67d6\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 4\r\nx-request-id: 462e2bd5043a015f\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4158,"size_decoded":2659,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4119)","md5":"a0eeef18e84dc0d8b5096541da14259b","sha1":"1f3799d0547d24977f4646f96059e6643daf1c65","sha256":"47ad62583e5290bb59b6eb4f5ab40e100760bafe22fc4a61ac1ac9d7b7dd8e91","sha512":"bf95b34efdf5e612d0300d16f008cf5c1656ee393942996052bf509c755afed6471b2f774d01a22406ccc34d4d764d782d579aa2c65e5dfa3f0cb2553aa6974a","ssdeep":"96:uHjwRO8i2b4XfmP5IWiwYVdFecX65V8i92PbxCSmaXmpwXTqTv1J0a2q2:uHjC+27P5IJwYtXHJZQwQv1JzL2","tlshash":"4f8118fc3680337693c216d490bb9206b53a0d21980a71a2f05d94517eb4fa760fff5e","first_seen":"2026-08-10T07:23:56.304901Z","last_seen":"2026-08-11T08:17:49.485131Z","times_seen":18,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":14,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/meta/17817361?target-ref=http%3A%2F%2Fslon-7---at.ru%2F\u0026pcode-version=1306089\u0026pcodever=1306089\u0026comboblock-unencoded-vast=1\u0026ad-session-id=2098341786372616011\u0026target-id=88712433\u0026pcode-test-ids=1387855%2C0%2C8%3B1471934%2C0%2C56%3B1534007%2C0%2C1%3B1654557%2C0%2C8%3B1645834%2C0%2C10%3B1646924%2C0%2C17%3B1638659%2C0%2C68%3B1584245%2C0%2C35%3B1642965%2C0%2C1%3B1636708%2C0%2C78%3B1541073%2C0%2C24%3B1648370%2C0%2C79%3B1647163%2C0%2C48%3B1637026%2C0%2C65%3B1653544%2C0%2C7%3B1648703%2C0%2C11%3B1513550%2C0%2C50%3B1648193%2C0%2C37\u0026pcode-uid=9071580301786372615\u0026pcode-flags-map=eJzNWGtzozgW%2FS1Lz1Yl0yHN%2B5EvLhmErQpGjAROMnFaRdskoYPBhXEyTjv%2FfUvgpGMnbXfPbG2tPxgQukfnPnXFN%2BEC0JBGoOvDISTCyeU34T7JF6lwIsjHtiIdy5qp2cKRUKfzGk34sKFrpiQLT1dHwhBQ1gqzISQU4WATQZVkwzI2pFXN1HSrkXYRbURdSCOCLxg8jyAJgM8cAkGEhpABl8UUEub4mEIGhzCINhZI%2F5ptgGuarZi68HS0Z4rywp5AB%2FhO7IMIMgL%2FiCGN2ABGfewyDxN2RkAYQsJi4u9eWJd0TW9QgesyNAA9yHrA9yG5YChgAYwJ5oqiXrAbyJJtSXsGQkGP8UuEMLdLCAgYwAgS2pBzEY0I6sbRtt3fghq2be02C5%2FSrguDxishgV3kMjdG7k5wXbJsu1U9ppBRbsQgQsBnPgYudyHnSk9RyCJ8Cncz1WVVtaQX73hcX8ZdELhsiFyIGfVxxCLMXDzYjaRqsmq90IoA6cGIEei1pvNZ6GAX7ocwd0AMAd0PYDQAPRhAAnxGIwIi2LtgZyjqMxwCB0UXGyDXSZ5%2FScZ3rCzy5SacJsuy3cB56JydocDFZyzAOOTgu5loumm0Ue9D4HqYDCgbAh%2B5PPDDPg72mELTeRlow9LD5wy4IIx%2BIjF0w7D1tliEgFDYmp2hwMMMBRFeZ4aDAw%2F12FDbAKuT6iatN%2FFM016nb4tH%2BwQFp4wbhKI%2FIaM4Js4eZb5jgDjCoQ8cOIBBxFAwxKeQAT9iDvD9LnBOdwNZuvIq9Hl0dHEcNGnr%2BIhDEuhETbjwlyEme3PVkDTLtF4n4iZHBzh9yJw%2B3MPNkFVN1l4yaY3lAtpv6HjIH2Dq4JAnOj6%2F2INla3ablSjg5cchmJe2piD5Pjhn0POgs7s2G4phqvY7VndwEPFrwAPDhRF09htJlS2zVc6LfZ86BMKAUUpYHwJ3Ty4Yqmwb1otl%2BAa4ri0w6KEA8gcA9kAoqtIahAIPtmXqnR3QsjelDNtoc4EOAInYHzGMYVsm6UXgMALPAHHh7nprqKYpG9uORYAyNAgJpJwDGyLAq1NDbDeaJsu62qB1%2FRj6PJe4exiBwbYhL7%2BNhLwcJ3VWFiPhZCR8vq3r2fxkNBqNPjV%2FDw8P%2FHo8q5L7SdLcVovmzUHnpEgf5s39YefgMhEfrz4etq%2F4%2F%2BTjodiMSqItPr%2FpHHQa8M7l5w9Xvx%2Fyxw%2FHvx92fhsJRyPhS16O7xoeRASirEmKbKmaqJgjvtPto5rfPG7wS6o6G%2BfpirNc81rT%2Bfff4yOplq2opqhoP8Xn2XQ32Xya1mn5mtyL5ZJF3bz4dFfeTBJxVlaJOE2LZVKLVfqYFQuxSMTHbFp8XXxd%2FDJlXuQVS5Ql47%2FHeF6Os7ReNveqoki6WCRVOSmWqTirsmlaLzllVRKz5aJYJuI0KRbLvBQzcZ7cp3m2%2FF9pUSXTL3labcXspJyuZlXZun8dD0y8%2BvgiP%2FkoXn7%2B1PmwHuLMLjsfrhpyb9aaj7MfrXWTTB5vnw2lG7JpqKou3iV35VJMiklVZhPxbjHLavF%2Bms7rUizK%2B%2FKmFLPZbVmkomymoiEuJsn4tljeivdJlSVFXd7%2FetiammnZiiH%2BXNQ%2B%2B%2Fk9lX7VXP%2BczUHnX9dZkRTj9EecHpP5bVYnbRlq%2FDuuy2p1nUyzfLlaC6%2FusqJc5dl1upqPs9V8Vlb1qq54PK4e0vQuLSaH%2Fz9Kp8%2BF9i2ZaTrJkmfLHHROkkV9W1arOrk5XIfEp9Vvh4fbnP822autrUWxrHXr1zR9u0%2BKhmS9OWfqkvG6E6IRgWCw3qzPYBdTRZItNlT3deGS1LbxkFIYOJANcBf5kHmU9fZs9Lqm6%2BYrHVzKHIxP0eauOq7zLdV1S9U2d9V3Dn%2FXyX02Lgs2rpMtccNWWnFKQ4YHyGUe8CnkXeW%2Bvk%2B1DN3%2B3qvxc2MfhCEKIKWMxmQILxhythusafk12%2BptNUX73tsCN4oDyNrOjzl9gAIU9Pa0Fopt6K%2F956Hv3V4fol4%2FYjhgF4A5gOCYQn%2B3UVXDlNq%2BjYDAxQMGKIURO2uRgL9bXNdkyVR%2FKD4EfrzhVF3ivx8gPAeSj2i0bYe3wWCppvRO4wu663PPa%2FFvwv1NnU3T%2BXG14E%2BzZJmXyYTfXqfpBDR3TQ426G0O2pZhWaLCj%2FjCtPyS5amXl2W1c7LxavIiz%2BfjKk2LHfM1Pn%2BSzu%2FqcvZTAqrw9HQkOOV0tqjTiZel%2BWTOp8O%2Fxvlikk66XGwunFxuiglHG8%2F61rMsbw8Y2wPm9oC2PaALV0%2Bc3GsnmbLR%2BrY9kTYHXP4NygcXOI4Yhf47B5O3MWpKirERIi6kpxEOmedjTBhwd8vrqq5p78SKhwiNWNfHzinro15%2FqzV%2FJ%2BZMqVXHpWH79QV7HoWbZ7TrL0yXtj%2FA6HobrAQO8BDyr3KEZ2gYxYTXAbpvYdnmCz%2F9B7lkFJE%3D\u0026pcode-active-testids=1648193%2C0%2C37\u0026pcode-icookie=MwxCXG4DE1VoWwiLEePVo3GeSuHY88G%2FAGBmJwmH%2BPwAZaB%2FdDVXtcYe2wqrE6KdkPCVaEyRZXc8oWm5Va3MzHEV%2BfU%3D\u0026disable-base64=1\u0026imp-id=2\u0026banner-lang=ru\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=134415296495618\u0026tga-with-creatives=1\u0026top-ancestor=http%3A%2F%2Fslon-7---at.