{"report_id":"4ea33353-a5ea-4b5e-b4a5-9e87f5b71d2f","version":0,"status":"done","tags":[],"date":"2026-09-14T21:28:07Z","url":{"schema":"http","addr":"sloniku5let.ru/","fqdn":"sloniku5let.ru","domain":"sloniku5let.ru","tld":"ru"},"ip":{"addr":"81.181.113.118","port":0,"asn":215362,"as":"Promo Plus SRL","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"sloniku5let.ru/","fqdn":"sloniku5let.ru","domain":"sloniku5let.ru","tld":"ru"},"title":"Slon5.at : Определение марки бетона склерометром на объекте | Slon5","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T00:51:03.403439Z","times_seen":18468264,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sloniku5let.ru/","fqdn":"sloniku5let.ru","domain":"sloniku5let.ru","tld":"ru"},"ip":{"addr":"81.181.113.118","port":0,"asn":215362,"as":"Promo Plus SRL","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T21:28:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mc.yandex.ru","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2026-09-10T05:10:38.010064Z","alert_count":0,"request_count":1,"received_data":249377,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2026-09-14T06:12:43.374146Z","alert_count":0,"request_count":4,"received_data":5278,"sent_data":4698,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"sloniku5let.ru","ip":{"addr":"81.181.113.118","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2026-09-11","domain_rank":0,"first_seen":"2026-09-14T21:26:05.855276Z","last_seen":"2026-09-14T21:26:05.855277Z","alert_count":0,"request_count":2,"received_data":53032,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sloniku5let.ru/","fqdn":"sloniku5let.ru","domain":"sloniku5let.ru","tld":"ru"},"ip":{"addr":"81.181.113.118","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1eadfcbbd81b4016a1e393afdc04f82","sha1":"044acd981c0ad3c0b642821739c12a27379c0639","sha256":"1d315eeb63546a815d59b80e578a91d7f97961fe492ce5e0a89593453ce3c79a","sha512":"4e4f029d767e2e727aeb69e1489872b0bf603a5dc494440b832ab5e6aab49ebea502fbb67c83f452f129a986bc2309050d72f737371f44a3d8c6d7d7df810992","ssdeep":"","tlshash":"41f0e1e73c8d5138c7a712753bb392883079253f744eac52b50d18a62f94ea954a751c","size":615,"data":"","first_seen":"2026-09-14T21:26:08.826154Z","last_seen":"2026-09-14T21:28:08.919087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sloniku5let.ru/","fqdn":"sloniku5let.ru","domain":"sloniku5let.ru","tld":"ru"},"ip":{"addr":"81.181.113.118","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"22958c65aaa971180e9b11064147bf5d","sha1":"6ad5141167eddca5772d238c524d16f5fff6a662","sha256":"c1a0a5267af8d6c1193f2bb97bde7bba9a7f255e3337642edc3878dc55b36b06","sha512":"37743fafdfd9e2a9f8e5ec42a0960cb7b67c6e6c811bf01de7b31d7d8cffc1e044eaed6f4e69759378171928e7f97ac6532d37a73ebbff903fbdc75e1d546a2f","ssdeep":"96:CIhirQmzxTv1fkCfYVWWYoIxIFqSJ3r8rItoeTZnWdX:3+3j1fkCfYVWGIxIFxJ3r88to4nWB","tlshash":"679174297918393b48fb2ab2c59f32483e6780fe2d82411209b4dcc92ef24464d67add","size":4456,"data":"","first_seen":"2026-09-14T21:26:08.827696Z","last_seen":"2026-09-14T21:28:08.921766Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js?id=112500565","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"370b28f46759bdd1a63e3259842ce7d3","sha1":"3d4bb9e1d1de93264f84ce1258098e37f0b81842","sha256":"68d6ad7946854664104bb8d21e93b53931712cd98eadb067c2f130a36a1436ab","sha512":"157c0eb985cfc710095649470f695e233d28a3cf7ce076ac17214df8e4860779daa8cd2c19641847626b7a5393348acc1b69eb70841b7c18f7f9ca8ca5220eae","ssdeep":"3072:oNsH2XX0GcGL/cZ6AGkya4p7G/Vjjv9OJh6ZARab:oserco7kya4py/bOJQZAgb","tlshash":"2634e7d97682b47693737474903f000bb1beac96f04c89a4e186d9d57e789ac9237f2c","size":248536,"data":"","first_seen":"2026-09-14T21:28:08.907351Z","last_seen":"2026-09-14T21:28:08.907351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sloniku5let.ru/","fqdn":"sloniku5let.ru","domain":"sloniku5let.ru","tld":"ru"},"ip":{"addr":"81.181.113.118","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T21:27:29.813Z","timestamp":1789421249813,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sloniku5let.