{"report_id":"5b86f096-000a-4a98-8208-eaf0eca86138","version":6,"status":"done","tags":[],"date":"2023-08-26T08:47:27Z","url":{"schema":"http","addr":"z.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"z.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":0,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"final":{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"title":"نتائج البحث: \u0026quot;افلام ديزني\u0026quot;"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T08:25:21Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"millierinlaces.com","ip":{"addr":"142.91.159.188","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"domain_registered":"2023-06-12","domain_rank":0,"first_seen":"2023-06-12 13:37:12","last_seen":"2023-08-25 04:19:34","alert_count":0,"request_count":1,"received_data":1124,"sent_data":405,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04 10:54:57","last_seen":"2023-08-25 10:57:45","alert_count":0,"request_count":1,"received_data":743,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tzegilo.com","ip":{"addr":"104.21.22.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":0,"first_seen":"2022-01-14 16:27:15","last_seen":"2023-08-25 20:44:18","alert_count":0,"request_count":1,"received_data":18284,"sent_data":399,"comment":"","tags":null,"fingerprints":null},{"fqdn":"z.mycima.cc","ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2022-06-21","domain_rank":0,"first_seen":"2023-03-05 12:56:28","last_seen":"2023-08-23 04:27:45","alert_count":0,"request_count":1,"received_data":1143,"sent_data":539,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-08-25 18:12:04","alert_count":0,"request_count":8,"received_data":5596,"sent_data":2664,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.sectigo.com","ip":{"addr":"104.18.15.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-16","domain_rank":487,"first_seen":"2019-11-29 12:50:24","last_seen":"2023-08-26 02:00:15","alert_count":0,"request_count":1,"received_data":963,"sent_data":330,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-08-26 04:42:41","alert_count":0,"request_count":3,"received_data":65377,"sent_data":1579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2013-08-16 11:51:31","last_seen":"2023-08-26 05:28:47","alert_count":0,"request_count":1,"received_data":34491,"sent_data":432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-08-26 04:41:04","alert_count":0,"request_count":2,"received_data":127404,"sent_data":882,"comment":"","tags":null,"fingerprints":null},{"fqdn":"offerimage.com","ip":{"addr":"104.22.33.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-06-10","domain_rank":304078,"first_seen":"2019-06-10 13:11:53","last_seen":"2023-08-25 18:12:58","alert_count":0,"request_count":1,"received_data":13521,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-08-26 00:58:04","alert_count":0,"request_count":2,"received_data":23988,"sent_data":897,"comment":"","tags":null,"fingerprints":null},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":3413,"first_seen":"2012-09-07 17:11:00","last_seen":"2023-08-26 05:22:11","alert_count":0,"request_count":3,"received_data":136232,"sent_data":1453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"goomaphy.com","ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-07-21","domain_rank":0,"first_seen":"2022-07-22 21:39:03","last_seen":"2023-08-24 10:45:18","alert_count":0,"request_count":4,"received_data":107974,"sent_data":3600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.254","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":0,"first_seen":"2022-01-14 23:55:14","last_seen":"2023-08-25 18:13:02","alert_count":0,"request_count":1,"received_data":482,"sent_data":527,"comment":"","tags":null,"fingerprints":null},{"fqdn":"eptougry.net","ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-05-02","domain_rank":0,"first_seen":"2023-05-02 18:04:33","last_seen":"2023-08-25 10:17:41","alert_count":0,"request_count":3,"received_data":83447,"sent_data":2161,"comment":"","tags":null,"fingerprints":null},{"fqdn":"we12.mycima.cc","ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"domain_registered":"2022-06-21","domain_rank":0,"first_seen":"2023-08-23 02:28:39","last_seen":"2023-08-25 12:04:25","alert_count":0,"request_count":27,"received_data":308858,"sent_data":15493,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"69.16.175.10","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-08-26 05:11:29","alert_count":0,"request_count":1,"received_data":3519,"sent_data":418,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:58Z","timestamp":1693039618,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33989,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:58.751842+0000\",\"flow_id\":1310148568185058,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":33989,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":57735,\"rrname\":\"z.mycima.cc\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":82,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:58.751842+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:58Z","timestamp":1693039618,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51443,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:58.752010+0000\",\"flow_id\":462463757875594,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":51443,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":59654,\"rrname\":\"z.