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A800%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A240%2C%22top%22%3A1486%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=1892\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKntJAkue8B1EswXnpbvyR8VWyE1C_9-SVcT13nds-g31ZbETYwJX5y57L86_flK5KuC6u_gdepC_sD9IkArkBm2tatSRWnEl74rBsTjYkZZGaQeVFJ7DBSqiRJlylVdmxHidKJ_CADO8uyblO6YpW6tFTqQljuy0jzNOqOAyaVPPO6NMkLsMIm9RKF112yOJBOkxFRIZcqolgqsakKhomrVMlimLqahaCiUGWBb28NOwHpUDcojd24Tdg4eUNpokpyJLQmqMSV6AiCA7IbehMtDToypqozK0VxQHYIMBd6ykpSCVXq_oiPy2BgoSVw6OQ991Mh_VkCR6ny6EAqS5zUjT079gN4hN4EyJiNtc3GGoJ8bYDakD26x8nFtu0HTgbD7Z6XuD9C_3Shy01kRepHvqtwE1iJmwRpwqR3YhATReC7YY9ypDWQtIvhw4hl-upel8mWdNRd6X8DWeLHzrhen_D-qyu5ngQPDGV-2OPg_wD5YyE2YV7xG7viVcK8oZpvUOv9oEWZJtddO07XKCSw9YmuD3ILqHw-kWu68lgaSZF2b_1ktu_pcrGMtkFZJ64TNinCStx4BS7XekkCW2dcTLRju_6VFKHcstQPvZ6uGQL-w2-Zx4_T0FTqUl5rPwzu91w_9DNHLC8loix8tThQyP0fEV7Dgo0b0m0NtQL_LzgVp0HIx4wwKk4xlu2Oeen-EH-Oo5hO6Eb6sJJui93EMdWvAfX4RQ3jsfMq9uOeaCs2vYhLgs8X_fcIK36-EIxaEhwIf26YapzRUN5adhMVJYN-okQLz65EyJgUFD559taS4VOWaDd4GgNn_BJgEwC0EjwnYeOPE9E3wYqVbzZWX7BW_Qgtepa13cLZclFx-OOseBPjGORjaBDeO0GAEjVgr7LnIRQ3MBXnaaPNAVYKo_zCxv1YPmmUu5Zk35kDTohzyo_c5489DkExJs6yStaEJngHVR-4eg107BKhRfTc-LZCqt9EmzRimNDR2DCRxeLQVFgm3caY0bpuEt-x3_vNUB8yRomiYpcZ1atV14hmN04TjWq9_9o3rVwlZySnUPTQFwd_ACxwL-ocrwcm8VTS3cz1xfIoyYJuxzBf-x488QPLlVpChhZECayH9MiiY7eClzsuwKogGFAxKgVNiwp1TJzoBi4qSjHu0JwMNwcFVPKxD4q7OO12IoP_TuoFjOn8YrGvIMzHFlEXw6OwKvRrJ7Tt8ca1BM-cpHGLhOZVLEumsC3FuiryKrQXZG8yxKOWEM1F3XFYZWMPhsRjO3gVu2B1C6m4q-2vcspr1p6f_5gv8fuCQSx_b7rv8idpa_aox_-0SoYxA3nkp2S0WcGvA3YzOyBKMRoGtpR2w4f8YzmW0Cacjx6S8fLuPS3eAG6VecvfC9863BHTvMEQ59ivd4fTFI37hEOQexcuKzm-_WRVrOkapm96Aq2x8xGsKDudmxEAx8-Ic3Hl0NhOQt11jhN9qM9ppOU9-PjLoLUGuzDv5OSgZyNgSEbWE_xJfhH8pnqPKq7-5isZkTHByZkzvG7OmbZPC3cEIMzDH_0LQI8IJbwAEsxAPCSGrUDIpJg86Dm2sj-IM5yTopZYCdbkvBBlHy3KJwaEluu1po_R_7M9dDxqLOVIlQWPJtbuZK6bNotPPakr45WEe2YO1-I-OVPsiVPnDfJAzV3tIipqCjdfpdsxKiq0Q1ewFh1u5r30j7cx66IjDQgp6ioUa_dsyRdyg5PFRPEPL9jUy8ZP7xmO956fha1wtIMcDNCySd1Q0ikqoERE8Jl8UEdcHS0wK0hzgSHX-RMFq4DtLYPa9Twl-FSe0_HHTbx5T2DGxC1_78J2HQdrZWGA7qoXRGDBahcg-oD8\u0026uniformat=true\u0026callback=Ya%5B4851432907361%5D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://slon-7---at.ru/","date":"2026-08-10T14:36:56.121Z","timestamp":1786372616121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/meta/17817361?target-ref=http%3A%2F%2Fslon-7---at.ru%2F\u0026pcode-version=1306089\u0026pcodever=1306089\u0026comboblock-unencoded-vast=1\u0026ad-session-id=2098341786372616011\u0026target-id=88712433\u0026pcode-test-ids=1387855%2C0%2C8%3B1471934%2C0%2C56%3B1534007%2C0%2C1%3B1654557%2C0%2C8%3B1645834%2C0%2C10%3B1646924%2C0%2C17%3B1638659%2C0%2C68%3B1584245%2C0%2C35%3B1642965%2C0%2C1%3B1636708%2C0%2C78%3B1541073%2C0%2C24%3B1648370%2C0%2C79%3B1647163%2C0%2C48%3B1637026%2C0%2C65%3B1653544%2C0%2C7%3B1648703%2C0%2C11%3B1513550%2C0%2C50%3B1648193%2C0%2C37\u0026pcode-uid=9071580301786372615\u0026pcode-flags-map=eJzNWGtzozgW%2FS1Lz1Yl0yHN%2B5EvLhmErQpGjAROMnFaRdskoYPBhXEyTjv%2FfUvgpGMnbXfPbG2tPxgQukfnPnXFN%2BEC0JBGoOvDISTCyeU34T7JF6lwIsjHtiIdy5qp2cKRUKfzGk34sKFrpiQLT1dHwhBQ1gqzISQU4WATQZVkwzI2pFXN1HSrkXYRbURdSCOCLxg8jyAJgM8cAkGEhpABl8UUEub4mEIGhzCINhZI%2F5ptgGuarZi68HS0Z4rywp5AB%2FhO7IMIMgL%2FiCGN2ABGfewyDxN2RkAYQsJi4u9eWJd0TW9QgesyNAA9yHrA9yG5YChgAYwJ5oqiXrAbyJJtSXsGQkGP8UuEMLdLCAgYwAgS2pBzEY0I6sbRtt3fghq2be02C5%2FSrguDxishgV3kMjdG7k5wXbJsu1U9ppBRbsQgQsBnPgYudyHnSk9RyCJ8Cncz1WVVtaQX73hcX8ZdELhsiFyIGfVxxCLMXDzYjaRqsmq90IoA6cGIEei1pvNZ6GAX7ocwd0AMAd0PYDQAPRhAAnxGIwIi2LtgZyjqMxwCB0UXGyDXSZ5%2FScZ3rCzy5SacJsuy3cB56JydocDFZyzAOOTgu5loumm0Ue9D4HqYDCgbAh%2B5PPDDPg72mELTeRlow9LD5wy4IIx%2BIjF0w7D1tliEgFDYmp2hwMMMBRFeZ4aDAw%2F12FDbAKuT6iatN%2FFM016nb4tH%2BwQFp4wbhKI%2FIaM4Js4eZb5jgDjCoQ8cOIBBxFAwxKeQAT9iDvD9LnBOdwNZuvIq9Hl0dHEcNGnr%2BIhDEuhETbjwlyEme3PVkDTLtF4n4iZHBzh9yJw%2B3MPNkFVN1l4yaY3lAtpv6HjIH2Dq4JAnOj6%2F2INla3ablSjg5cchmJe2piD5Pjhn0POgs7s2G4phqvY7VndwEPFrwAPDhRF09htJlS2zVc6LfZ86BMKAUUpYHwJ3Ty4Yqmwb1otl%2BAa4ri0w6KEA8gcA9kAoqtIahAIPtmXqnR3QsjelDNtoc4EOAInYHzGMYVsm6UXgMALPAHHh7nprqKYpG9uORYAyNAgJpJwDGyLAq1NDbDeaJsu62qB1%2FRj6PJe4exiBwbYhL7%2BNhLwcJ3VWFiPhZCR8vq3r2fxkNBqNPjV%2FDw8P%2FHo8q5L7SdLcVovmzUHnpEgf5s39YefgMhEfrz4etq%2F4%2F%2BTjodiMSqItPr%2FpHHQa8M7l5w9Xvx%2Fyxw%2FHvx92fhsJRyPhS16O7xoeRASirEmKbKmaqJgjvtPto5rfPG7wS6o6G%2BfpirNc81rT%2Bfff4yOplq2opqhoP8Xn2XQ32Xya1mn5mtyL5ZJF3bz4dFfeTBJxVlaJOE2LZVKLVfqYFQuxSMTHbFp8XXxd%2FDJlXuQVS5Ql47%2FHeF6Os7ReNveqoki6WCRVOSmWqTirsmlaLzllVRKz5aJYJuI0KRbLvBQzcZ7cp3m2%2FF9pUSXTL3labcXspJyuZlXZun8dD0y8%2BvgiP%2FkoXn7%2B1PmwHuLMLjsfrhpyb9aaj7MfrXWTTB5vnw2lG7JpqKou3iV35VJMiklVZhPxbjHLavF%2Bms7rUizK%2B%2FKmFLPZbVmkomymoiEuJsn4tljeivdJlSVFXd7%2FetiammnZiiH%2BXNQ%2B%2B%2Fk9lX7VXP%2BczUHnX9dZkRTj9EecHpP5bVYnbRlq%2FDuuy2p1nUyzfLlaC6%2FusqJc5dl1upqPs9V8Vlb1qq