{"report_id":"4fe9051a-a970-4897-8852-bc1fd36d3bc2","version":6,"status":"done","tags":[],"date":"2025-10-03T22:35:22Z","url":{"schema":"https","addr":"ci06001-wordpress-uh640.tw1.ru/wp-content/plugins/vsndd-jvca/vsndd-jvca/pages/region.php","fqdn":"ci06001-wordpress-uh640.tw1.ru","domain":"tw1.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"title":"Домен припаркован в Timeweb"},"submit":{"url":{"schema":"https","addr":"ci06001-wordpress-uh640.tw1.ru/wp-content/plugins/vsndd-jvca/vsndd-jvca/pages/region.php","fqdn":"ci06001-wordpress-uh640.tw1.ru","domain":"tw1.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":0,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-07T22:35:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ci06001-wordpress-uh640.tw1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-03","alert":"Phishing - Credit Agricole S.A.","trigger":"ci06001-wordpress-uh640.tw1.ru/wp-content/plugins/vsndd-jvca/vsndd-jvca/pages/region.php","verdict":"phishing","severity":"medium","comment":"Credit Agricole S.A.","link":"https://openphish.com","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ci06001-wordpress-uh640.tw1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ci06001-wordpress-uh640.tw1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"vh454.timeweb.ru","ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-04-10","domain_rank":0,"first_seen":"2025-09-16T16:31:29.561562Z","last_seen":"2025-10-03T22:27:25.703459Z","alert_count":0,"request_count":12,"received_data":471769,"sent_data":5965,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-09-28T22:11:46.419999Z","alert_count":0,"request_count":1,"received_data":821173,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yandex.ru","ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2025-09-29T01:13:40.707143Z","alert_count":0,"request_count":2,"received_data":443455,"sent_data":6843,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":67862,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2025-09-29T01:13:40.604618Z","alert_count":0,"request_count":7,"received_data":1006023,"sent_data":3425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ci06001-wordpress-uh640.tw1.ru","ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-06-29","domain_rank":0,"first_seen":"2025-10-03T22:35:24.158505Z","last_seen":"2025-10-03T22:35:24.158505Z","alert_count":4,"request_count":1,"received_data":76502,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":8,"received_data":258376,"sent_data":4416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-28T22:11:46.355495Z","alert_count":0,"request_count":1,"received_data":1776,"sent_data":458,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","size":33703,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-07T00:52:51.359872Z","times_seen":27838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/4aa53e15299e2058f1f1.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbdd6ce5515f8d2d1276d2a1dc11d5fe","sha1":"56b71532650b8c6a2265c6fd998c5097c2e78581","sha256":"cd788d1c9e3a1dd1d7f7b9eb0056e8880ffbc53df169c7fc9767dfc4e760772c","sha512":"879152a8fb6bca0a1694d4cf53b5493cab9bd5049cbfd106f7a7f0fd2245cb076dfc002e5d4bf500a413d13803cd531b5cc23a3df9b1c5ae8d70f096a4a379fe","ssdeep":"192:mwcMb4FdHN3vgfye/K1d3tRsIpgG2spjlpQVYXLlVcsm+24pHKTX43UG8PLndErx:mwcM86fyHXlv2+lpQeX/c+2+HKTlPEwI","tlshash":"0c62e7a97495b4a513db20bb413f150ff3b96879644d80a0f212d8e97efc89c4167f6c","size":14962,"data":"","first_seen":"2025-10-03T08:45:25.958141Z","last_seen":"2025-10-06T07:19:22.944598Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadCallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3db29b63e68f5e9b5163a2f8822c142d","sha1":"924581b85f5ee7338e6836a33fe221d41bcd7c9c","sha256":"7214806b548af8d7b892d2c3c9edbca5854882fa74eea4ce5d774f128d131be6","sha512":"32945f2619c6b9b6b7c2ed4fe47e81132d53f13ce5c297b4a2bfa48926c87585f5d5a73fa004c82b2fb66cf4799402d00a81caa9e0c434c337f47bb2556708cd","ssdeep":"","tlshash":"0f112cb31a14e0390b3219e0e2ffcbb0e492341cb01c85e8a515eac46e7adcbcf05489","size":1076,"data":"","first_seen":"2025-10-02T04:52:49.761263Z","last_seen":"2025-10-07T03:17:46.028503Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-06-06T23:49:56.124439Z","times_seen":14052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1886bd03f5d0f675b4b5f8c95450513","sha1":"ed30ed056739bb42113a0081f14366f88560f5d9","sha256":"20f720164369503f4a1a8036f1900509f9137db9ef5dac5bec741ceb0f732be7","sha512":"85b5d9d11ce8ee74df05c5cbecc3601f0a88b9204d08608b311b16e00564cfad4b3a91746493560a9fadeca918708a3ae10864e3ae8acb8bfc88a84f56bf815c","ssdeep":"","tlshash":"1fd08cbb2ea230716212b024488c16821a5281d3871d4086bf2c21ae6ffc45a03adbc8","size":231,"data":"","first_seen":"2023-03-07T01:10:52Z","last_seen":"2026-06-06T23:49:56.125528Z","times_seen":2326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79d46b9e2a42785f28f64082a61eabbf","sha1":"c1b66a198b40bcd1f6cce34704173f997ecd8608","sha256":"6159c42218db471f012088abd52e60fe39e5c1dcf2981ff7d80f38d8bd36a690","sha512":"820943d8b4d684933ce756b9d59c499147aae8336a811b042d8ee8bf035ecb20be12ff815d0ba4a8676c815b9e6bf2d687591d434bedfbbf07e56dae34f39c49","ssdeep":"12288:iF/YdSVcst0yzYy0Vqqog/cT6eKb54lptHAgR1BoOdy3aWKi:QQozYJog/Y6fV4lbpR1BRdyKK","tlshash":"b70529c870257a624332b5f6707b209da36e5966d45c095d70a6c4f03fb098db0baebf","size":820265,"data":"","first_seen":"2025-10-01T09:12:21.067891Z","last_seen":"2026-06-02T23:59:04.965062Z","times_seen":7915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/0b4f2c44f1355f45940a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e3bf5dda73c43bf1eb1655e705dc7a4","sha1":"24b67bf9a967724a096530aa7fb3f8d76898387e","sha256":"e5b60a4b68086688d4a243d6e4a225c7ac686b62180404f0f00cb5617eb2d403","sha512":"4348fdbcb314c6a4a1d099b9e161a40ff231da4cda694b38709496e59b8844866bf40935b0d5449fbc3dddee61d93a329fd5e62dbd192f016b8c55e8c993419f","ssdeep":"1536:dNi6loxb18Ph4boL6yQEtNzOgvgTu1T15PoBPiT3Oo2V:iPo6yRWTu1TXPoBqC3V","tlshash":"f1c31788f65174b502e790f8913f660eb33b6429b01588e4b76deef1ae7490e5122f7c","size":127059,"data":"","first_seen":"2025-10-03T08:45:25.96721Z","last_seen":"2025-10-06T07:19:22.935164Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/a2ecd56dd298ef2dbd62.