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":82,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:58.752010+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:58Z","timestamp":1693039618,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:58.753943+0000\",\"flow_id\":1496069112496407,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":49126,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":20552,\"rrname\":\"mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":80,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:58.753943+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:58Z","timestamp":1693039618,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":41759,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:58.781384+0000\",\"flow_id\":1659191970425928,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":41759,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":13129,\"rrname\":\"mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":80,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:58.781384+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:58Z","timestamp":1693039618,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49186,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:58.947087+0000\",\"flow_id\":1637815918162831,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":49186,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":25102,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:58.947087+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:58Z","timestamp":1693039618,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51992,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:58.947286+0000\",\"flow_id\":278347099829334,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":51992,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":46845,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:58.947286+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44846,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.681713+0000\",\"flow_id\":2041186361763569,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":44846,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":29182,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.681713+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.683275+0000\",\"flow_id\":1671028900326667,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":52130,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":8616,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.683275+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":40736,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.684694+0000\",\"flow_id\":383049812636310,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":40736,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":59408,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.684694+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":42736,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.686591+0000\",\"flow_id\":1996961083521535,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":42736,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":41048,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.686591+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":34967,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.695688+0000\",\"flow_id\":458791560912264,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":34967,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":44948,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.695688+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":39139,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.696551+0000\",\"flow_id\":188414779695335,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":39139,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":14779,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.696551+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":57744,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.697742+0000\",\"flow_id\":92954836575630,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":57744,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":64599,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.697742+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43242,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.699091+0000\",\"flow_id\":1339186842151635,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":43242,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":47595,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.699091+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35255,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.707635+0000\",\"flow_id\":1072108595825715,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":35255,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":6499,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.707635+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55247,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.712309+0000\",\"flow_id\":1898430238809717,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":55247,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":35912,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.712309+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53057,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.713851+0000\",\"flow_id\":930348905260155,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":53057,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":53438,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.713851+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60289,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.714708+0000\",\"flow_id\":640782210164692,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":60289,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":48158,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.714708+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":58370,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.715412+0000\",\"flow_id\":1457577615682196,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":58370,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":4002,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.715412+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":34476,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.716265+0000\",\"flow_id\":575060620602857,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":34476,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":36607,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.716265+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53605,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.717035+0000\",\"flow_id\":500233700372715,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":53605,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":46848,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.717035+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53785,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.717664+0000\",\"flow_id\":1928417700475744,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":53785,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":58978,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.717664+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