54PK4e0vQuLSaH%2Fz9Kp8%2BF9i2ZaTrJkmfLHHROkkV9W1arOrk5XIfEp9Vvh4fbnP822autrUWxrHXr1zR9u0%2BKhmS9OWfqkvG6E6IRgWCw3qzPYBdTRZItNlT3deGS1LbxkFIYOJANcBf5kHmU9fZs9Lqm6%2BYrHVzKHIxP0eauOq7zLdV1S9U2d9V3Dn%2FXyX02Lgs2rpMtccNWWnFKQ4YHyGUe8CnkXeW%2Bvk%2B1DN3%2B3qvxc2MfhCEKIKWMxmQILxhythusafk12%2BptNUX73tsCN4oDyNrOjzl9gAIU9Pa0Fopt6K%2F956Hv3V4fol4%2FYjhgF4A5gOCYQn%2B3UVXDlNq%2BjYDAxQMGKIURO2uRgL9bXNdkyVR%2FKD4EfrzhVF3ivx8gPAeSj2i0bYe3wWCppvRO4wu663PPa%2FFvwv1NnU3T%2BXG14E%2BzZJmXyYTfXqfpBDR3TQ426G0O2pZhWaLCj%2FjCtPyS5amXl2W1c7LxavIiz%2BfjKk2LHfM1Pn%2BSzu%2FqcvZTAqrw9HQkOOV0tqjTiZel%2BWTOp8O%2Fxvlikk66XGwunFxuiglHG8%2F61rMsbw8Y2wPm9oC2PaALV0%2Bc3GsnmbLR%2BrY9kTYHXP4NygcXOI4Yhf47B5O3MWpKirERIi6kpxEOmedjTBhwd8vrqq5p78SKhwiNWNfHzinro15%2FqzV%2FJ%2BZMqVXHpWH79QV7HoWbZ7TrL0yXtj%2FA6HobrAQO8BDyr3KEZ2gYxYTXAbpvYdnmCz%2F9B7lkFJE%3D\u0026pcode-active-testids=1648193%2C0%2C37\u0026pcode-icookie=MwxCXG4DE1VoWwiLEePVo3GeSuHY88G%2FAGBmJwmH%2BPwAZaB%2FdDVXtcYe2wqrE6KdkPCVaEyRZXc8oWm5Va3MzHEV%2BfU%3D\u0026disable-base64=1\u0026imp-id=2\u0026banner-lang=ru\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=134415296495618\u0026tga-with-creatives=1\u0026top-ancestor=http%3A%2F%2Fslon-7---at.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A800%2C%22h%22%3A0%2C%22width%22%3A0%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A240%2C%22top%22%3A1486%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=1892\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKntJAkue8B1EswXnpbvyR8VWyE1C_9-SVcT13nds-g31ZbETYwJX5y57L86_flK5KuC6u_gdepC_sD9IkArkBm2tatSRWnEl74rBsTjYkZZGaQeVFJ7DBSqiRJlylVdmxHidKJ_CADO8uyblO6YpW6tFTqQljuy0jzNOqOAyaVPPO6NMkLsMIm9RKF112yOJBOkxFRIZcqolgqsakKhomrVMlimLqahaCiUGWBb28NOwHpUDcojd24Tdg4eUNpokpyJLQmqMSV6AiCA7IbehMtDToypqozK0VxQHYIMBd6ykpSCVXq_oiPy2BgoSVw6OQ991Mh_VkCR6ny6EAqS5zUjT079gN4hN4EyJiNtc3GGoJ8bYDakD26x8nFtu0HTgbD7Z6XuD9C_3Shy01kRepHvqtwE1iJmwRpwqR3YhATReC7YY9ypDWQtIvhw4hl-upel8mWdNRd6X8DWeLHzrhen_D-qyu5ngQPDGV-2OPg_wD5YyE2YV7xG7viVcK8oZpvUOv9oEWZJtddO07XKCSw9YmuD3ILqHw-kWu68lgaSZF2b_1ktu_pcrGMtkFZJ64TNinCStx4BS7XekkCW2dcTLRju_6VFKHcstQPvZ6uGQL-w2-Zx4_T0FTqUl5rPwzu91w_9DNHLC8loix8tThQyP0fEV7Dgo0b0m0NtQL_LzgVp0HIx4wwKk4xlu2Oeen-EH-Oo5hO6Eb6sJJui93EMdWvAfX4RQ3jsfMq9uOeaCs2vYhLgs8X_fcIK36-EIxaEhwIf26YapzRUN5adhMVJYN-okQLz65EyJgUFD559taS4VOWaDd4GgNn_BJgEwC0EjwnYeOPE9E3wYqVbzZWX7BW_Qgtepa13