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"872ec065ddd51a681a9cca92207272c3","sha1":"527f222e3459d011e1394f413dc10ce7a73eba7e","sha256":"eef0104a9e59588032d8a09de7af6f871535efdbc0961de054eb195d797844a2","sha512":"82a95f36ed99bb509f8eb7b05f2a9aab88f0c7b619a4b4fcdea7266b4c709e2f30f41bcf0f9b8a3e3484e9156443f07132d70eb59e2c840b43948677b6384f83","ssdeep":"12288:o1Sifj5LwnhBNnzBp60FBQrI4gCOiVzRVaSqcqjDINLg:o1Ssp060FBQrI4TOaznaSqcqjDINLg","tlshash":"1ce4e789fa5170b542e790e9c03f150ea33f751a700994e4b72aede16878a8f6123f7d","size":706253,"data":"","first_seen":"2025-10-03T08:45:25.94172Z","last_seen":"2025-10-06T07:19:22.905174Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6d331403dabd07dc4ba6a477d7a6226","sha1":"40fdca4ddd76e31bec8fc9980d54b83f980a4875","sha256":"a40bef51bd50cf1dc263b27f2a26bc6e2f4ea33067e933f82b0a5c841d20ab52","sha512":"35b943e62008dd5e3fc54d51cc8fdfdacf4b658740ad37ec089acda271110a59f3393ac0d500bf3700875d853e0775b2c0e0dc6506f55cdac90b184f704f74ee","ssdeep":"","tlshash":"e4d08cbb2ea230716252b024588c9682166281c3470d5086bf3c25ad5ffc41903edfc8","size":231,"data":"","first_seen":"2023-03-07T01:10:52Z","last_seen":"2026-06-06T23:49:56.126239Z","times_seen":2326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ea7d0c6a96ee4beef44a0761f81a102","sha1":"821f3017e8ce560797c0530032f5da2e16f6ab01","sha256":"69e87cf06d33a80831b2a6f19b73636cee165ab3c4ea32e124beef63b160c6f8","sha512":"31a277d4db382634a8d2f6dd8cfb1ef4efb713068c3027d0634dbf6255764923006524d89a82643cab39c444aef8838b23b304dce7e127152a7b246c19fd46e5","ssdeep":"","tlshash":"61017bbdadd325406e37741f07af100850592513fab4d950781e63684fb451a827aaf8","size":846,"data":"","first_seen":"2023-03-07T01:10:52Z","last_seen":"2026-06-06T23:49:56.126985Z","times_seen":2324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/js/jquery-2.1.3.js","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf26f8f0ccb06be71e92d8db0fb64ab5","sha1":"1852661bd11a09ca9b9cb63d1aa6ff390fffaf4e","sha256":"828cbbcacb430f9c5b5d27fe9302f8795eb338f2421010f5141882125226f94f","sha512":"b8eb1a740c63feaab8ac24d87f39f4cfe263694c972f4978b9f0e3092f912a722596fd094dd637d22f03816617e13210bf11fad9a545dbb0423dc821c827081e","ssdeep":"6144:W+EbhsnwcrC/Vuc5cyYOf1KwZOUL/p4vR+8I3JhI8f2AHUH:WbLYOfPZ2J288f2A0H","tlshash":"9334b5d8fb8d111e4232316a9d2f52cdba7cd1b1560458afbd8d597c24a083c42faf7a","size":247387,"data":"","first_seen":"2023-03-07T01:10:52Z","last_seen":"2026-06-06T23:49:56.100753Z","times_seen":2505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"48408a66b35f32b30a955ec01f1ecb21","sha1":"633808969f24c3ac768c55ccfe6e203cd2f9f6dd","sha256":"2b8e6b4d1e9cdde77b1373dfa3ad8d68f95b54cc64a25a46f3f7247de8e77294","sha512":"a4a1f6238838e266313cc92956d7ec74d62330785e882000f9710d9e617224e7f4785bc75ca353819ae32dcee337616bc6eb3b5c58b834d60f2f0cdaf779d1a2","ssdeep":"6144:TCn7oQMxG14sGKReXB9jzl4P5RXzzFm9lIK3:TCn7otxTXBFl4P5RHR4","tlshash":"4594f7e975a5b4f203e391e5843f160fe33b5929741d90a1b722d8d1ac29d4f6223f3a","size":438734,"data":"","first_seen":"2025-10-03T22:35:25.942581Z","last_seen":"2025-10-03T22:35:25.942581Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/1d71f90394a94f080547.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1835ab4c964f6df778fa32f375ddab44","sha1":"b9992847d49bcb55f12e7c1352d821eadd0624b7","sha256":"4e39640791912a54d95593b4993a41e3d87adda65c5dbe6217daa3f463c010b0","sha512":"c9cbef2af356e25e5092885f22547552c1b9ff331420094caf44f7fe85cdfa596dbb3cd20a391b7bb98c8717be532be38d928a001561196efebe160ceb5c09fc","ssdeep":"192:RwUZ36c4CJOrSO2dXacdFtQyZ0BUJVA0ANkU+iMG3NVeONVVSfHAnnFAS8eulbjm:RwsKNCJO+OLyB+oVwciaHCFt","tlshash":"d67209fd7920b0205bdf7076627f191ff378292e644884a0670aedf629b491e5193fac","size":16357,"data":"","first_seen":"2025-10-03T08:45:25.892696Z","last_seen":"2025-10-06T07:19:22.893372Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/8f1092f513ec0c5d3584.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4061ebfd4dcd9c87b2ebcb3b3fdd53e","sha1":"ddc70056ba387b22f53ec301e69fe1602e852837","sha256":"0b2de6bc3ea997061b7c1f9dbaa08473112d67c9c0e2fff9ac8b354aea16684d","sha512":"2de594801a73a43dd7687cb21a6e08d558f37dbe4f8762f4c6f6b092497ed430f7ab0ae812f3b355b584f68bc8cb5753fb6c77205bc5a796a812c47d6a12c260","ssdeep":"768:dSNu+NSW/JZgAUh2egDY5kZrDVZBXYUs3yna1j1S3Kux:mJZgpgDY5kZfBXG+SSxx","tlshash":"1673fad97595b9fb02c3d4f1043f320ea37ba615711a6580b322dac1ec65a9f5223e3e","size":75404,"data":"","first_seen":"2025-10-03T08:45:25.939087Z","last_seen":"2025-10-06T07:19:22.852494Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:55:26 GMT\r\nexpires: Fri, 02 Oct 2026 12:55:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121171\r\nlast-modified: Mon, 08 Sep 2025 18:08:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-06-07T00:30:34.065649Z","times_seen":19506,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":8,"dns":0,"connect":8,"send":0,"wait":17,"receive":3,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:55:26 GMT\r\nexpires: Fri, 02 Oct 2026 12:55:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121171\r\nlast-modified: Mon, 08 Sep 2025 18:08:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-06-07T00:30:34.065649Z","times_seen":19506,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:53 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121024\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T01:11:31.50919Z","times_seen":871742,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadCallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:37:19 GMT","end":"Mon, 08 Dec 2025 08:37:18 GMT"},"fingerprint":{"sha1":"71:09:AD:C8:6A:D2:25:DB:C9:D9:5E:5B:C1:06:E1:0D:D6:39:D6:F0","sha256":"A9:72:F7:39:49:86:27:92:AA:EE:65:04:99:A9:0E:A8:02:70:01:E6:72:46:C2:FB:DC:5E:5E:6B:DC:B8:27:A0"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadCallback\u0026render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Fri, 03 Oct 2025 22:34:57 GMT\r\ndate: Fri, 03 Oct 2025 22:34:57 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1076,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1076), with no line terminators","md5":"3db29b63e68f5e9b5163a2f8822c142d","sha1":"924581b85f5ee7338e6836a33fe221d41bcd7c9c","sha256":"7214806b548af8d7b892d2c3c9edbca5854882fa74eea4ce5d774f128d131be6","sha512":"32945f2619c6b9b6b7c2ed4fe47e81132d53f13ce5c297b4a2bfa48926c87585f5d5a73fa004c82b2fb66cf4799402d00a81caa9e0c434c337f47bb2556708cd","ssdeep":"","tlshash":"0f112cb31a14e0390b3219e0e2ffcbb0e492341cb01c85e8a515eac46e7adcbcf05489","first_seen":"2025-10-02T04:52:49.761263Z","last_seen":"2025-10-07T03:17:46.028503Z","times_seen":129,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":57,"dns":2,"connect":8,"send":0,"wait":22,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/dummy-block-2.svg","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/dummy-block-2.svg HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:16 GMT\r\nETag: W/\"708c-63e0d23c869af\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb2acf01b0889aba0a0fc4874fe87acc","sha1":"5da9c3620ace5252264500661d2f3835d80e8779","sha256":"9b86e6f21ac056b68b55a94f6329d9236a0366200012ce84d4ce0b94c5a40504","sha512":"25e7b88b5ca133a8b7cd076f8b02e6eb6af314e2e7deeddbb3d11a9dd34ff47ead672e39da05ff0630cf1115794524f052c30941ef96e15c963125f01134e80b","ssdeep":"384:NtSDUL87GPPS0o4Q1oXwaYSDULJ7APPS0odQHXwa3SDULhbCF7L6hOTY6T1ngPP1:O43Kk4ntF4xGY","tlshash":"78d2538077b28378b12ea3b5ade574bd3e0b16e5bb020478c7631ec5e47502dae6d8d1","first_seen":"2023-05-02T01:48:22Z","last_seen":"2026-06-06T23:49:56.118057Z","times_seen":1958,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":116,"dns":0,"connect":57,"send":0,"wait":62,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/timeweb-logo.svg","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/timeweb-logo.svg HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:16 GMT\r\nETag: W/\"f8f-63e0d23c869af\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6a3da3a0b4b17ff1958add427aa938f3","sha1":"3bb9aa88b107084934ce94e15c59b88e5076c6ed","sha256":"825dbf3c8d50be7263e3292ce984109ba7d3630d4756701d3e79419b2801abfa","sha512":"a0e8775992ef8e947f87217d56eb491abc1f35d1e52ffca981e1e1e7b434861f099908794df65f79db9139c1bab34c0a504be6a2eb0d42a988aad2469af7c1ef","ssdeep":"","tlshash":"c08164eee7a8e1c0e64aa3f6ea56097977370cf97766c524c3980d16b56202c480dec3","first_seen":"2023-12-09T23:34:01Z","last_seen":"2026-06-06T23:49:56.107661Z","times_seen":1306,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":113,"dns":0,"connect":55,"send":0,"wait":86,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:53 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121024\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T01:11:31.50919Z","times_seen":871742,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":91,"dns":0,"connect":8,"send":0,"wait":8,"receive":2,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:55:26 GMT\r\nexpires: Fri, 02 Oct 2026 12:55:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121171\r\nlast-modified: Mon, 08 Sep 2025 18:08:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-06-07T00:30:34.065649Z","times_seen":19506,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":133,"dns":0,"connect":8,"send":0,"wait":8,"receive":1,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /recaptcha/releases/Jv8jlA-BQE5JD6rA-h_iqNH2/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 349597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Oct 2025 14:51:52 GMT\r\nexpires: Sat, 03 Oct 2026 14:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 12:04:53 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 27785\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":820265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (611)","md5":"79d46b9e2a42785f28f64082a61eabbf","sha1":"c1b66a198b40bcd1f6cce34704173f997ecd8608","sha256":"6159c42218db471f012088abd52e60fe39e5c1dcf2981ff7d80f38d8bd36a690","sha512":"820943d8b4d684933ce756b9d59c499147aae8336a811b042d8ee8bf035ecb20be12ff815d0ba4a8676c815b9e6bf2d687591d434bedfbbf07e56dae34f39c49","ssdeep":"12288:iF/YdSVcst0yzYy0Vqqog/cT6eKb54lptHAgR1BoOdy3aWKi:QQozYJog/Y6fV4lbpR1BRdyKK","tlshash":"b70529c870257a624332b5f6707b209da36e5966d45c095d70a6c4f03fb098db0baebf","first_seen":"2025-10-01T09:12:21.067891Z","last_seen":"2026-06-02T23:59:04.965062Z","times_seen":7915,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /safeframe-bundles/0.83/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 8878\r\nexpires: Mon, 04 Oct 2055 05:07:30 GMT\r\netag: \"f80882bf67cf261aa08d636da095149a\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 03 Nov 2021 13:42:58 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\nx-strm-log-split: 4\r\nx-request-id: 59bc6c9ba6ce7b17\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33703,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33703), with no line terminators","md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-07T00:52:51.359872Z","times_seen":27838,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":63,"dns":0,"connect":31,"send":0,"wait":36,"receive":11,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/0b4f2c44f1355f45940a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302187/0b4f2c44f1355f45940a.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 24787\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nexpires: Mon, 04 Oct 2055 05:10:04 GMT\r\netag: \"b026f26f4e88a35107161ef686d73b96\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Thu, 02 Oct 2025 16:44:24 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-strm-log-split: 0\r\nx-request-id: 6aa4ff3166cb9a87\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"9e3bf5dda73c43bf1eb1655e705dc7a4","sha1":"24b67bf9a967724a096530aa7fb3f8d76898387e","sha256":"e5b60a4b68086688d4a243d6e4a225c7ac686b62180404f0f00cb5617eb2d403","sha512":"4348fdbcb314c6a4a1d099b9e161a40ff231da4cda694b38709496e59b8844866bf40935b0d5449fbc3dddee61d93a329fd5e62dbd192f016b8c55e8c993419f","ssdeep":"1536:dNi6loxb18Ph4boL6yQEtNzOgvgTu1T15PoBPiT3Oo2V:iPo6yRWTu1TXPoBqC3V","tlshash":"f1c31788f65174b502e790f8913f660eb33b6429b01588e4b76deef1ae7490e5122f7c","first_seen":"2025-10-03T08:45:25.96721Z","last_seen":"2025-10-06T07:19:22.935164Z","times_seen":194,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T22:34:57.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/?ref=ci06001-wordpress-uh640.tw1.ru HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: W/\"129f5-63e0d23c22052\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:2.1.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":76277,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3412)","md5":"4861652109d488dcfa5e4b79cc879dc0","sha1":"6023eb424188ea9a3cc7ebb5b527d6bedde2745c","sha256":"206442207b5ec81d6d6d0ac8a0d2a1873fd6df088372bb4dbfcd16c59b1cba10","sha512":"e8cfbfc271bdefd895513f0cf3f984447dd8d4594af04bf118d5f24535ae4688f9bf4ca08bdf7633ba1d7118105875a4267791269b7c701d8352748a566e0649","ssdeep":"768:+FktKcbHBLoHj0PxiHm/ouVHzMd/ENRzGiLIN0:+4bHBLoHj0Au1MM5LIe","tlshash":"3773a6e741f4d0e14a4fc3b19d36569b9d7224bfde85528479dc0a106f82ef9c883ae8","first_seen":"2025-04-09T10:35:18.603156Z","last_seen":"2025-10-25T13:05:18.979119Z","times_seen":246,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":128,"dns":0,"connect":56,"send":0,"wait":110,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/dummy-block-3.svg","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/dummy-block-3.svg HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: W/\"6685-63e0d23c6a490\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"665154a8ffba7d905cd281efe3ac8d0a","sha1":"e483b420bf0ee1173b47dd544083343712485baf","sha256":"cb1603b89e0da7279f125cfcd55727435f4bfff266a4991aabcb1a8dfdaecef5","sha512":"9ef8ab929addaca357584d41fbf74c2522207cf506a40d04cdf434c4d0df66cff401ad60557508f2baa310736d8d8bb8344c29c407de554d213b6a75e16c75be","ssdeep":"768:f7e6ZGhldmE+sOt3tpNJ9GhHdl8tsOaZGhRdS1tx:fxE+sO3HWf","tlshash":"67c211a532e5f3adec47d379862260753b1734f6b0806fe2cf395d24750b86a8e998c4","first_seen":"2023-05-03T00:34:24Z","last_seen":"2026-06-06T23:49:56.122775Z","times_seen":1955,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/sert-1.png","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/sert-1.png HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 2450\r\nConnection: keep-alive\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: \"992-63e0d23c694f0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2450,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 48, 8-bit/color RGBA, non-interlaced","md5":"1241afc5104f595cc28d75d4653bcb18","sha1":"2c0d705dfa1ea54d4ca9eae11a3b348cf6c7adc6","sha256":"7130b0ed8f9d96b97ae5a24b1e3190e49049206b43310bff483c4d4b24b5d009","sha512":"7b0c7931ee5abe6ece92e4490608b1157e6f655d9b7575f215c738f062112161e69776a61bbaae292c88b69957456226ee579a757bf2582e1c877f3962bc9e75","ssdeep":"","tlshash":"f2513d67b7928576040d0180037e0f12fa6f1928fa167698861a9f163e82871c3119d7","first_seen":"2023-04-30T22:01:58Z","last_seen":"2026-06-06T23:49:56.110821Z","times_seen":2352,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 03 Oct 2025 23:34:57 GMT\r\ntiming-allow-origin: *\r\nx-yandex-req-id: 1759530897990125-5675390601995141072-balancer-l7leveler-kubr-yp-vla-19-BAL\r\nset-cookie: i=0aMfBszSxlPyLEA1pVksQaFyNG9WFdNKz0Nhp+m8H/fEn0vmV7m3BxrvDQ+gdU8bi965bV7itOJ5T6ensxZHOp8Zkoo=; Expires=Sun, 03-Oct-2027 22:34:57 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=7951410721759530897; Expires=Sun, 03-Oct-2027 22:34:57 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=4287895621759530897; Path=/; Domain=.yandex.ru; Expires=Sat, 03 Oct 2026 22:34:57 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YJGfgccGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 07 Nov 2026 22:34:57 GMT; SameSite=None; Secure\r\netag: \"407268168c8f76d7329cbfac4e49d3c5-1302187\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ncache-control: private, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":438734,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"48408a66b35f32b30a955ec01f1ecb21","sha1":"633808969f24c3ac768c55ccfe6e203cd2f9f6dd","sha256":"2b8e6b4d1e9cdde77b1373dfa3ad8d68f95b54cc64a25a46f3f7247de8e77294","sha512":"a4a1f6238838e266313cc92956d7ec74d62330785e882000f9710d9e617224e7f4785bc75ca353819ae32dcee337616bc6eb3b5c58b834d60f2f0cdaf779d1a2","ssdeep":"6144:TCn7oQMxG14sGKReXB9jzl4P5RXzzFm9lIK3:TCn7otxTXBFl4P5RHR4","tlshash":"4594f7e975a5b4f203e391e5843f160fe33b5929741d90a1b722d8d1ac29d4f6223f3a","first_seen":"2025-10-03T22:35:25.942581Z","last_seen":"2025-10-03T22:35:25.942581Z","times_seen":1,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":105,"dns":7,"connect":44,"send":0,"wait":56,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/1d71f90394a94f080547.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302187/1d71f90394a94f080547.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5724\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nlast-modified: Thu, 02 Oct 2025 16:44:24 GMT\r\ncache-control: public, max-age=946708560\r\netag: \"a84447926fc68cc412e346ede9ac568e\"\r\nexpires: Mon, 04 Oct 2055 05:10:02 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-strm-log-split: 8\r\nx-request-id: 6f3c5c3057f14aee\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16357,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16323)","md5":"1835ab4c964f6df778fa32f375ddab44","sha1":"b9992847d49bcb55f12e7c1352d821eadd0624b7","sha256":"4e39640791912a54d95593b4993a41e3d87adda65c5dbe6217daa3f463c010b0","sha512":"c9cbef2af356e25e5092885f22547552c1b9ff331420094caf44f7fe85cdfa596dbb3cd20a391b7bb98c8717be532be38d928a001561196efebe160ceb5c09fc","ssdeep":"192:RwUZ36c4CJOrSO2dXacdFtQyZ0BUJVA0ANkU+iMG3NVeONVVSfHAnnFAS8eulbjm:RwsKNCJO+OLyB+oVwciaHCFt","tlshash":"d67209fd7920b0205bdf7076627f191ff378292e644884a0670aedf629b491e5193fac","first_seen":"2025-10-03T08:45:25.892696Z","last_seen":"2025-10-06T07:19:22.893372Z","times_seen":194,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":52,"dns":0,"connect":14,"send":0,"wait":14,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ci06001-wordpress-uh640.tw1.ru/wp-content/plugins/vsndd-jvca/vsndd-jvca/pages/region.php","fqdn":"ci06001-wordpress-uh640.tw1.ru","domain":"tw1.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T22:34:57.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tw1.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 15 Jan 2025 07:43:20 GMT","end":"Mon, 16 Feb 2026 07:43:19 GMT"},"fingerprint":{"sha1":"3B:17:7E:02:A9:75:7F:1C:3F:6E:02:20:9C:F3:D9:33:AF:59:66:F1","sha256":"EB:D4:07:78:89:12:45:D1:5C:3E:C7:7A:0D:57:0D:93:C0:04:2C:53:AF:41:C9:7D:81:07:55:AD:43:6C:3D:15"}}},"request":{"raw":"GET /wp-content/plugins/vsndd-jvca/vsndd-jvca/pages/region.php HTTP/1.1\r\nHost: ci06001-wordpress-uh640.tw1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.26.3\r\ndate: Fri, 03 Oct 2025 22:34:57 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76277,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":132,"dns":1,"connect":56,"send":0,"wait":55,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ci06001-wordpress-uh640.tw1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-03","alert":"Phishing - Credit Agricole S.A.","trigger":"ci06001-wordpress-uh640.tw1.ru/wp-content/plugins/vsndd-jvca/vsndd-jvca/pages/region.php","verdict":"phishing","severity":"medium","comment":"Credit Agricole S.A.","link":"https://openphish.com","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ci06001-wordpress-uh640.tw1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ci06001-wordpress-uh640.tw1.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/dummy-block-1.svg","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/dummy-block-1.svg HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: W/\"36dc-63e0d23c66610\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14044,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc2154594ad707787515b484fd0ec07b","sha1":"9dffb7602684cbc52320c22918c51c6cf6202d63","sha256":"69b277d1824d9ee83125e5955861d218f09a190a750938841df30ed8871ef4a6","sha512":"33b6ebc064ee1f29da9b20f31ce646d3a9de9e7119093d7639aa7dd2dfbe5ce752180d83c66db8c28dfcaee284b4203e6c1e3016dd2771a15048a4a068736026","ssdeep":"384:1POIFxhn9LaOIFx2/9LeiOIFx3nx5mgXZ9Kc9LXU:ZOIFTn9LaOIFQ/9L7OIFNF9Lk","tlshash":"785296d1275b9bea5a2562bdc63f22f0bc3618eafa848d74cb923c1d54430364c961e7","first_seen":"2023-05-03T00:34:24Z","last_seen":"2026-06-06T23:49:56.099162Z","times_seen":1922,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/sert-2.png","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/sert-2.png HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/png\r\nContent-Length: 2715\r\nConnection: keep-alive\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: \"a9b-63e0d23c68550\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 48, 8-bit/color RGBA, non-interlaced","md5":"71512373c3a7d51c44daaec8952c3c70","sha1":"a50f39ee39739773b0cfaaea975df5bb62366204","sha256":"272e3d9ee16c3dad177a2f15532991c66c42c3edb9cfd87a4d77ce6549f06b2b","sha512":"2622d3d183eba5b3e72a568e6f380526439386cd80e9248ecbbcec1b238dd58ff7a45d388b8aa8f3efddafd8b114bcc324e30e513b06976cedff7bea4f29cbf9","ssdeep":"","tlshash":"08516cc0869cd81da85f6da7dd9f43b3d8b28c7e1a7389152e1b9f60ec244507129b23","first_seen":"2023-04-30T22:01:58Z","last_seen":"2026-06-06T23:49:56.108413Z","times_seen":2349,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":114,"dns":0,"connect":57,"send":0,"wait":62,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/8f1092f513ec0c5d3584.