":52203,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.718206+0000\",\"flow_id\":339808081933694,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":52203,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":52242,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.718206+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46920,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.718659+0000\",\"flow_id\":2099267204544323,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":46920,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":28038,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.718659+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:46:59Z","timestamp":1693039619,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35834,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:46:59.720307+0000\",\"flow_id\":1116342464019891,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":35834,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":56196,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:46:59.720307+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:47:00Z","timestamp":1693039620,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55498,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:47:00.926809+0000\",\"flow_id\":928785537180761,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":55498,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":63141,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:47:00.926809+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:47:00Z","timestamp":1693039620,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60709,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:47:00.941057+0000\",\"flow_id\":1186436330314753,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":60709,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":5839,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:47:00.941057+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:47:03Z","timestamp":1693039623,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33579,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:47:03.867935+0000\",\"flow_id\":964133118230111,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":33579,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":62435,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:47:03.867935+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-26T08:47:03Z","timestamp":1693039623,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50018,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query for .cc TLD","source":"{\"timestamp\":\"2023-08-26T08:47:03.870162+0000\",\"flow_id\":983331622045458,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.198\",\"src_port\":50018,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027758,\"rev\":5,\"signature\":\"ET DNS Query for .cc TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_07_26\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"DNS\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":473,\"rrname\":\"we12.mycima.cc\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":85,\"bytes_toclient\":0,\"start\":\"2023-08-26T08:47:03.870162+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-04-08T07:53:13.31538Z","times_seen":20811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/melody.dev.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3bde81760af5b3df4d0c56ba06a0fca","sha1":"ecf2f46def386ad8f62fad28edc36c8440f339cc","sha256":"c6f149f7dcbe38ff7b1391b1fab3462f06309f79df7bf9135ba1e75b13189af8","sha512":"7b8e060be27ba820f50b8905cabc32507f821d5dc8ca768cfcd26521ee90568fc5b4e43181f08b587eec7e6be5c201679a7cb1a8ce8fc3976a1159a4b423f95c","ssdeep":"192:t6GwoGJqJEO8dwHJbLDyKeonOOQMugBBtwCFztbRbJwlywfWbJwlywz:cglHJbHzTnOObzt9KA5KAw","tlshash":"d112433c667d33794c96377a245b804415afec17b20282707e1c7c88d7ede89e661e9a","size":7961,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.052396Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.readmore.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"081fe3d90aad9b9f11e4b1c0569530df","sha1":"ff566498ce6f25f4a3b28c0e2bb92b6b86fea6ed","sha256":"98e825583e6fb4f7e8a65f9063fb7ea2d34aee8f9aa480dfee285ea27f4fca02","sha512":"cf242d2562e01ce001f00b847c0855d090f3c2883ede50cb65298cad502e2ae1fa6648a16eab883bdac88e2cdbe0366f4dcad0967bf3cf0e02ef979bf7f2b2f7","ssdeep":"","tlshash":"2a71cc69731bf641c4ab60e3301f434e5633e129865680407b76daedee7c8593863a7e","size":3430,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:48.953809Z","times_seen":321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"621f2e2cf756723d8229048bd2932ccc","sha1":"ef8e007f6dc64eee38f4c17aa355b487db5ddb9a","sha256":"81c28d6a64fe4f2c04ce0b4d85d465047d2bed4e6c374c2fdb263f2bdbff98c9","sha512":"cbda5244b469cf2d4740ade4a1b82c236f53e12bf4503df737571eceadff7d5fc7f36a7f340ebf73f8664d6d2a6c95d0a590bc8d4fcfb9684eaecd7f58dfdc81","ssdeep":"","tlshash":"ffc04ce7a03a412e463050dae41ee1d7bf6ef41ddd88800fe88dcd02e4508ba376e54c","size":173,"data":"","first_seen":"2024-08-21T08:02:16.716313Z","last_seen":"2024-08-21T08:02:16.716313Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GA_MEASUREMENT_ID","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7e597a5f7924af930209a0d3babe16","sha1":"7a5ed81dcd577c08d80967daa76411abb36f2785","sha256":"51e8b6a63866c6f3c1372f5375385344222590318a7abb8c968c9802928a72b9","sha512":"8ae562a1dcd9c7d7876f44f7595b6209c07bd392e839a059e6d4c0a5e4362757b853fa8875278eb67ed650fd9d805d35295032d4ed6222e0c44d40407d312eaa","ssdeep":"1536:Hyqnvz3puep9lhNjbv0rKhfVBaOUr2uTrLMLOel5t3r3klEysFfhtAK:HyAr3p5R3v0r0vuTrAKel5t3r0lEV","tlshash":"86b3e8d9b3c77166d3a2b4b8513f010bb27a6e92f84cdc94e145c8c42eb8699417bf6c","size":110117,"data":"","first_seen":"2023-08-26T10:47:29Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f48799c490867e10bf3fff06b38a3657","sha1":"06d3e0bf82b5259b96e54c501ca2fb9b1f503ebf","sha256":"5936461d2e0d0feabaae55dda4e14f6e68fe759a2a8ef4350b5de96be8a111ac","sha512":"81ce62389f171c3bc0ff5c48652182acd869ac363225ae137e1bcae5dee90fda72ea6b9dfe95d8a5e1800c47051e02686c34fe9c191f59f6aff1a1d014b24ec3","ssdeep":"","tlshash":"f9312e0903428a310ec324d39acde0d7aee400eab99bc8117429b8691bcfbcc00df196","size":1824,"data":"","first_seen":"2023-04-07T18:47:55Z","last_seen":"2026-03-17T22:47:47.951442Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abda843684d022f3bc22bc83927fe05f","sha1":"26908395e7a9a4eab607d80aa50a81d65f3017cb","sha256":"24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f","sha512":"3f1b46e9ea0fb6be507605a2783af406c6b4f885dedaa4401bff204b0fe9056656717411021594e2512e98a4e398e3238267a7deafeba1b57e443decab0477ea","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc","tlshash":"43e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","size":31819,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-08T07:01:29.863662Z","times_seen":7203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.plugins.a.