cLZclFx-OOseBPjGORjaBDeO0GAEjVgr7LnIRQ3MBXnaaPNAVYKo_zCxv1YPmmUu5Zk35kDTohzyo_c5489DkExJs6yStaEJngHVR-4eg107BKhRfTc-LZCqt9EmzRimNDR2DCRxeLQVFgm3caY0bpuEt-x3_vNUB8yRomiYpcZ1atV14hmN04TjWq9_9o3rVwlZySnUPTQFwd_ACxwL-ocrwcm8VTS3cz1xfIoyYJuxzBf-x488QPLlVpChhZECayH9MiiY7eClzsuwKogGFAxKgVNiwp1TJzoBi4qSjHu0JwMNwcFVPKxD4q7OO12IoP_TuoFjOn8YrGvIMzHFlEXw6OwKvRrJ7Tt8ca1BM-cpHGLhOZVLEumsC3FuiryKrQXZG8yxKOWEM1F3XFYZWMPhsRjO3gVu2B1C6m4q-2vcspr1p6f_5gv8fuCQSx_b7rv8idpa_aox_-0SoYxA3nkp2S0WcGvA3YzOyBKMRoGtpR2w4f8YzmW0Cacjx6S8fLuPS3eAG6VecvfC9863BHTvMEQ59ivd4fTFI37hEOQexcuKzm-_WRVrOkapm96Aq2x8xGsKDudmxEAx8-Ic3Hl0NhOQt11jhN9qM9ppOU9-PjLoLUGuzDv5OSgZyNgSEbWE_xJfhH8pnqPKq7-5isZkTHByZkzvG7OmbZPC3cEIMzDH_0LQI8IJbwAEsxAPCSGrUDIpJg86Dm2sj-IM5yTopZYCdbkvBBlHy3KJwaEluu1po_R_7M9dDxqLOVIlQWPJtbuZK6bNotPPakr45WEe2YO1-I-OVPsiVPnDfJAzV3tIipqCjdfpdsxKiq0Q1ewFh1u5r30j7cx66IjDQgp6ioUa_dsyRdyg5PFRPEPL9jUy8ZP7xmO956fha1wtIMcDNCySd1Q0ikqoERE8Jl8UEdcHS0wK0hzgSHX-RMFq4DtLYPa9Twl-FSe0_HHTbx5T2DGxC1_78J2HQdrZWGA7qoXRGDBahcg-oD8\u0026uniformat=true\u0026callback=Ya%5B4851432907361%5D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: http://slon-7---at.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://slon-7---at.ru/\r\nCookie: pu=9071580301786372615; pi=RwF9xa6HAL71DoIrQqFjAXYm6j/W8YnJJNMC6FrbM7zE0fN3Yfe+KmsnbI6c+fstn6L7kneCzP8vs7+9ncBxpgTazGM=; i=klVH54n5DNEeGNBRgLnA9CcS7JJOlw/4k/OR/AXz6dCkQEFFwA+Dw/lqRNVlNwmmwOuXuGxKecWfNdN+VDNsD/l7wXg=; yandexuid=9124865301786372615; yashr=2089536251786372615; bh=YIfE59MGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-yandex-req-id: 1786372616323674-13229204498627216703-moxcba4zoybw23ol-BAL\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-xss-protection: 1; mode=block\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-credentials: true\r\ndate: Mon, 10 Aug 2026 14:36:56 GMT\r\npragma: no-cache\r\nuniformat: true\r\nx-content-type-options: nosniff\r\nset-cookie: yuidss=9124865301786372615; domain=yandex.ru; path=/; expires=Thu, 07-Aug-2036 14:36:56 GMT; SameSite=None; Secure\r\naccess-control-allow-origin: http://slon-7---at.ru\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nuniformat-product-type: Direct\r\ncontent-security-policy: upgrade-insecure-requests; default-src 'none'; base-uri 'none'; script-src 'report-sample' 'unsafe-inline' 'self' yandex.ru an.yandex.ru