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 01:02:19 GMT","end":"Fri, 11 Dec 2026 01:02:18 GMT"},"fingerprint":{"sha1":"93:11:B2:1F:04:5F:A0:C0:34:12:86:FE:F1:6C:E9:61:35:4C:31:65","sha256":"D9:9D:B2:59:56:01:CC:22:76:31:99:F4:5E:3A:14:63:38:28:01:D7:FB:29:D4:27:B1:55:43:B9:1D:66:1B:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sloniku5let.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 14 Sep 2026 21:27:29 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 11 Sep 2026 21:51:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aa477d8-c267\"\r\nCache-Control: no-cache, must-revalidate\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49767,"size_decoded":14063,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"0a2c4f9ae35ce7f98e077646d4f4a057","sha1":"2b18a044cbe12fcd27431e6c89f9781589582d7a","sha256":"d576e6da55f48bc991cd2b76e3708f8e73d5374be59ad20ac1c95b7889dc7c80","sha512":"4f6184ae23341550c7d0d71bd40cc5b20260c324a616285338e331b0786783ee6df519a229ecfbb96b1c0826990621ecac90d0c03730628ab49903d87d863a16","ssdeep":"768:3Nb9sxuoakORpjlEeIrKB5LlIIsnMJXben5tIRZ7v8ppE9/:9b9i+kORpJEerJIIsnMcn54ZD/9/","tlshash":"95230b22214b547f6513f08be65a2f0c36ae40bfbf4753814aa11d7d3ed7ab5892270d","first_seen":"2026-09-14T21:26:08.823185Z","last_seen":"2026-09-14T21:28:08.904701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":3,"connect":48,"send":0,"wait":97,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js?id=112500565","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sloniku5let.ru/","date":"2026-09-14T21:27:30.651Z","timestamp":1789421250651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /metrika/tag.js?id=112500565 HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sloniku5let.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Mon, 14 Sep 2026 22:27:31 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nset-cookie: bh=YMLNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Tue, 19 Oct 2027 21:27:30 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"68d6ad7946854664104bb8d21e93b53931712cd98eadb067c2f130a36a1436ab\"\r\ndate: Mon, 14 Sep 2026 21:27:31 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"bh","value":"YMLNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-10-19T21:27:30Z","raw_expires":"Tue, 19 Oct 2027 21:27:30 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YMLNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Tue, 19 Oct 2027 21:27:30 GMT; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248536,"size_decoded":90443,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306)","md5":"370b28f46759bdd1a63e3259842ce7d3","sha1":"3d4bb9e1d1de93264f84ce1258098e37f0b81842","sha256":"68d6ad7946854664104bb8d21e93b53931712cd98eadb067c2f130a36a1436ab","sha512":"157c0eb985cfc710095649470f695e233d28a3cf7ce076ac17214df8e4860779daa8cd2c19641847626b7a5393348acc1b69eb70841b7c18f7f9ca8ca5220eae","ssdeep":"3072:oNsH2XX0GcGL/cZ6AGkya4p7G/Vjjv9OJh6ZARab:oserco7kya4py/bOJQZAgb","tlshash":"2634e7d97682b47693737474903f000