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302187/8f1092f513ec0c5d3584.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 17471\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Mon, 04 Oct 2055 05:10:04 GMT\r\nlast-modified: Thu, 02 Oct 2025 16:44:26 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\netag: \"0834cd28a662a738a26a491922cd9b39\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-strm-log-split: 3\r\nx-request-id: 348bc44f4896bd2b\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75404,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"a4061ebfd4dcd9c87b2ebcb3b3fdd53e","sha1":"ddc70056ba387b22f53ec301e69fe1602e852837","sha256":"0b2de6bc3ea997061b7c1f9dbaa08473112d67c9c0e2fff9ac8b354aea16684d","sha512":"2de594801a73a43dd7687cb21a6e08d558f37dbe4f8762f4c6f6b092497ed430f7ab0ae812f3b355b584f68bc8cb5753fb6c77205bc5a796a812c47d6a12c260","ssdeep":"768:dSNu+NSW/JZgAUh2egDY5kZrDVZBXYUs3yna1j1S3Kux:mJZgpgDY5kZfBXG+SSxx","tlshash":"1673fad97595b9fb02c3d4f1043f320ea37ba615711a6580b322dac1ec65a9f5223e3e","first_seen":"2025-10-03T08:45:25.939087Z","last_seen":"2025-10-06T07:19:22.852494Z","times_seen":194,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":54,"dns":0,"connect":14,"send":0,"wait":38,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/a2ecd56dd298ef2dbd62.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302187/a2ecd56dd298ef2dbd62.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 133813\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nexpires: Mon, 04 Oct 2055 05:10:04 GMT\r\nlast-modified: Thu, 02 Oct 2025 16:44:26 GMT\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"d48c774e451966f3467c7019b887a276\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 5\r\nx-request-id: 058b4cc29fffe0a4\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":706253,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"872ec065ddd51a681a9cca92207272c3","sha1":"527f222e3459d011e1394f413dc10ce7a73eba7e","sha256":"eef0104a9e59588032d8a09de7af6f871535efdbc0961de054eb195d797844a2","sha512":"82a95f36ed99bb509f8eb7b05f2a9aab88f0c7b619a4b4fcdea7266b4c709e2f30f41bcf0f9b8a3e3484e9156443f07132d70eb59e2c840b43948677b6384f83","ssdeep":"12288:o1Sifj5LwnhBNnzBp60FBQrI4gCOiVzRVaSqcqjDINLg:o1Ssp060FBQrI4TOaznaSqcqjDINLg","tlshash":"1ce4e789fa5170b542e790e9c03f150ea33f751a700994e4b72aede16878a8f6123f7d","first_seen":"2025-10-03T08:45:25.94172Z","last_seen":"2025-10-06T07:19:22.905174Z","times_seen":194,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":54,"dns":1,"connect":16,"send":0,"wait":46,"receive":19,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vh454.timeweb.ru/\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\ntiming-allow-origin: *\r\nexpires: Sun, 04 Oct 2026 04:09:14 GMT\r\nx-nginx-request-id: d73ef45e9ad0acea\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=31556952\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nx-strm-log-split: 6\r\nx-request-id: 84675e9f6172ddd4\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-06-07T00:52:51.403983Z","times_seen":26884,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":56,"dns":1,"connect":14,"send":0,"wait":44,"receive":4,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/css/styles.css","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/css/styles.css HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: W/\"a71f-63e0d23c24f32\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42783,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42783), with no line terminators","md5":"19606e9d9442018a8b4860fc0e0151eb","sha1":"88f2339a1eb39b5fbb03444a5cbc9102e9c955b3","sha256":"5523a8e07f1479acdf75df3d394856d70f402c8226a13a1150f02912a3af030d","sha512":"269b6e1be5c55d6203fc9e2bd32db93edb29797fda83a3b99af6c9861e6a32b88ee9ec455abb0e4cb06004d6c1f4601bbd6cc44b9b000259f5c3b6ebc6b0bbbd","ssdeep":"192:SqvTL3vLTXDHl7LxuOuWmmWeSkyxUV9xRN1RBRX5jFhhF9ZBVBrz9fCuy2qWq+Ol:f4cyC7y5uk7","tlshash":"3b13eea75f60030cec6fcd241b9c178c521cc51b26b322da569e6e2ad7c3f225795b8e","first_seen":"2023-04-05T06:04:21Z","last_seen":"2026-06-06T23:49:56.092896Z","times_seen":1887,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:53 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121024\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T01:11:31.50919Z","times_seen":871742,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":103,"dns":0,"connect":8,"send":0,"wait":8,"receive":2,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Oct 2025 22:34:57 GMT\r\ndate: Fri, 03 Oct 2025 22:34:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"27127fb086f4a56d20b88f328416eb11","sha1":"c9a613a7383f218cd7f8489e7b9aede68a561dc9","sha256":"f203aa8a7f00ee4aeb83495632ba4b2f05973b4ea5cf9f37f03eb7739919e78b","sha512":"8cf83e503089489f245e7c30f5a1fb2d128a628e95fa547f4456c995d21eef557d82ee61097d23324c4347073b44bd4272d0cd1da3a77e75a599e53912f9073e","ssdeep":"768:yDqDwDRD6DlBD/KDED0D/6s7qlL/aAQGrZKbla/LVlN0SRklh/Uu+zeoHOlX/+EQ:1LG7/BW2Bia0p","tlshash":"99630d91041b5040ab835ce223cebe34fe4f92507150d0b9abfc9b6beddbc66526836c","first_seen":"2025-09-09T00:03:19.852107Z","last_seen":"2026-01-13T13:42:40.088482Z","times_seen":6131,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":95,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/js/jquery-2.1.3.js","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/js/jquery-2.1.3.js HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: application/x-javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: W/\"3c65b-63e0d23c423f1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247387,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"cf26f8f0ccb06be71e92d8db0fb64ab5","sha1":"1852661bd11a09ca9b9cb63d1aa6ff390fffaf4e","sha256":"828cbbcacb430f9c5b5d27fe9302f8795eb338f2421010f5141882125226f94f","sha512":"b8eb1a740c63feaab8ac24d87f39f4cfe263694c972f4978b9f0e3092f912a722596fd094dd637d22f03816617e13210bf11fad9a545dbb0423dc821c827081e","ssdeep":"6144:W+EbhsnwcrC/Vuc5cyYOf1KwZOUL/p4vR+8I3JhI8f2AHUH:WbLYOfPZ2J288f2A0H","tlshash":"9334b5d8fb8d111e4232316a9d2f52cdba7cd1b1560458afbd8d597c24a083c42faf7a","first_seen":"2023-03-07T01:10:52Z","last_seen":"2026-06-06T23:49:56.100753Z","times_seen":2505,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":109,"dns":0,"connect":56,"send":0,"wait":110,"receive":88,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/timeweb-appstore.svg","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/timeweb-appstore.svg HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: W/\"30c2-63e0d23c675b0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b0e0aa426878713d697efbdf41af873","sha1":"e9c0c98dac66731bd514fdf193a1249276a6ae58","sha256":"936a74655c87ee79ef22fd44c170a530cdf893364b3066ae420e4f2bfbdebdcc","sha512":"23b7c4a2b04310a643b9dbbe22bdba1893fc46011066fb1ebe033c84c9811f8aa5ec641ba0053afa6c8a94a3aa4fc390233c8a686ee2cd77e49042be2882d3ad","ssdeep":"384:NW80PhnBjzxDQFx509EmXEANPDMpJEQCmmX/6d:s805BjzxDBE6NPDMpJ/Ce","tlshash":"a642b7e027b962e4e202f7acca3290b57b273cfb7fd1c959c3819d90a65605d4c89cd6","first_seen":"2023-05-03T00:34:24Z","last_seen":"2026-06-06T23:49:56.093915Z","times_seen":1848,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":174,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/blocked/svg/timeweb-googleplay.svg","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /blocked/svg/timeweb-googleplay.svg HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 05 Sep 2025 12:40:15 GMT\r\nETag: W/\"27a6-63e0d23c68550\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10150,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d0da164d6042c1fd8b9f46c9d5b54dc","sha1":"1373a84a2b2318a8a9554a0b7d17f9d85b4d61c1","sha256":"1444bd7037ff6d1e73222be2a19efdc29f90b66f825a5648e5bc06f7e69935a5","sha512":"f4e5dce84277669adbf3c8a7c61b284548697f5427378d58bf85c17202fa14ec14ad6adbb28db582895510671531020fc8b0c43f4d59a9b112b435bdb9a0d9b8","ssdeep":"192:nhFanzXNsc4jGY+sYIPEg1FYg4PogapU9jnyIGARwsvS43:hFks9TEg1rgaq7JvSq","tlshash":"a322c795736466e99003fbeec512d0717aab68ff77c1e381c3a1ef59a8650884d88cd2","first_seen":"2023-05-02T01:48:22Z","last_seen":"2026-06-06T23:49:56.099915Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":112,"dns":0,"connect":58,"send":0,"wait":61,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:55:26 GMT\r\nexpires: Fri, 02 Oct 2026 12:55:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121171\r\nlast-modified: Mon, 08 Sep 2025 18:08:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-06-07T00:30:34.065649Z","times_seen":19506,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":66,"dns":0,"connect":8,"send":0,"wait":8,"receive":3,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302187/4aa53e15299e2058f1f1.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302187/4aa53e15299e2058f1f1.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5030\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-encoding: br\r\nlast-modified: Thu, 02 Oct 2025 16:44:25 GMT\r\netag: \"c72344e826174b7e444cfa4db7c7abb0\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Mon, 04 Oct 2055 05:10:04 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 7\r\nx-request-id: 7bf46786d0770be8\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14962,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14928)","md5":"bbdd6ce5515f8d2d1276d2a1dc11d5fe","sha1":"56b71532650b8c6a2265c6fd998c5097c2e78581","sha256":"cd788d1c9e3a1dd1d7f7b9eb0056e8880ffbc53df169c7fc9767dfc4e760772c","sha512":"879152a8fb6bca0a1694d4cf53b5493cab9bd5049cbfd106f7a7f0fd2245cb076dfc002e5d4bf500a413d13803cd531b5cc23a3df9b1c5ae8d70f096a4a379fe","ssdeep":"192:mwcMb4FdHN3vgfye/K1d3tRsIpgG2spjlpQVYXLlVcsm+24pHKTX43UG8PLndErx:mwcM86fyHXlv2+lpQeX/c+2+HKTlPEwI","tlshash":"0c62e7a97495b4a513db20bb413f150ff3b96879644d80a0f212d8e97efc89c4167f6c","first_seen":"2025-10-03T08:45:25.958141Z","last_seen":"2025-10-06T07:19:22.944598Z","times_seen":194,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":64,"dns":0,"connect":32,"send":0,"wait":49,"receive":4,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/meta/516496?target-ref=https%3A%2F%2Fvh454.timeweb.ru%2Fblocked%2F%3Fref%3Dci06001-wordpress-uh640.tw1.ru\u0026pcode-version=1302187\u0026pcodever=1302187\u0026comboblock-unencoded-vast=1\u0026ad-session-id=249741759530898201\u0026target-id=61524095\u0026pcode-test-ids=1236516%2C0%2C78%3B1286016%2C0%2C2%3B1375117%2C0%2C56%3B1365407%2C0%2C1%3B1373603%2C0%2C55%3B1353317%2C0%2C23%3B1356432%2C0%2C97%3B1372202%2C0%2C51%3B1360192%2C0%2C85%3B912288%2C0%2C4\u0026csrf-token=7e4d7725dcd9294fd46cfea35374ef44fe8e05db%3A1759530897\u0026pcode-uid=3666196711759530897\u0026pcode-flags-map=eJydVtty2zYQ%2FZUOn0WXAO9%2BAwFQwogEGACS7WQyO0ykJG5tuWPLSeqM%2F73DSx2RtiQnTxIWPGcvOLvAD8eURFt4s%2BALDvy8gqwgdA6FMNY5fffD%2BVpf3a%2Bd03fOdX15dXJ770ycf%2BvNav395Pb%2Bz8vr%2BvP6bmD6XF%2B3ltXDetN9Xn%2B93N50f69PdharzWVvbZifGJyJc1s%2FXN08fOm3H2673%2Fvb%2BmSz%2Fnb37IO%2F6pvryx5683fz%2B37ibNd3W7FyTp0YhQmOncf3E%2BeCGEusoJBzziArFJ2DYHA2E5a%2FkLF2hYuDFGEvcJEzGazxaO2P1kG7Ji4OkefFuMcTN0ySIEIuQk%2BGKEZh3DjYDTrx0ghFbdCSn8G0smCoFtUgQmf9%2FR9nFxT7OA1aEBOGZAUHWgg6B6pkLnRJrFDyEEGKQz%2FxWwJDSg4XRDJ%2BDkyVRBwGxl4cpS2QmAtJOzntIn44d%2BttU9SdfdA2A0YsgUIR5kyGe1wyruGZvd8YWaeaZPsI9roQUljoDITl6ny0XXKrxZwAVQtpn3mkSs0Fh5JYOhNyuuerSqtSGP7McUWmXfp9lEvBuBp91dpASKCqzBQo2QbcyOTLzd32rilmfXXlvH%2FcOQjkoSROu5MwpgK6MFaVUKgpiJwM5e1nCUKE5S4iEXODDEVuwvLMjUjM8pBTllDiTBzXdVc3m3q73vwhWN5YYpJlAY19F2PC3ICSyE3DIHSxH6AsbjqA4yFwSkRTfM%2F7hFcfQt%2BN%2FY%2B%2BG0Q4cGucxG4Yhx8%2BIVSnHl4P2gB5fpAmyUvpVFxTLgf94J14Xvg6NM2nQ3WmKEYoTrFziiaO73lpggMPOafocQ%2FhWy4h00QyyIiUXIOlM2iOVbBBp6AQB0kU4d12QTiKUeLt5xFlNaZ5NX5fDEGUvJqDmfmvxFBpngkGuTgHqwmdc20OTQvkoyAMwha6JKZtXii4nNrZAIa9YBiyj6M0%2FYlbmKZJrBaSgF02XaMvoCKalIe949gLoyeWVg5KWi4tsIVuh%2BRL6hql37BE%2BImFFpzItlnbidvFQvR0WAirF3zI4uMg7Nq1qZ5Z6CW%2FgPxI%2BQLfw50KqdE5WDXnEpbkOMpHTwEb214QS67N%2BFZAvoeiJBqh4yDsfEoilryVmYEzYWfQXzYMcjLnYMRbboaTBjUXUxyEw972Y5Sk%2FgtpQKPEiirGDycUhz7q1CBQIqFUmgM%2BDulctvxHqoBREo%2FwSRIlu5pv9d7M%2Fwo4rYbC%2B7i9GntHKH4RTX8HTQvRiLbklsCMSFZwfTj7KAy8joHLNu%2B%2B3XPVPA6gp234fpGneaMU5EItfoukhzBuxFTCvFhMjxz8T6jhzdDihCrZZAF2qjpNEtY%2B745U1I%2B8Tg0zUlVCcmP%2Bb0FBR3L4Um9WQ3To%2B%2F15mKoQFjR%2Fs%2BDGmsM%2Bwyjwu7FBWEEyXoBact2fxBHxYuzthbZnMOOkeU2cCTYapQe4JLFNP3evjf48C6Wqw2lEHkob%2FON%2FPBJ61A%3D%3D\u0026pcode-icookie=zpjbi0sVyVJvD72bQcz3n79P2wQtEh9i2Ld85wn2ok2FPylVqeKlWswg3KWDYOQJ6KDSOfYSdnjml48uUzzPOh9gPDA%3D\u0026disable-base64=1\u0026imp-id=2\u0026banner-lang=en\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=375483220885506\u0026tga-with-creatives=1\u0026top-ancestor=https%3A%2F%2Fvh454.timeweb.