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d30d39ea7362e56afcdb14c1919e36b6","sha1":"3d8ad768ea89003210bea45e8aacd038bae1ecf1","sha256":"a01674489d3ae093a5909246b27d46e09a6f49bc6834094f5febfa056910e0e5","sha512":"e150975ba628ff73f1a84d94d9ee2f1473d881e0631731b0ea779d6b92e31708d4cd35ef22d421f590466a04ddb960f77c7f91fd3eecdf29a6c31e7f03c2a6af","ssdeep":"192:MUj/PvqWHEFDhiCQVNypl63vhjy3TNycRK:MU7H9cQXaD63U3TxK","tlshash":"0f2274687142732106ef60a6d1bf96df5231b3395b0b80d090d0fadee93a47547e3d99","size":9805,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.098093Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/js/bootstrap-notify.min.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ba070af9d1b1a2782851940de30879f","sha1":"d33390fc88bf68bd23eb182d7dbc77f5227081b2","sha256":"a13a07b242c80b57e0cbbacc6cfedb538d4d331ff1f9dff370519ec57407e450","sha512":"3d793cb731b6a060ea4b68dd622b76ee0db7f1ca5536fd4b4831b6f586c8f4f6634fcfc64d7dd93e85298225e9a4aba6d9d44ca3d8fabc2dfd365a02df60abe0","ssdeep":"96:gLeUHuB8i2j1IJTG8x8lMRXEbNF1iVXdJwcuUB4SIdXhgIR5thvoPrrOLKYZ1:OjHuei2ZIJTUlYXcNi1zwib8","tlshash":"0e02548eb11aa259464bd6b3905e0300a537b614a51bf53c3e3ac4eaf9b4dfc22177f1","size":8216,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:48.911864Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jasny-bootstrap.min.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b6e524d29d54ada53e4172b9d91cf7","sha1":"427153c7a2d83d2ca800e397779f29b857801ad2","sha256":"e7ad856551c720cb7c6a24a8bf4a9d6b6b24c24f07109cde96366338e53a4ff8","sha512":"13c01f28dd38a2b10ce27bc4dc60d510b2067e408ba1c0a26b0eb7fd39dd4300265278d529925e56d40bdc06a32d024558ca10a20d1ced6c186cc9ac263cc36d","ssdeep":"384:rKLCtf00Rd7HyeSOjjWhuU4AHL6JLeUxVM1MJsisNV+bocACk3N7K1nj:rbR00DHyNOjKhuVAWLxA1MJsisNV+boo","tlshash":"4e92664579b0225903ffa17601db4749f336eb28984a411cb4789ad76e39d0a72bbf3c","size":20042,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:48.902842Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goomaphy.com/401/6219621","fqdn":"goomaphy.com","domain":"goomaphy.com","tld":"com"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4750d506cbe4e6c38c0ca0b581ca8f7","sha1":"e17a4ee61581f0b8303df44c8e0eae03201e64fb","sha256":"d692fe2de1752a462efeac52f6430ff07f74b2bce4bc3c0bf06c7c2f867f21a7","sha512":"afcb05d753c72b4f7624de2c69d176ac289de986aac1f69021816f63da2ab7016cd00d629ecae7eb70c95c449f4a028a0ca6cb7007101f06c5eb26d0839e3bb9","ssdeep":"1536:Gsfsbp1rFlIByHkmJdhI3qay+4pw3DlM2Zos:GfXroqBbw3BhZos","tlshash":"da938285b5d570d52b5b54230aaf7136a23a7030ff0b8170a83ea6d97b3145ff2a6cd8","size":90641,"data":"","first_seen":"2023-08-26T10:47:29Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"46b256492e5a9113be7522341c978ed3","sha1":"31fe4598ef6ff326b0a3ad2c24e9e1aa0f952f16","sha256":"3a523495841a30353a9e39aadae46c8e687b1e82e7380b1c2259fc76ba8439fd","sha512":"2cf723bc2b321950e0f84ccb8c7e2e379c7257d2d9ce02e669c9e864951d74988ad9ed6b6622fc04588702fc831a48f03df4c9d8072d1d6fcd34ce422d47c1bd","ssdeep":"","tlshash":"ede0ab2d98e706384cf63a441038ca3930f878a0aaa3d017525cc82cce39fc54c00aec","size":424,"data":"","first_seen":"2023-03-14T09:22:39Z","last_seen":"2024-08-21T08:04:43.938276Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a604d1494e55df24ad7c62a30cc0f058","sha1":"baec845d909270888dbcde8945d9ed24c8b53fba","sha256":"5ed57bccec3ae6d6233648e109470a51ab1afb262a3daf1d177aaf86b8a86b19","sha512":"19b0b3fe9e8f5cd8b4b27c9a14b215e771586768fedc48d38eea0c805b0bfda577c00a5655297695ba85eeb53e8a39edceda04867f6bc3dd2f0a129a79a1eb38","ssdeep":"","tlshash":"38c08038b5a5c560006d444df173d75d7db311543d932441889e8f4c5870ec50851cf9","size":176,"data":"","first_seen":"2023-08-25T21:17:28Z","last_seen":"2024-10-23T22:55:53.504867Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3d5e7ae44ebf7eec435c9325b6f676f","sha1":"8b6342ac0b9b097678cb23ae693917b91090b944","sha256":"6dab04cf1ed42a5675ee85fc766f21ccf9386c3e61f9081987b6de3ec7e7f23b","sha512":"5b005cc0eb966d2f33b5a73649d37bc6cc5f0fb2cf7232daae7d64d16015dd4318acdccbd7b4fef7836668839c44905b62504cd6a4618a34fe7479f8bfc1ea73","ssdeep":"","tlshash":"87718548f752242b617770fa4abf1706673a6012db07ac64b17e088d0bd7f38235b8a7","size":3483,"data":"","first_seen":"2023-03-07T13:15:21Z","last_seen":"2026-04-05T17:31:33.191276Z","times_seen":321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"69.16.175.10","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"192:TOS9bd8w/5v0ZQQWJjl0L6DvBdVp8h15/:TOgh8w/5v9DplPD5dq15/","tlshash":"d5e1a6dc729ab1611afb30b8a03bd12fb2b259dd19195164f08ccde9742cc6c4236b7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-08T07:22:49.156123Z","times_seen":19954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eptougry.net/5/6205538","fqdn":"eptougry.net","domain":"eptougry.net","tld":"net"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcc3feaba62bba76284961e8173174e9","sha1":"f5e753f74f98b81e0940a8e0057c0799494b8baf","sha256":"58cd3ceac413608afed20bdb0c92990aee51289feb06187be05b002ee717331a","sha512":"4a9fcd6da09f5e19820e58adc2f7b924070e6e8ca831945facf708cdc45b6d77bbaa039d08198feb18c5172127aae1d41095aa241226f7f03b926c9634148290","ssdeep":"1536:JKdYTTzm60R36wRAaHdLDBgPPyN2A/UoaYgtdKQVeYqgl:kdYjm6k36QUVXuYt","tlshash":"0463d48cb2a5703592a721b9613fa219b337692968094410b52fd8c03f3de4f9377fad","size":67434,"data":"","first_seen":"2023-08-25T21:17:28Z","last_seen":"2024-08-21T08:04:43.895132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/js/jquery.typewatch.