bb1beac96f04c89a4e186d9d57e789ac9237f2c","first_seen":"2026-09-14T21:28:08.907351Z","last_seen":"2026-09-14T21:28:08.907351Z","times_seen":1,"resource_available":true,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":2,"connect":54,"send":0,"wait":635,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sloniku5let.ru/favicon.svg","fqdn":"sloniku5let.ru","domain":"sloniku5let.ru","tld":"ru"},"ip":{"addr":"81.181.113.118","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sloniku5let.ru/","date":"2026-09-14T21:27:30.757Z","timestamp":1789421250757,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sloniku5let.ru","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 12 Sep 2026 01:02:19 GMT","end":"Fri, 11 Dec 2026 01:02:18 GMT"},"fingerprint":{"sha1":"93:11:B2:1F:04:5F:A0:C0:34:12:86:FE:F1:6C:E9:61:35:4C:31:65","sha256":"D9:9D:B2:59:56:01:CC:22:76:31:99:F4:5E:3A:14:63:38:28:01:D7:FB:29:D4:27:B1:55:43:B9:1D:66:1B:00"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: sloniku5let.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sloniku5let.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 14 Sep 2026 21:27:30 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 11 Sep 2026 21:51:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6aa477d8-a4c\"\r\nCache-Control: public, max-age=31536000, immutable\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2636,"size_decoded":1627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a99fa7f1a2eb10e790086baf306150b","sha1":"3254cede71f00af11f694b787956ddbc03ad43d2","sha256":"e84f5d575cbedaa8730e7e08e1303dc056af424f9551be9085dbd91df50314cd","sha512":"12a7820462db5461eccb10f7bfe20c39accafdb6cfcab75d5cd076e0d506a45a22d55135833fddcf43393fe4ed042b139821b61a77b97d7a6b1b88ecc0d589e7","ssdeep":"","tlshash":"e25175b4e99860fcca7d53e14af0b8683b1f31fa7b8244484d5d7a654a22fec4a5c8c5","first_seen":"2026-05-29T18:13:28.05403Z","last_seen":"2026-09-14T21:28:08.910696Z","times_seen":15,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/112500565?wmode=7\u0026page-url=https%3A%2F%2Fsloniku5let.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2650%3Acn%3A1%3Adp%3A0%3Als%3A87269091672%3Ahid%3A532715135%3Az%3A0%3Ai%3A20260914212731%3Aet%3A1789421252%3Ac%3A1%3Arn%3A810363428%3Arqn%3A1%3Au%3A1789421252271351096%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C147%2C50%2C48%2C13%2C0%2C%2C394%2C6%2C%2C%2C%2C673%3Aco%3A0%3Acpf%3A1%3Ans%3A1789421249792%3Arqnl%3A1%3Ast%3A1789421252%3At%3ASlon5.at%20%3A%20%D0%9E%D0%BF%D1%80%D0%B5%D0%B4%D0%B5%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B8%20%D0%B1%D0%B5%D1%82%D0%BE%D0%BD%D0%B0%20%D1%81%D0%BA%D0%BB%D0%B5%D1%80%D0%BE%D0%BC%D0%B5%D1%82%D1%80%D0%BE%D0%BC%20%D0%BD%D0%B0%20%D0%BE%D0%B1%D1%8A%D0%B5%D0%BA%D1%82%D0%B5%20%7C%20Slon5\u0026t=clt(1219)clc(0-0-0)rqnt(1)rfs(1)ufs(1)aw(1)rcm(1)cdl(na)eco(21137681)wdv(1)wds(0)wdo(0)wdd(0)wdi(0)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sloniku5let.ru/","date":"2026-09-14T21:27:31.687Z","timestamp":1789421251687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /watch/112500565?wmode=7\u0026page-url=https%3A%2F%2Fsloniku5let.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2650%3Acn%3A1%3Adp%3A0%3Als%3A87269091672%3Ahid%3A532715135%3Az%3A0%3Ai%3A20260914212731%3Aet%3A1789421252%3Ac%3A1%3Arn%3A810363428%3Arqn%3A1%3Au%3A1789421252271351096%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C147%2C50%2C48%2C13%2C0%2C%2C394%2C6%2C%2C%2C%2C673%3Aco%3A0%3Acpf%3A1%3Ans%3A1789421249792%3Arqnl%3A1%3Ast%3A1789421252%3At%3ASlon5.at%20%3A%20%D0%9E%D0%BF%D1%80%D0%B5%D0%B4%D0%B5%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B8%20%D0%B1%D0%B5%D1%82%D0%BE%D0%BD%D0%B0%20%D1%81%D0%BA%D0%BB%D0%B5%D1%80%D0%BE%D0%BC%D0%B5%D1%82%D1%80%D0%BE%D0%BC%20%D0%BD%D0%B0%20%D0%BE%D0%B1%D1%8A%D0%B5%D0%BA%D1%82%D0%B5%20%7C%20Slon5\u0026t=clt(1219)clc(0-0-0)rqnt(1)rfs(1)ufs(1)aw(1)rcm(1)cdl(na)eco(21137681)wdv(1)wds(0)wdo(0)wdd(0)wdi(0)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sloniku5let.ru/\r\nOrigin: https://sloniku5let.ru\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\naccess-control-allow-origin: https://sloniku5let.ru\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 14-Sep-2026 21:27:31 GMT\r\nset-cookie: yabs-sid=2075211621789421251; Path=/; SameSite=None; Secure\ni=8BXx1tCrND7ddsCgucSqpR+3ipxlWMSc1LoExzR2vB4NYABgx9Fk9621NON+K5z+pQOWeuTV0i6RFy83Ix50Npky+Ok=; Expires=Thu, 11-Sep-2036 21:27:30 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7337575741789421251; Expires=Thu, 11-Sep-2036 21:27:30 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=7337575741789421251; Expires=Tue, 14-Sep-2027 21:27:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1820957251.yrts.1789421251#1820957251.yrtsi.1789421251; Expires=Tue, 14-Sep-2027 21:27:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 19 Oct 2027 21:27:31 GMT; SameSite=None; Secure\nbh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 19 Oct 2027 21:27:31 GMT; SameSite=None; Secure\r\nlocation: /watch/112500565/1?wmode=7\u0026page-url=https%3A%2F%2Fsloniku5let.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2650%3Acn%3A1%3Adp%3A0%3Als%3A87269091672%3Ahid%3A532715135%3Az%3A0%3Ai%3A20260914212731%3Aet%3A1789421252%3Ac%3A1%3Arn%3A810363428%3Arqn%3A1%3Au%3A1789421252271351096%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C147%2C50%2C48%2C13%2C0%2C%2C394%2C6%2C%2C%2C%2C673%3Aco%3A0%3Acpf%3A1%3Ans%3A1789421249792%3Arqnl%3A1%3Ast%3A1789421252%3At%3ASlon5.at%20%3A%20%D0%9E%D0%BF%D1%80%D0%B5%D0%B4%D0%B5%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B8%20%D0%B1%D0%B5%D1%82%D0%BE%D0%BD%D0%B0%20%D1%81%D0%BA%D0%BB%D0%B5%D1%80%D0%BE%D0%BC%D0%B5%D1%82%D1%80%D0%BE%D0%BC%20%D0%BD%D0%B0%20%D0%BE%D0%B1%D1%8A%D0%B5%D0%BA%D1%82%D0%B5%20%7C%20Slon5\u0026t=clt%281219%29clc%280-0-0%29rqnt%281%29rfs%281%29ufs%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821137681%29wdv%281%29wds%280%29wdo%280%29wdd%280%29wdi%280%29ti%281%29\u0026redirnss=1\r\nexpires: Mon, 14-Sep-2026 21:27:31 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"yabs-sid","value":"2075211621789421251","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yabs-sid=2075211621789421251; Path=/; SameSite=None; Secure"},{"name":"i","value":"8BXx1tCrND7ddsCgucSqpR+3ipxlWMSc1LoExzR2vB4NYABgx9Fk9621NON+K5z+pQOWeuTV0i6RFy83Ix50Npky+Ok=","quoted":false,"path":"/","domain":".yandex.com","expires":"2036-09-11T21:27:30Z","raw_expires":"Thu, 11-Sep-2036 21:27:30 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"i=8BXx1tCrND7ddsCgucSqpR+3ipxlWMSc1LoExzR2vB4NYABgx9Fk9621NON+K5z+pQOWeuTV0i6RFy83Ix50Npky+Ok=; Expires=Thu, 11-Sep-2036 21:27:30 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"yandexuid","value":"7337575741789421251","quoted":false,"path":"/","domain":".yandex.com","expires":"2036-09-11T21:27:30Z","raw_expires":"Thu, 11-Sep-2036 21:27:30 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yandexuid=7337575741789421251; Expires=Thu, 11-Sep-2036 21:27:30 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None"},{"name":"yuidss","value":"7337575741789421251","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-09-14T21:27:31Z","raw_expires":"Tue, 