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1152%2C%22h%22%3A0%2C%22width%22%3A1152%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A64%2C%22top%22%3A412%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=2968\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CiKlppAkue8B1KTAyr8pxV0H16sK3tIveMn3H8lQ-dIu7a51q7Y1cSCDG5duyzH6S5csSxEKsyap0jRpA-hpAFfMTLR2K-K08SXd8XAaETMRM8hMzEw1aUNNZjRpi1JvNIV5mBXGDrVLOkZXdOns6D5Jl3f0HjxC9jJ4PTgZvAl6rinICkqTvXE22dt6ykRPajTpc_JpyMooAo9Rr9JoSIe61BWMTglNrtdnJxkVhjBPUocAygThFMOOEYW5AVTSEeX6wiWjK9UPH4aJhpH_MOHlIjHONdpSn5Dx5VFmRRxON8wYmjLW5elIC10Z5uSFA1ykMhiKKHJsDclGnJDNNBk6VRgWsQAYQ5LNhqRSU9oq3LBaPNhMN-h5sZCKKk8pkuuduhS3LyLXjdyQpC9jP4kG6lFhnKQ6DiV6rk2Yx8P-MzwUk9kQFgjDAxfnOm0oqjgVVZbojsaucbxHuPnW5nPtBL9nO-kvwBSt1WjIbfQ2m3WQJbFeHX-JhkpLb7YxhGRWhlj1Z7DyYJS9_oTjzaj0RQRqmKjZ_glpmeoLhCeYkWuljxINOQpQVGXGBk08GIQHnr0co8ietc9XpUkZeVb3KXjtsvAFewGc0diB-hNi3898Yp-oyx-AYvrE_zZJxzr4oGP5RM4wrLXwnPjdMkxhiDGyXJOHjMbKYY65Z8C4A3TpjyNAsdI_RvIJH_gE85CVrSA9rOLYf8ks-QyW-UQ-nOOP-dn7KXs8n4kHCPxCKl6c9Dh3BYpbq-i4P_vpeLnok_iEbWHQcQ7cUU9Ms7ZW3mYqOs6z93odfMsxfYLKccFKnwvhz9p1RL8seOGwfwAcH_6t9xE8E7EfFNydLntY-Df52Ii3qJ_KMNloQcdf2sq_g9tb4l0VdEAq31--dJxdsoO7sisgZD93xI8o3ceiDNPZkGMkqjDL00IMEcaReujikvRPDPSzDGcprbxudIXJXnKZ-HfPdak4sAmnE5egyCOZzRApm6ELlOJKCr8-Wv5Nx-WY2b8Zxn-6Pe3O8M8POu4eDPvKdB8NfJD3QRLRvYLPaeWeFf3TP3hp6WX6vE81EtqTl3eMy1JqajBH--H-844mO47tGM8auLfqXwd0_Zhkk7TdU9pYKVuW4r7MUY9w0wquBw79vv8Ajwsgt4QBkp_IB4w6zg3rW2vKLDNekP9rL4xHYllp6OcyVSkiyJrwJsUw7bMlqphbYzCajwHEV_uoROTDvhZIrhRXZfcjAIzfgekFzn8lInCo7_GIEFOz_yS-F1A4g-QHGJ-4fvR-u-7xxctHe1d6qD8jlA0fBHsTRSPopfsu3L_mJTq8nwnLEceCjXiYPqwtO9aVpt6gfgVvNi_1Yl4j2dc5hchPo6MDiB8OABOB_o8fkb9MGxL5P5D967gewC6ZUt_YyAd-v7rT4TbHueN5TFWuryy7o8nvdDWgtYhw5Ac2xD6aedKYrQCKmwmgKJLkLXM3w6I8LEaT4m0IOR7iFuCdEG2WmyPDkQlnOPdRUVi-4aR-NBeBueZthoiLYKfhyF2gNkmTpfKVuhQjeVjJDmbztQMFhY-XXz_NSDshMNMgQzltyJEPq43WukPrqaCct_55_z6x8AMheQOtzYZy0tlsghvevXryfv0drHNJJOspy7uc5ZlWC8ppMdMKzsRfe_nt67E-a7O6lRvfcdE08CDDZsauFSQeCfbQlHl2jiDmmbNvzD_BhS1IT04To8SQr1VVctSY118DcMRy6ilFEl-lD2k0UX6w_xi7pq_8vmOyV1mTvQnnprbmHsLp3CGc9geqMp7s1RSp6sVnuSc-y6PwY06iUg9tEoV5qquaVWMHzGFgN5qosuNyDT7zP1jL8YPJfGIefS0PvEowye-aTuv4iTF-zZoe_BhlHK9q0NWcG-mNY9tsZWV2s5OP8r9KgPJdNo807RiszHX2x0szpGBQo_IeK9LZYZwJsDo72dOSpcnA_kp421fsi27T2vGZOt1-x6wz-b-KXB-NqIjJG-m0nM7YFnIV0fwmhxXPUneBXAXwWy5vHCNBBEbB0j6wcp0WKWLQJrIOrUPz4bGQr5ycHFamQ3N4R6e8BFncEdQ9uD55MjEVn1yktEDb1d0qbRbODkJV9jk1c01V0Bwf8UzmRE0n1UXqJVSt_XlXqTu9rjOrqpW2HO0YaCw63qrUMFYbS8TcxIIusIz58aHqZ06z2HTnzF0EzKkF52koq_0m7-ioWjpVVFCoMnfxJFt07KbJEyyft177cTU7nFzGZxDMJ_ThLel-WpE1Z_50ZxtxZEt1lHj2HbJYwfumBuGvwTxF3ClypSfRsZifvFBOMbWaiCex5gfR4G-NudPPMmBpA3Cr5d_A_4yQtWs7sOdZmo5fk1e6pAxsd1vZLz-H6HyqREXHWAzyDw7KjZiBD-s0lGckEIPL_N6KsZAPz1juqRNr0GY-0Qr9lHIXeb7qbfwl6hF-RMxfAbWl1WnKvkYsZEBbu94hqibCcwpLQygKIe1Xh0W6uJV8gwhkYVxF5j9UeFQtM4IlxeAwf8VdF7ZIscMSaSeqx8ba0QGtV2L5XKKyNljOpp3THuSNX4FmzapGL1IdQaI21ZCoSeNK5ltsNvrR3mqxWZBVOl3UgHwHBnJDCcb7WSB2JQMHCqrjnLw0kK7CvZKx8iXvFrdT0pUbBJWbMrIWxy-eE28AceI94eyZFpqzjpTtFpvdLabn0uJSr48X6NZc3bzqYrxNRFS9OpIq39RXb2ohMdNbaaw0DMJ25nmzQFVV5iXZicF58C3sNv0QEqvZQoechsENZG2OfRAxBfCWYy6Fx7FUjJ8BvltvedhzVhr6Pz-KpgMhaSoSrlpPFOf4YS5tg-bCVLyJhluyQPhfN2laLBVY_iQfNJ5snAfR_l7TAyZrlULurtQKTigooiIUi6xQL8zGuRZqNReFFX9U4_TwDSik9gW2J8A%3D\u0026uniformat=true\u0026callback=Ya%5B4349765958866%5D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:58.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/meta/516496?target-ref=https%3A%2F%2Fvh454.timeweb.ru%2Fblocked%2F%3Fref%3Dci06001-wordpress-uh640.tw1.ru\u0026pcode-version=1302187\u0026pcodever=1302187\u0026comboblock-unencoded-vast=1\u0026ad-session-id=249741759530898201\u0026target-id=61524095\u0026pcode-test-ids=1236516%2C0%2C78%3B1286016%2C0%2C2%3B1375117%2C0%2C56%3B1365407%2C0%2C1%3B1373603%2C0%2C55%3B1353317%2C0%2C23%3B1356432%2C0%2C97%3B1372202%2C0%2C51%3B1360192%2C0%2C85%3B912288%2C0%2C4\u0026csrf-token=7e4d7725dcd9294fd46cfea35374ef44fe8e05db%3A1759530897\u0026pcode-uid=3666196711759530897\u0026pcode-flags-map=eJydVtty2zYQ%2FZUOn0WXAO9%2BAwFQwogEGACS7WQyO0ykJG5tuWPLSeqM%2F73DSx2RtiQnTxIWPGcvOLvAD8eURFt4s%2BALDvy8gqwgdA6FMNY5fffD%2BVpf3a%2Bd03fOdX15dXJ770ycf%2BvNav395Pb%2Bz8vr%2BvP6bmD6XF%2B3ltXDetN9Xn%2B93N50f69PdharzWVvbZifGJyJc1s%2FXN08fOm3H2673%2Fvb%2BmSz%2Fnb37IO%2F6pvryx5683fz%2B37ibNd3W7FyTp0YhQmOncf3E%2BeCGEusoJBzziArFJ2DYHA2E5a%2FkLF2hYuDFGEvcJEzGazxaO2P1kG7Ji4OkefFuMcTN0ySIEIuQk%2BGKEZh3DjYDTrx0ghFbdCSn8G0smCoFtUgQmf9%2FR9nFxT7OA1aEBOGZAUHWgg6B6pkLnRJrFDyEEGKQz%2FxWwJDSg4XRDJ%2BDkyVRBwGxl4cpS2QmAtJOzntIn44d%2BttU9SdfdA2A0YsgUIR5kyGe1wyruGZvd8YWaeaZPsI9roQUljoDITl6ny0XXKrxZwAVQtpn3mkSs0Fh5JYOhNyuuerSqtSGP7McUWmXfp9lEvBuBp91dpASKCqzBQo2QbcyOTLzd32rilmfXXlvH%2FcOQjkoSROu5MwpgK6MFaVUKgpiJwM5e1nCUKE5S4iEXODDEVuwvLMjUjM8pBTllDiTBzXdVc3m3q73vwhWN5YYpJlAY19F2PC3ICSyE3DIHSxH6AsbjqA4yFwSkRTfM%2F7hFcfQt%2BN%2FY%2B%2BG0Q4cGucxG4Yhx8%2BIVSnHl4P2gB5fpAmyUvpVFxTLgf94J14Xvg6NM2nQ3WmKEYoTrFziiaO73lpggMPOafocQ%2FhWy4h00QyyIiUXIOlM2iOVbBBp6AQB0kU4d12QTiKUeLt5xFlNaZ5NX5fDEGUvJqDmfmvxFBpngkGuTgHqwmdc20OTQvkoyAMwha6JKZtXii4nNrZAIa9YBiyj6M0%2FYlbmKZJrBaSgF02XaMvoCKalIe949gLoyeWVg5KWi4tsIVuh%2BRL6hql37BE%2BImFFpzItlnbidvFQvR0WAirF3zI4uMg7Nq1qZ5Z6CW%2FgPxI%2BQLfw50KqdE5WDXnEpbkOMpHTwEb214QS67N%2BFZAvoeiJBqh4yDsfEoilryVmYEzYWfQXzYMcjLnYMRbboaTBjUXUxyEw972Y5Sk%2FgtpQKPEiirGDycUhz7q1CBQIqFUmgM%2BDulctvxHqoBREo%2FwSRIlu5pv9d7M%2Fwo4rYbC%2B7i9GntHKH4RTX8HTQvRiLbklsCMSFZwfTj7KAy8joHLNu%2B%2B3XPVPA6gp234fpGneaMU5EItfoukhzBuxFTCvFhMjxz8T6jhzdDihCrZZAF2qjpNEtY%2B745U1I%2B8Tg0zUlVCcmP%2Bb0FBR3L4Um9WQ3To%2B%2F15mKoQFjR%2Fs%2BDGmsM%2Bwyjwu7FBWEEyXoBact2fxBHxYuzthbZnMOOkeU2cCTYapQe4JLFNP3evjf48C6Wqw2lEHkob%2FON%2FPBJ61A%3D%3D\u0026pcode-icookie=zpjbi0sVyVJvD72bQcz3n79P2wQtEh9i2Ld85wn2ok2FPylVqeKlWswg3KWDYOQJ6KDSOfYSdnjml48uUzzPOh9gPDA%3D\u0026disable-base64=1\u0026imp-id=2\u0026banner-lang=en\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=375483220885506\u0026tga-with-creatives=1\u0026top-ancestor=https%3A%2F%2Fvh454.timeweb.ru\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1152%2C%22h%22%3A0%2C%22width%22%3A1152%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A64%2C%22top%22%3A412%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=2968\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CiKlppAkue8B1KTAyr8pxV0H16sK3tIveMn3H8lQ-dIu7a51q7Y1cSCDG5duyzH6S5csSxEKsyap0jRpA-hpAFfMTLR2K-K08SXd8XAaETMRM8hMzEw1aUNNZjRpi1JvNIV5mBXGDrVLOkZXdOns6D5Jl3f0HjxC9jJ4PTgZvAl6rinICkqTvXE22dt6ykRPajTpc_JpyMooAo9Rr9JoSIe61BWMTglNrtdnJxkVhjBPUocAygThFMOOEYW5AVTSEeX6wiWjK9UPH4aJhpH_MOHlIjHONdpSn5Dx5VFmRRxON8wYmjLW5elIC10Z5uSFA1ykMhiKKHJsDclGnJDNNBk6VRgWsQAYQ5LNhqRSU9oq3LBaPNhMN-h5sZCKKk8pkuuduhS3LyLXjdyQpC9jP4kG6lFhnKQ6DiV6rk2Yx8P-MzwUk9kQFgjDAxfnOm0oqjgVVZbojsaucbxHuPnW5nPtBL9nO-kvwBSt1WjIbfQ2m3WQJbFeHX-JhkpLb7YxhGRWhlj1Z7DyYJS9_oTjzaj0RQRqmKjZ_glpmeoLhCeYkWuljxINOQpQVGXGBk08GIQHnr0co8ietc9XpUkZeVb3KXjtsvAFewGc0diB-hNi3898Yp-oyx-AYvrE_zZJxzr4oGP5RM4wrLXwnPjdMkxhiDGyXJOHjMbKYY65Z8C4A3TpjyNAsdI_RvIJH_gE85CVrSA9rOLYf8ks-QyW-UQ-nOOP-dn7KXs8n4kHCPxCKl6c9Dh3BYpbq-i4P_vpeLnok_iEbWHQcQ7cUU9Ms7ZW3mYqOs6z93odfMsxfYLKccFKnwvhz9p1RL8seOGwfwAcH_6t9xE8E7EfFNydLntY-Df52Ii3qJ_KMNloQcdf2sq_g9tb4l0VdEAq31--dJxdsoO7sisgZD93xI8o3ceiDNPZkGMkqjDL00IMEcaReujikvRPDPSzDGcprbxudIXJXnKZ-HfPdak4sAmnE5egyCOZzRApm6ELlOJKCr8-Wv5Nx-WY2b8Zxn-6Pe3O8M8POu4eDPvKdB8NfJD3QRLRvYLPaeWeFf3TP3hp6WX6vE81EtqTl3eMy1JqajBH--H-844mO47tGM8auLfqXwd0_Zhkk7TdU9pYKVuW4r7MUY9w0wquBw79vv8Ajwsgt4QBkp_IB4w6zg3rW2vKLDNekP9rL4xHYllp6OcyVSkiyJrwJsUw7bMlqphbYzCajwHEV_uoROTDvhZIrhRXZfcjAIzfgekFzn8lInCo7_GIEFOz_yS-F1A4g-QHGJ-4fvR-u-7xxctHe1d6qD8jlA0fBHsTRSPopfsu3L_mJTq8nwnLEceCjXiYPqwtO9aVpt6gfgVvNi_1Yl4j2dc5hchPo6MDiB8OABOB_o8fkb9MGxL5P5D967gewC6ZUt_YyAd-v7rT4TbHueN5TFWuryy7o8nvdDWgtYhw5Ac2xD6aedKYrQCKmwmgKJLkLXM3w6I8LEaT4m0IOR7iFuCdEG2WmyPDkQlnOPdRUVi-4aR-NBeBueZthoiLYKfhyF2gNkmTpfKVuhQjeVjJDmbztQMFhY-XXz_NSDshMNMgQzltyJEPq43WukPrqaCct_55_z6x8AMheQOtzYZy0tlsghvevXryfv0drHNJJOspy7uc5ZlWC8ppMdMKzsRfe_nt67E-a7O6lRvfcdE08CDDZsauFSQeCfbQlHl2jiDmmbNvzD_BhS1IT04To8SQr1VVctSY118DcMRy6ilFEl-lD2k0UX6w_xi7pq_8vmOyV1mTvQnnprbmHsLp3CGc9geqMp7s1RSp6sVnuSc-y6PwY06iUg9tEoV5qquaVWMHzGFgN5qosuNyDT7zP1jL8YPJfGIefS0PvEowye-aTuv4iTF-zZoe_BhlHK9q0NWcG-mNY9tsZWV2s5OP8r9KgPJdNo807RiszHX2x0szpGBQo_IeK9LZYZwJsDo72dOSpcnA_kp421fsi27T2vGZOt1-x6wz-b-KXB-NqIjJG-m0nM7YFnIV0fwmhxXPUneBXAXwWy5vHCNBBEbB0j6wcp0WKWLQJrIOrUPz4bGQr5ycHFamQ3N4R6e8BFncEdQ9uD55MjEVn1yktEDb1d0qbRbODkJV9jk1c01V0Bwf8UzmRE0n1UXqJVSt_XlXqTu9rjOrqpW2HO0YaCw63qrUMFYbS8TcxIIusIz58aHqZ06z2HTnzF0EzKkF52koq_0m7-ioWjpVVFCoMnfxJFt07KbJEyyft177cTU7nFzGZxDMJ_ThLel-WpE1Z_50ZxtxZEt1lHj2HbJYwfumBuGvwTxF3ClypSfRsZifvFBOMbWaiCex5gfR4G-NudPPMmBpA3Cr5d_A_4yQtWs7sOdZmo5fk1e6pAxsd1vZLz-H6HyqREXHWAzyDw7KjZiBD-s0lGckEIPL_N6KsZAPz1juqRNr0GY-0Qr9lHIXeb7qbfwl6hF-RMxfAbWl1WnKvkYsZEBbu94hqibCcwpLQygKIe1Xh0W6uJV8gwhkYVxF5j9UeFQtM4IlxeAwf8VdF7ZIscMSaSeqx8ba0QGtV2L5XKKyNljOpp3THuSNX4FmzapGL1IdQaI21ZCoSeNK5ltsNvrR3mqxWZBVOl3UgHwHBnJDCcb7WSB2JQMHCqrjnLw0kK7CvZKx8iXvFrdT0pUbBJWbMrIWxy-eE28AceI94eyZFpqzjpTtFpvdLabn0uJSr48X6NZc3bzqYrxNRFS9OpIq39RXb2ohMdNbaaw0DMJ25nmzQFVV5iXZicF58C3sNv0QEqvZQoechsENZG2OfRAxBfCWYy6Fx7FUjJ8BvltvedhzVhr6Pz-KpgMhaSoSrlpPFOf4YS5tg-bCVLyJhluyQPhfN2laLBVY_iQfNJ5snAfR_l7TAyZrlULurtQKTigooiIUi6xQL8zGuRZqNReFFX9U4_TwDSik9gW2J8A%3D\u0026uniformat=true\u0026callback=Ya%5B4349765958866%5D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-ads-loadaverage: 0.156863\r\ncontent-type: text/html; charset=windows-1251\r\nx-ads-degradation: 0.000000\r\naccess-control-allow-credentials: true\r\nlast-modified: Fri, 03 Oct 2025 22:34:58 GMT\r\nx-xss-protection: 1; mode=block\r\nset-cookie: yuidss=5006149621759530898; domain=yandex.ru; path=/; expires=Mon, 01-Oct-2035 22:34:58 GMT; SameSite=None; Secure\nbh=YJKfgccGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 07 Nov 2026 22:34:58 GMT; SameSite=None; Secure\ni=BikESba7pDoLZ8Q4mGduRxaEgyecLMacJmgoEsMTl9k/2AUmMpZ0bsY6srzRbvXsUf9bEsWH4OGeuVtItsURW4z1w2I=; Expires=Sun, 03-Oct-2027 22:34:58 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=2395707881759530898; Expires=Sun, 03-Oct-2027 22:34:58 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=2209691971759530898; Path=/; Domain=.yandex.ru; Expires=Sat, 03 Oct 2026 22:34:58 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YJKfgccGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 07 Nov 2026 22:34:58 GMT; SameSite=None; Secure\r\nx-ads-queuetime: 0.072000\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://vh454.timeweb.ru\r\nx-ads-service-name: yabs-server.partner.meta\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ntiming-allow-origin: *\r\npragma: no-cache\r\ndate: Fri, 03 Oct 2025 22:34:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests; default-src 'none'; base-uri 'none'; script-src 'report-sample' 'unsafe-inline' 'self' yandex.ru an.yandex.ru api-maps.yandex.ru mc.yandex.ru yastatic.net pcode.yads.tech *.maps.yandex.net; style-src 'unsafe-inline' yastatic.net; img-src 'self' data: avatars.mds.yandex.net favicon.yandex.net *.captcha.yandex.net yastatic.net *.maps.yandex.net *.yandex.ru avatars.yads.tech; media-src blob: strm.yandex.ru *.strm.yandex.net; font-src yastatic.net; connect-src 'self' blob: abs.yandex.ru an.yandex.ru yandex.ru mc.yandex.ru yastatic.net log.strm.yandex.ru display.yads.tech display-logs.yads.tech; frame-src yandexadexchange.net yandex.ru an.yandex.ru; report-uri https://csp.yandex.net/csp?from=yabs\u0026project=yabs\u0026yandex_login=\u0026platform=\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nexpires: Fri, 03 Oct 2025 22:34:58 GMT\r\nx-yandex-req-id: 1759530898330746-14083134039139570788-balancer-l7leveler-kubr-yp-vla-19-BAL\r\nx-ads-loadaverageonarrival: 0.117647\r\ncontent-encoding: gzip\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":31,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"exported SGML document, ASCII text, with no line terminators","md5":"5841966606202bdfbe74e1ebbd3c90d5","sha1":"dc161c51eded3d1856606e25487ad86d6150b564","sha256":"7979e62bc495dc69dc0ad02ba27cf9d9c7eab30fca0f6823856e02400d2b2bb7","sha512":"79a33e7047659ab500231216ba8c0799ca8bfb3e9c235e889e1914a3ef9145e4b758af8c220f3925f7156cbc8d52cdf94c0fabc42765b19da8ddf6dd04c92667","ssdeep":"","tlshash":"3f8000eea8a3032aa082a0b0328080288088a2203bc02eb38008a0cb20080f03808288","first_seen":"2023-04-05T10:30:39Z","last_seen":"2026-03-02T18:43:05.259766Z","times_seen":1353,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vh454.timeweb.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:57:53 GMT\r\nexpires: Fri, 02 Oct 2026 12:57:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121024\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T01:11:31.50919Z","times_seen":871742,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":103,"dns":0,"connect":8,"send":0,"wait":7,"receive":2,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vh454.timeweb.ru/favicon.ico","fqdn":"vh454.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.96.105","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru","date":"2025-10-03T22:34:57.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vh454.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vh454.timeweb.ru/blocked/?ref=ci06001-wordpress-uh640.tw1.ru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.3\r\nDate: Fri, 03 Oct 2025 22:34:57 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Fri, 05 Sep 2025 12:40:22 GMT\r\nETag: \"47e-63e0d24243581\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"eec13f2e140862aad59b1fe0ae1b9d3e","sha1":"39e8d83911496941d8f0aa06f922447e2c4469f9","sha256":"f951dd4c6dc3802b07cdb7fcccd5eab1302cbecfbb4cfe79713dc83a20cc1839","sha512":"6a0a1a307f273beea6030268cf35161735607a91be580122fde6d23c0e9117066b37cd5483ba5aaebb4d7702df00431bb9a2f265673778448cb3e553d3e69efe","ssdeep":"","tlshash":"5821468f61cc8228c007e27181335ea961c18b7682f3ca1ec4172dc77ea308ebc82604","first_seen":"2023-04-30T22:01:58Z","last_seen":"2026-06-06T23:49:56.109858Z","times_seen":2344,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}