api-maps.yandex.ru mc.yandex.ru yastatic.net pcode.yads.tech *.maps.yandex.net; style-src 'unsafe-inline' yastatic.net; img-src 'self' data: avatars.mds.yandex.net favicon.yandex.net *.captcha.yandex.net yastatic.net *.maps.yandex.net *.yandex.ru avatars.yads.tech; media-src blob: strm.yandex.ru *.strm.yandex.net; font-src yastatic.net; connect-src 'self' blob: abs.yandex.ru an.yandex.ru yandex.ru mc.yandex.ru yastatic.net log.strm.yandex.ru display.yads.tech display-logs.yads.tech; frame-src yandexadexchange.net yandex.ru an.yandex.ru; report-uri https://csp.yandex.net/csp?from=yabs\u0026project=yabs\u0026yandex_login=\u0026platform=, upgrade-insecure-requests; default-src 'none'; base-uri 'none'; script-src 'report-sample' 'unsafe-inline' 'self' yandex.ru an.yandex.ru api-maps.yandex.ru mc.yandex.ru yastatic.net pcode.yads.tech *.maps.yandex.net; style-src 'unsafe-inline' yastatic.net; img-src 'self' data: avatars.mds.yandex.net favicon.yandex.net *.captcha.yandex.net yastatic.net *.maps.yandex.net *.yandex.ru avatars.yads.tech; media-src blob: strm.yandex.ru *.strm.yandex.net; font-src yastatic.net; connect-src 'self' blob: abs.yandex.ru an.yandex.ru yandex.ru mc.yandex.ru yastatic.net log.strm.yandex.ru display.yads.tech display-logs.yads.tech; frame-src yandexadexchange.net yandex.ru an.yandex.ru; report-uri https://csp.yandex.net/csp?from=yabs\u0026project=yabs\u0026yandex_login=\u0026platform=\r\ncontent-type: application/json\r\nexpires: Mon, 10 Aug 2026 14:36:56 GMT\r\nlast-modified: Mon, 10 Aug 2026 14:36:56 GMT\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":138180,"size_decoded":36947,"mime_type":"application/json","magic":"JSON text data","md5":"10a88a38abe3c8159ff8c6082b6bb830","sha1":"5740ced04411e83a4ecf591dcbf455533f4e7861","sha256":"0b0a083280e65d3e4778b69bd9787c1c27b84b48c033039336541c03f67526de","sha512":"69face3912e974034d8b60e551523293f732f34d56b8f2352054bf8294c33c569158a3e73015d495eba815ada62d1443e544f99ef27deb0f5eec911a2af05dc7","ssdeep":"1536:bYrpXFCTrPuYO7ReXx/Mc3cPcsxzcZmph85MEHlkWq3Tn3g+/5tE2UU8sIOqXM71:mbPRAkJEFkb3Tn3dE+5iMmcFdlQ95S","tlshash":"efd38f6256a06438c703e564af937ea4970df086cee204daf7d48d1ecac77d8338e695","first_seen":"2026-08-10T14:37:27.358589Z","last_seen":"2026-08-10T14:37:27.358589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}