14-Sep-2027 21:27:31 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yuidss=7337575741789421251; Expires=Tue, 14-Sep-2027 21:27:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure"},{"name":"ymex","value":"1820957251.yrts.1789421251#1820957251.yrtsi.1789421251","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-09-14T21:27:31Z","raw_expires":"Tue, 14-Sep-2027 21:27:31 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ymex=1820957251.yrts.1789421251#1820957251.yrtsi.1789421251; Expires=Tue, 14-Sep-2027 21:27:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure"},{"name":"bh","value":"YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-10-19T21:27:31Z","raw_expires":"Tue, 19 Oct 2027 21:27:31 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 19 Oct 2027 21:27:31 GMT; SameSite=None; Secure"},{"name":"bh","value":"YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-10-19T21:27:31Z","raw_expires":"Tue, 19 Oct 2027 21:27:31 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 19 Oct 2027 21:27:31 GMT; SameSite=None; Secure"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T00:51:03.403439Z","times_seen":18468264,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":4,"connect":46,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sloniku5let.ru/","date":"2026-09-14T21:27:31.689Z","timestamp":1789421251689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sloniku5let.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 43\r\nlast-modified: Sat, 12 Sep 2026 05:05:35 GMT\r\ncontent-type: image/gif\r\netag: \"6aa4dd9f-2b\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=3600\r\ndate: Mon, 14 Sep 2026 21:27:31 GMT\r\nset-cookie: bh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 19 Oct 2027 21:27:31 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\ntiming-allow-origin: *\r\nexpires: Mon, 14 Sep 2026 22:27:31 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"bh","value":"YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-10-19T21:27:31Z","raw_expires":"Tue, 19 Oct 2027 21:27:31 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Tue, 19 Oct 2027 21:27:31 GMT; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":860,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-09-15T00:37:43.035215Z","times_seen":113759,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":5,"connect":50,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/112500565/1?wmode=7\u0026page-url=https%3A%2F%2Fsloniku5let.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2650%3Acn%3A1%3Adp%3A0%3Als%3A87269091672%3Ahid%3A532715135%3Az%3A0%3Ai%3A20260914212731%3Aet%3A1789421252%3Ac%3A1%3Arn%3A810363428%3Arqn%3A1%3Au%3A1789421252271351096%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C147%2C50%2C48%2C13%2C0%2C%2C394%2C6%2C%2C%2C%2C673%3Aco%3A0%3Acpf%3A1%3Ans%3A1789421249792%3Arqnl%3A1%3Ast%3A1789421252%3At%3ASlon5.at%20%3A%20%D0%9E%D0%BF%D1%80%D0%B5%D0%B4%D0%B5%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B8%20%D0%B1%D0%B5%D1%82%D0%BE%D0%BD%D0%B0%20%D1%81%D0%BA%D0%BB%D0%B5%D1%80%D0%BE%D0%BC%D0%B5%D1%82%D1%80%D0%BE%D0%BC%20%D0%BD%D0%B0%20%D0%BE%D0%B1%D1%8A%D0%B5%D0%BA%D1%82%D0%B5%20%7C%20Slon5\u0026t=clt%281219%29clc%280-0-0%29rqnt%281%29rfs%281%29ufs%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821137681%29wdv%281%29wds%280%29wdo%280%29wdd%280%29wdi%280%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sloniku5let.ru/","date":"2026-09-14T21:27:31.775Z","timestamp":1789421251775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /watch/112500565/1?wmode=7\u0026page-url=https%3A%2F%2Fsloniku5let.