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6915a93382a7b35f40987fd648b43f9d","sha1":"b78c77cc774594df414a7b1fb99c28083d85bb80","sha256":"1836dba8922ca00f9ac170122f314b2cd7bbb2eba09c73d8bce215597bd9cd2b","sha512":"e88f5e62ae04a867b1b5ba979e2b653cab8348167c37cf897856d13558114dca318ac33b2c07d611ad3559014c57e60b847823421a46649a47f5328720eceac4","ssdeep":"","tlshash":"cf31254c7212f29947f267f7ea761eef372ae36869001180316491d0e434a6f53e7bd4","size":1745,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-04-05T19:34:48.925276Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"29727d13fa2a206a7cc92a101c29ab33","sha1":"647b9b2f5532aaee7217e70850589ad673938fcb","sha256":"42ee5f253d773ac3a83d1fc0d0f922a4c502f66dddfb591593129586c4f2725a","sha512":"5917cf75cc80fb72cddea8cbbba81512d053c8cd265f38c81db939dbe3afe1d9bf4c81ca8ad387743873436144cd57b1f55d79f353be00b851b7a6e220e89b83","ssdeep":"","tlshash":"61c0227079dc5639807a71241dfea204ae1ba910b83a2140e02ca0b146ae63822b2c10","size":190,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-04-05T17:31:33.194184Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VSQY3XNP44\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3af489b50c79064e3a2055fc9f25b79b","sha1":"0810df2d1857c133ccdaa5624eecc6d7ccb0d451","sha256":"0df6dbc26d0f9cae8f54f0816a4f40865e2991bf0c93cc6bd223b5cae589e70e","sha512":"c6b162e2e0937351356ad8fc4d081b3e47bbdf4b30dfdc9876acfb2d44b913fb834d819b5852f3cd86f72a4362d2cece69a6f5aaf57d8eae98539d8958b270c0","ssdeep":"6144:8DQbEmbyGlt59rA1RW2eUMRroyX78WPRS8Z1:8kYmbyGl+ZyX78WPRp","tlshash":"aa3408d973c3706682a6f479503f014be5bb6da2b44ccc98e189c9d01eb8a99417bf7c","size":240923,"data":"","first_seen":"2023-08-26T10:47:29Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bc2250f798e8dd30269772ee8cf4599","sha1":"3fb3ed5ea1a5c052fa3c26e45d4abd3e722b9700","sha256":"cda4eff9500a8b16f33a54c6cd1ce7d2ec3bf66cecddb63d9c736078916c5035","sha512":"3e8e0117e5160dcad1084a50b83f5226f5a9ac659d3e3dd68995bc2706b8c2ae482c3ce2692bab223ad149137a58d792df16a2c996bafd328280806b31ff1a4d","ssdeep":"","tlshash":"fa319946f72c1977663a14ab1c1930cc913e49b52c0426e7fcdc26a45d98f28c3ea99b","size":1833,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-04-05T17:31:33.19502Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b5c6ecfd31b214438c017f7840cab7d","sha1":"5b0d464bbab33735e654f6d0b47dd2bcd47f8e5c","sha256":"e0d679f66eea8fae589016f89ff238618cabb4b802add68fcbf4d70498356ea1","sha512":"c5bcf7b3ad3cd5e65ef4a944e7430ef7a9483af6f499f7e9359146112442aaa246c69fc09c9fd3d7eb0326eebb4b72d90859897d869d06b299c8b0b835473a7b","ssdeep":"","tlshash":"dad07d80ecfd56010a7b75392c79ef8f923331011f03451156a9281f4e84bc7b163475","size":291,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.196653Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"901d05a394689754b24c53a14ff0bb94","sha1":"16e6750d0db26beda439d20147af2cdf6ee85f6c","sha256":"c8d34bfa528cee7507080fac65baab9a6eacb046b4c097cc3201ff3bba0d09c1","sha512":"4ee2e549e7bf56480b4d2ffcbd59903b4f9f55ee6ee6b15ac161d70b08297ae3662e91f1cfdd2c6832601a30079245c722674147287d384efdcbe158048e63b9","ssdeep":"","tlshash":"44d0a738fc7da01104bd38ba38f74d487a36387020032845447c96e45b9aea44581c15","size":216,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:49.022054Z","times_seen":457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"millierinlaces.com/1clkn/55455","fqdn":"millierinlaces.com","domain":"millierinlaces.com","tld":"com"},"ip":{"addr":"142.91.159.188","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"985000300000000000000000f0c000003c00000000000c00c0000c0000000000000300","size":6,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-08T07:49:36.779684Z","times_seen":15836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.22.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd2f9f2bb1e1c74b905556d0a7bc5545","sha1":"0c831c8c56da8167b9e2dfd1d3eb3288348da85d","sha256":"63f957dde1ae04a83eaff7e442e693725562c4aa1062bc072b7509640ec4f663","sha512":"0ec8da6696e5c139d48e67fa800cf152fb610ea91911314a4948bfff38c23b49c02c544aeaedf428d8bea2e1abf599b9221597fe6bb251ed76962e6209d38478","ssdeep":"384:6i753sKV8sWO5SM6gWahT8s6qCVUggmWZKKKD6KDnkC0GR5:rBOsWTSht8sUU1m4ODyGv","tlshash":"9d72c9c6711c7de65ea06033477f276dab6b9990f47f81b280a278a47a3054bf643dc2","size":17479,"data":"","first_seen":"2023-05-22T16:37:35Z","last_seen":"2023-09-06T23:37:01Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.plugins.b.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"443045e7fcb603ba92e473b0ec11d2b2","sha1":"8d9dd41c01b0f2738d6bd1a3984095570bbeb0df","sha256":"8084ff37c531acc28e0fa45ecb19d9a3c846a91f1b2e101801a9dada0cd31702","sha512":"995f65923b7ceb647c7b81b71d6e9c2f169e27a9b9c2e38476eeb4c7cd6931823a0825cfe344409f39096421d403ed0096eef957da48c6789052ccc120f089d0","ssdeep":"192:mraMEp1jlgIyVUUrIK+3J0q6MDTKUVn83Y:mr+SI+jmaGTxn/","tlshash":"d912e8a833427405517a952d102fed1ff3225915c48a4050a258e9adfff9cae3b63faa","size":9535,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.14884Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"86a6965e541a781a37d669b260561c55","sha1":"d507b1712d0947c35ca109d78453ad0706543594","sha256":"d08064727885699b455486366ac7a1b6e9e298d7cb1d94d4e491088d0bb8ab94","sha512":"083bdf45ad8995c0ec36c921ed717a940848bf6490fb897aa3a9a9d98be61fe38d2f4284960bd6863558a922318a7a42ec756dbbda4a3e1511e1fb28ea3a15dc","ssdeep":"","tlshash":"a3f0270ab2a4993780b231885a5a4bf9766854cee508183230a8d78d1371dd4a2babb6","size":439,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:49.024853Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/theme.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8176b4cb2798d51558fe707c55d7fbb","sha1":"2d49a0b8afb91121d20469c210566fb8d21e82d6","sha256":"497a2c9b733f23e5ec7ba08698be68a7cc7c121213e78be6a9db5ceb3943b8c9","sha512":"35bdf908dd7eeb6cbd0c3d6f746e3ef87b992bb188e16f4ccc4966c26c774086f866dd603978d9dbdc65fe3488c4bdd3346c78daad3b39da835f8d34a1514811","ssdeep":"768:sdsHXBe1s4RPwBTlttO81x93OD4JdbNC6vALeqny+C3s1pR7T8I5HDwLYPLAWyCt:sdS4D4JdbNzvweqny+CQpmeHMYPLNxn","tlshash":"4313ea883182b12787f761f5a05f620bb172a9a5a04da43df579d4d1bef4e881123ff8","size":44830,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.070917Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0f0b5b79e9f10c796e8a416e57dd2d","sha1":"acca3a159098bbc8a6313d6f496cfeef362c3171","sha256":"452c276bbd878d6970a8f3a2b5ebea89fcc866c5aa58e5e56afcdc9c53c2b78f","sha512":"e27276b5b768d17d9973211aed03b558904dc0b9d04d39390bfe27493d783c5c64f98dd6b676bfad19f0060eab18fd0ef3d4ffb492b0353585c3b09253e7fcf6","ssdeep":"96:u+cdSxFAl+7furhwsTulBaahwlXYDIxCrh6sTuDHO65:uXdSxFAl+7mrhNulbwlXYDIxCrhzuD/","tlshash":"bab1b909ff7a4a9b996b316075dfb1ca435f6972f30b0e1afe215c1c12e4562e063a06","size":5271,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-04-05T19:34:49.035041Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a33472397f886fcb3563c05e3d3b2a3e","sha1":"69a1391e6eb1b5a70ebf9cd6cb75140f7d52b31f","sha256":"2e05173f926dcf805c7ad1a037cd22d1c0151fe1b06d766dced7c7b0466148f8","sha512":"6d387066b3b319b68ea316155c6f1e67e5e593dedd47d2b110c37bb253980bfbefea3eaa728194a435870064754c598a39a30ea1fbcd74f8884c1daff4d3b97c","ssdeep":"","tlshash":"20c02b8c211b0cb050f763008f3fb704f00233289ad05d31480b2348de30e03d788850","size":160,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-02-26T14:03:54.787738Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T07:38:16.649537Z","times_seen":13494560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/js/melody.dev.