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2650%3Acn%3A1%3Adp%3A0%3Als%3A87269091672%3Ahid%3A532715135%3Az%3A0%3Ai%3A20260914212731%3Aet%3A1789421252%3Ac%3A1%3Arn%3A810363428%3Arqn%3A1%3Au%3A1789421252271351096%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A2%2C147%2C50%2C48%2C13%2C0%2C%2C394%2C6%2C%2C%2C%2C673%3Aco%3A0%3Acpf%3A1%3Ans%3A1789421249792%3Arqnl%3A1%3Ast%3A1789421252%3At%3ASlon5.at%20%3A%20%D0%9E%D0%BF%D1%80%D0%B5%D0%B4%D0%B5%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B8%20%D0%B1%D0%B5%D1%82%D0%BE%D0%BD%D0%B0%20%D1%81%D0%BA%D0%BB%D0%B5%D1%80%D0%BE%D0%BC%D0%B5%D1%82%D1%80%D0%BE%D0%BC%20%D0%BD%D0%B0%20%D0%BE%D0%B1%D1%8A%D0%B5%D0%BA%D1%82%D0%B5%20%7C%20Slon5\u0026t=clt%281219%29clc%280-0-0%29rqnt%281%29rfs%281%29ufs%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821137681%29wdv%281%29wds%280%29wdo%280%29wdd%280%29wdi%280%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sloniku5let.ru\r\nReferer: https://sloniku5let.ru/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=2075211621789421251; i=8BXx1tCrND7ddsCgucSqpR+3ipxlWMSc1LoExzR2vB4NYABgx9Fk9621NON+K5z+pQOWeuTV0i6RFy83Ix50Npky+Ok=; yandexuid=7337575741789421251; yuidss=7337575741789421251; ymex=1820957251.yrts.1789421251#1820957251.yrtsi.1789421251; bh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 751\r\nexpires: Mon, 14-Sep-2026 21:27:31 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://sloniku5let.ru\r\nlast-modified: Mon, 14-Sep-2026 21:27:31 GMT\r\naccess-control-allow-credentials: true\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":751,"size_decoded":1524,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af45772116db6c2c1890ada6f3e39bd3","sha1":"d4044b07b9d5f7a49aacfcb5570c4611a3fca00a","sha256":"2d1e635f967bbe7b46a223cc5ea3fbaa82397c650c73c4c7386dc201e7af0031","sha512":"aca88d17a758fcc1cf3e2ffdb06067784525652a74b0b7211051a014ff99600ebaee530f23baa4a6af98f03fce40049213d9f2a71d2b4b2bbeacae10f0df1a19","ssdeep":"","tlshash":"1101650464481dfac82aeb7041af7a17005c380fdc812bd046c26ec0084eb6b3107bd1","first_seen":"2026-09-14T21:28:08.916198Z","last_seen":"2026-09-14T21:28:08.916198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mc.yandex.com/solid.ws","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://sloniku5let.ru/","date":"2026-09-14T21:27:31.860Z","timestamp":1789421251860,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /solid.ws HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://sloniku5let.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SdYNkMFRLT7BJqbf11u6/g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: yabs-sid=2075211621789421251; i=8BXx1tCrND7ddsCgucSqpR+3ipxlWMSc1LoExzR2vB4NYABgx9Fk9621NON+K5z+pQOWeuTV0i6RFy83Ix50Npky+Ok=; yandexuid=7337575741789421251; yuidss=7337575741789421251; ymex=1820957251.yrts.1789421251#1820957251.yrtsi.1789421251; bh=YMPNodUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching protocols\r\nStrict-Transport-Security: max-age=31536000\r\nSec-WebSocket-Accept: oRPKnoK3KgGY2UFasbnHc1Np7uY=\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Extensions: permessage-deflate;server_max_window_bits=15\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":246,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T00:51:03.403439Z","times_seen":18468264,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":45,"send":0,"wait":47,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}