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e238acf58475d3cdb95d614582134b24","sha1":"b13c1da1f5254cb14f4f187bd5174ed0feb08a23","sha256":"f3a4cbf3a8090b121a0d6d6dd8feda9f92831cdb5a070a7eb9ef58234c1f4eab","sha512":"7209c4cb8692e5a1fce4c6bad8081361c857d45b179b935a7291b0682c514409584e10b29bb56905dafd5d3dc8831d82c78cf9895c7b59ac2239552f6abf1f2b","ssdeep":"384:krC7SV8zve0Nfenff87NLRld9gTSOW6VUH:krC7+860lRLRGTdK","tlshash":"f5a25405f2ed1e6600b334360cafa4853a3c99b798048d59fd5d21e85f6cb7ca972f4a","size":23108,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-04-05T19:34:48.911236Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.cropit.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd82e0edbcecf087be901e8e7ed0d035","sha1":"2cedce9f87501152efa36eb1949d95c0ca4ff200","sha256":"b8a0d09df5a79e5e9494b3061eeff55883870c66714879886348c5095faa7840","sha512":"972ad1b4fe72296e7123bebe0c1e18aaf1fe1617ed41762b0e0b3afc9a7e58c0a4f9e5354094808d94bcebcd8f7c1d12b9c794ae17c47bc9cb3586ca9899193f","ssdeep":"384:b4Ku+vsSCLma/KSUOW5Gur0433Pfmoz8DKNzmavSbnCIjcIOHinWK0inVcaTJX5s:XWmaiSO5Gu/wemaybVtPJXm","tlshash":"4fc2b4193ba1367742a7f1a0760f800c1275e975e446e38cb638d8fa9af18148a77f76","size":27578,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-04-05T19:34:49.004228Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"z.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"z.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-26T08:46:58.784Z","timestamp":1693039618784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A HTTP/1.1\r\nHost: z.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 707\r\ndate: Sat, 26 Aug 2023 08:47:07 GMT\r\nserver: LiteSpeed\r\nlocation: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":707,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"1304294c0823ca486542ba408ed761e3","sha1":"b2a70fb2d810ca13985882e6981f33998823e83e","sha256":"3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982","sha512":"67430e967118d2b2d8a448c583bde082bf512da88eae75b0501ec5a6c2b0bf46936306317bd3ddd956c5c6e01fe0c7dbed43927588efba06c5f84d8a557f7b8b","ssdeep":"","tlshash":"f4011039c351a80ae0132640f951e66021984252638b1f2167feb766f1ce1b35e723cc","first_seen":"2023-04-05T03:11:10Z","last_seen":"2025-02-27T11:25:48.032717Z","times_seen":11406,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":69,"dns":1,"connect":32,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-26T08:46:58.958Z","timestamp":1693039618958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 10918\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10918,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10637), with CRLF, LF line terminators","md5":"683a5b77343a1ecab0f8038b39c92f4c","sha1":"82211162de2bed0cc1afebe1b3db8fac7bf39d2d","sha256":"f8196073a6b88435b6101de0bb9428eaa333bf811d8654184e27aefed08fa5e9","sha512":"fddddc55314d6b8b35036756718941b3897d88cff806c6198b85cb532f8d063b77e704f9193bba37c93660ac0ca89825a382ccccd2e57db2af19a956bf7d77c5","ssdeep":"1536:vcOH8ofS0CcIjg8jCAgQE3E/jYEmEocslqp2pQ46QTF0bKvEyvG2Z:vcOH8ofS0CcIjg8jCAgQE3E/8EmEoc6p","tlshash":"e56385a6b82c4437070391c2b069794de99fac3bc6578d01b1ee5c1bafc6ee5612f42d","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":295,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/bootstrap.min.css","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.722Z","timestamp":1693039619722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/bootstrap.min.css HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Apr 2019 09:05:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18184\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18184,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65360), with CRLF line terminators","md5":"057c5534becfdb2d50350cbacfb8fa8c","sha1":"aee8eea23cc9ade1f7e3de672f57a9f79e9e1516","sha256":"00cce1553100d450fad1142957e5a2c793a1c5ba7877f5a119c704eb6acc1313","sha512":"f705ef7a7222f0348bb70dc451afa475dfe8f53d3f2d1908524789f7cade4fe6e425b1689c47e7155db535e20008a36349a974c7ce161188017df032c35ca033","ssdeep":"768:m5Gxw/jc/+WlJxtQ8IuiHlsLmzI4X8OAduFKbv2ctg2Bd8JP7ec8VvH1F1:Jw/oXBIuiHlsLmN8lDbNmPbW","tlshash":"c0c3c7a0f21031ea7333c55a75d0ed872219a153e66a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-04-05T17:31:33.055386Z","times_seen":226,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/jasny-bootstrap.min.css","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.725Z","timestamp":1693039619725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Apr 2016 09:46:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2228\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13803), with CRLF line terminators","md5":"56a224ccaaf1ad3df6ee7dbbc019aeac","sha1":"2ce1ef76b342a8fafda1e03a62b99be5340812bf","sha256":"777a9e5bb5d35fd671e5b252c67a0cf462baa8258db145ef6ea7dadf4de4b481","sha512":"5d4aabc83a5c849c66b818d21dc630da87df200b5fb0cee8f6209f7dfad5982136e2030f7d9fd9bc644a30b5689498aa40b42274ff8880a09f78d3209d64a30e","ssdeep":"96:4jVRNThJA9SfqYUV3KSIu97RC1dCVHvQroKSccwHF964Uv8zc2aHn51P/CtEDBW6:Q3uSfZDHu97RC1QVHvKDUv8zc2adB97P","tlshash":"ec52bdd17ca47a8a9e13820f90d5d6f0db1218519d982ab7f1b333895d0b78d82f9f2d","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-04-05T19:34:48.913105Z","times_seen":418,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/echo.css","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.727Z","timestamp":1693039619727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/echo.css HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Mar 2022 14:00:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 46677\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46677,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ddf860f5b206570261ecc17836030729","sha1":"ade9251cb8b817c9686a075a15d59f4051e02ddd","sha256":"992ceb90f0e31207c443dfd7dedcbcb1a0b612d0c9fe851bc838534d035181f7","sha512":"4cde3164b20630788412cda7568f510abf551b91c8c309de918c7d4e57abcf9964b8fc757530df770bd99112d3a160dee9b547026b2fef8050fb216e3160a01f","ssdeep":"3072:J/MB8OfBMOdGj+gLdyiLYfBN0ucn4/ULcSLyygLdWxAnZm4T1hbtEhND2INcmeFO:J/MB8OfBMOCpT","tlshash":"7a641d63ee5510021a33d3b5e7939665ff2c40a3c20245bdbade655c8fea58881adfcc","first_seen":"2023-04-07T18:47:56Z","last_seen":"2024-08-21T08:04:43.92339Z","times_seen":21,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/animate.min.css","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.729Z","timestamp":1693039619729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/animate.min.css HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Apr 2019 08:00:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3849\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3849,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (319)","md5":"3d0a26b7c254da8c0d297e753ff23f65","sha1":"877d0bcad6716a05066d9b6dab07e264f631a5f0","sha256":"f1f0041c0c62f37ee475d174370f574a62afd842055e79a86dc4c722532de6bb","sha512":"cd0a8d03e95d1cc8cc7f9ea733b1ed7d6eaff7cc36baccbeee492b11e91aa10c165e43ac33f0e29990e5dcf7826a4b49b0b0409114da5b4822a4a5f7fb37d594","ssdeep":"768:dkZFpVIBIEwQ1oAhkIDz3gy65VraeX0UTGsXsV:dkZUwQ1oAhkIDz3gy65VraeX0UTS","tlshash":"b74346ae5891238a91674fa2c3dd5e64473dc67314621cee3381684b8f87f9e33da247","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-04-05T17:31:33.174744Z","times_seen":368,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/bootstrap.min.rtl.css","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.731Z","timestamp":1693039619731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Apr 2016 08:16:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4160\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4160,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"50650996f24f8595aca871946cf4bfc7","sha1":"7fa88ac85d0f97dcd3c80c62a62dca78aedf73f2","sha256":"16725d7575da85e45223fc328ae010003775db250fda7bfdec9dc1e1676437a4","sha512":"5e1703ad4922c54176c14ccdf7a25de5c6a9c995dc969e56a77d1aa322513cb1541576b94f9eb73f6cd49ad063c85025a1d04f908a4215330eb5de6b65fb5933","ssdeep":"384:3+tv2XFJh7Laaijc2+vnRLWC+1CxOVK2Mho:3Q27DijczBWC+1CxOVKRo","tlshash":"c1f2a0c88e311944b171c7bfb7a28c46ab1530a7a67bd8a3f6e17d52fb295050423dcb","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-04-05T19:34:48.958204Z","times_seen":291,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"69.16.175.10","port":443,"asn":20446,"as":"STACKPATH-CDN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.752Z","timestamp":1693039619752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\ncontent-encoding: gzip\r\ncontent-length: 3063\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 16 Feb 2022 10:50:39 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\netag: W/\"620cd6ff-1c1f\"\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-hw: 1693039628.dop020.sk1.t,1693039628.cds017.sk1.hn,1693039628.cds242.sk1.c\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"192:TOS9bd8w/5v0ZQQWJjl0L6DvBdVp8h15/:TOgh8w/5v9DplPD5dq15/","tlshash":"d5e1a6dc729ab1611afb30b8a03bd12fb2b259dd19195164f08ccde9742cc6c4236b7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-08T07:22:49.156123Z","times_seen":19954,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":43,"dns":41,"connect":8,"send":0,"wait":14,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:46:59.866753581Z","timestamp":1693039619866,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"1d3fe3bc196da14f80e4d84494304f01","sha1":"4b105cd90d0e63966357856976976b787bf1e874","sha256":"8c5d63654f963ea92506d442b03ca28a6423dbd1c9cb00647d9d1ff8c6c7b633","sha512":"af8dae71c2661c97b59878180281482512fcf3fc131a5c8b7c100dc1c2d93fde2c74159391f9f026448fb124a2ba3782ebf9b311e3426759753f5adaccbb17a4","ssdeep":"","tlshash":"b5f0dc139f704285f48f96ac8bb7fe68602634c9cf683b0938fc02444b502e6d64d588","first_seen":"2023-08-26T00:31:12Z","last_seen":"2023-08-27T06:27:59Z","times_seen":1165,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:46:59.867692189Z","timestamp":1693039619867,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"3db0594450d036b549644dfeacb42df9","sha1":"0bb0b4866a5327f72f0147ddfd358e148a146152","sha256":"3b99d7ecd01ec91916c49f8a21e069a97cc9e0a225cc1dde9724129fb3bd12cf","sha512":"8e75b0cd70f770e74d4ff1bcd48cc1c94b53154f407a0126b1ff6ba2956eb431180787c55cfed6c5b5c0e57f6a97ea168a979a1b5607c2db9dc35572c82bb471","ssdeep":"","tlshash":"e7f023256df80c12bb5a655e92eafa13e0f039c9079c62cb78f512439c562d6d7c913c","first_seen":"2023-08-26T00:31:48Z","last_seen":"2023-08-27T06:26:34Z","times_seen":710,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:46:59.868450487Z","timestamp":1693039619868,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"1d3fe3bc196da14f80e4d84494304f01","sha1":"4b105cd90d0e63966357856976976b787bf1e874","sha256":"8c5d63654f963ea92506d442b03ca28a6423dbd1c9cb00647d9d1ff8c6c7b633","sha512":"af8dae71c2661c97b59878180281482512fcf3fc131a5c8b7c100dc1c2d93fde2c74159391f9f026448fb124a2ba3782ebf9b311e3426759753f5adaccbb17a4","ssdeep":"","tlshash":"b5f0dc139f704285f48f96ac8bb7fe68602634c9cf683b0938fc02444b502e6d64d588","first_seen":"2023-08-26T00:31:12Z","last_seen":"2023-08-27T06:27:59Z","times_seen":1165,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/ajax.php?p=stats\u0026do=show\u0026aid=2\u0026at=1","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.750Z","timestamp":1693039619750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /ajax.php?p=stats\u0026do=show\u0026aid=2\u0026at=1 HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ncontent-type: image/gif\r\nexpires: Wed, 5 Feb 1986 06:06:06 GMT\r\ncache-control: must-revalidate\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":274,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"2ffb91805eb9cdff24fb81fda91a87df","sha1":"57ccd5b74d40ca35971f3982b644708b5c644b91","sha256":"f286fc59773cdade5fa59b9febf9aaafd39ed05d7be0f5c2429494d6a2712818","sha512":"1bfa903dda1d2834e26916d86977507469a5e609b486618296266128ecef6555e4c16bfb0e06fea169df062770050637fa436f1bfc30d892c2032e1eaa04157f","ssdeep":"","tlshash":"","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.751Z","timestamp":1693039619751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:21:56 GMT","end":"Mon, 30 Oct 2023 12:21:55 GMT"},"fingerprint":{"sha1":"94:C0:54:E4:BA:6C:E0:93:C6:8F:D9:27:1C:74:6F:E8:CE:6E:E2:BA","sha256":"EA:1F:82:FA:16:DF:7E:DD:E8:00:89:87:4E:11:E8:AE:F2:0E:C9:65:03:84:71:3D:5C:C9:DC:F7:1A:97:A9:83"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Aug 2023 11:12:05 GMT\r\nexpires: Tue, 20 Aug 2024 11:12:05 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 423303\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33507,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-04-08T07:53:13.31538Z","times_seen":20811,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":151,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GA_MEASUREMENT_ID","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.773Z","timestamp":1693039619773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:16:40 GMT","end":"Mon, 30 Oct 2023 12:16:39 GMT"},"fingerprint":{"sha1":"4E:35:EC:AC:A4:3A:09:F9:F3:9A:26:43:94:A7:BA:2C:01:54:DA:12","sha256":"0B:30:70:A1:2A:52:9D:ED:75:EF:17:F9:B0:7B:F0:58:23:CB:BE:A1:8B:BD:1A:37:B7:96:3C:CC:CC:57:E8:5F"}}},"request":{"raw":"GET /gtag/js?id=GA_MEASUREMENT_ID HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\nexpires: Sat, 26 Aug 2023 08:47:08 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 26 Aug 2023 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 42742\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42742,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2271)","md5":"8a7e597a5f7924af930209a0d3babe16","sha1":"7a5ed81dcd577c08d80967daa76411abb36f2785","sha256":"51e8b6a63866c6f3c1372f5375385344222590318a7abb8c968c9802928a72b9","sha512":"8ae562a1dcd9c7d7876f44f7595b6209c07bd392e839a059e6d4c0a5e4362757b853fa8875278eb67ed650fd9d805d35295032d4ed6222e0c44d40407d312eaa","ssdeep":"1536:Hyqnvz3puep9lhNjbv0rKhfVBaOUr2uTrLMLOel5t3r3klEysFfhtAK:HyAr3p5R3v0r0vuTrAKel5t3r0lEV","tlshash":"86b3e8d9b3c77166d3a2b4b8513f010bb27a6e92f84cdc94e145c8c42eb8699417bf6c","first_seen":"2023-08-26T10:47:29Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":1,"connect":31,"send":0,"wait":18,"receive":9,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:47:00.039467144Z","timestamp":1693039620039,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"1d3fe3bc196da14f80e4d84494304f01","sha1":"4b105cd90d0e63966357856976976b787bf1e874","sha256":"8c5d63654f963ea92506d442b03ca28a6423dbd1c9cb00647d9d1ff8c6c7b633","sha512":"af8dae71c2661c97b59878180281482512fcf3fc131a5c8b7c100dc1c2d93fde2c74159391f9f026448fb124a2ba3782ebf9b311e3426759753f5adaccbb17a4","ssdeep":"","tlshash":"b5f0dc139f704285f48f96ac8bb7fe68602634c9cf683b0938fc02444b502e6d64d588","first_seen":"2023-08-26T00:31:12Z","last_seen":"2023-08-27T06:27:59Z","times_seen":1165,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:47:00.041867168Z","timestamp":1693039620041,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"3db0594450d036b549644dfeacb42df9","sha1":"0bb0b4866a5327f72f0147ddfd358e148a146152","sha256":"3b99d7ecd01ec91916c49f8a21e069a97cc9e0a225cc1dde9724129fb3bd12cf","sha512":"8e75b0cd70f770e74d4ff1bcd48cc1c94b53154f407a0126b1ff6ba2956eb431180787c55cfed6c5b5c0e57f6a97ea168a979a1b5607c2db9dc35572c82bb471","ssdeep":"","tlshash":"e7f023256df80c12bb5a655e92eafa13e0f039c9079c62cb78f512439c562d6d7c913c","first_seen":"2023-08-26T00:31:48Z","last_seen":"2023-08-27T06:26:34Z","times_seen":710,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:47:00.046742697Z","timestamp":1693039620046,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:08 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"1d3fe3bc196da14f80e4d84494304f01","sha1":"4b105cd90d0e63966357856976976b787bf1e874","sha256":"8c5d63654f963ea92506d442b03ca28a6423dbd1c9cb00647d9d1ff8c6c7b633","sha512":"af8dae71c2661c97b59878180281482512fcf3fc131a5c8b7c100dc1c2d93fde2c74159391f9f026448fb124a2ba3782ebf9b311e3426759753f5adaccbb17a4","ssdeep":"","tlshash":"b5f0dc139f704285f48f96ac8bb7fe68602634c9cf683b0938fc02444b502e6d64d588","first_seen":"2023-08-26T00:31:12Z","last_seen":"2023-08-27T06:27:59Z","times_seen":1165,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"millierinlaces.com/1clkn/55455","fqdn":"millierinlaces.com","domain":"millierinlaces.com","tld":"com"},"ip":{"addr":"142.91.159.188","port":443,"asn":7979,"as":"SERVERS-COM","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.747Z","timestamp":1693039619747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"millierinlaces.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Aug 2023 23:47:18 GMT","end":"Sat, 18 Nov 2023 23:47:17 GMT"},"fingerprint":{"sha1":"9F:08:18:C3:7E:FC:0B:81:16:F0:F5:CE:8C:03:CB:96:07:40:AA:4E","sha256":"0B:57:BA:5E:80:81:92:C3:CE:C5:4D:2A:C8:90:FB:D2:3E:A1:3E:59:59:32:39:DC:4A:6A:A5:83:43:1A:72:21"}}},"request":{"raw":"GET /1clkn/55455 HTTP/1.1\r\nHost: millierinlaces.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 26 Aug 2023 08:47:08 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version\r\nSet-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Sun, 27-Aug-2023 08:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyM0KgkAUhuE5hxiIpPjAC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e6R3O; expires=Sun, 27-Aug-2023 08:47:08 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"985000300000000000000000f0c000003c00000000000c00c0000c0000000000000300","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-08T07:49:36.779684Z","times_seen":15836,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":293,"dns":240,"connect":28,"send":0,"wait":37,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/echo.rtl.css","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.733Z","timestamp":1693039619733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/echo.rtl.css HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 May 2019 06:49:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3601\r\ndate: Sat, 26 Aug 2023 08:47:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"133de044f542e50c4a5eae2799e148ac","sha1":"c028504cf9a957ca86d7f1a06371fdc085deaace","sha256":"e64aa5acc7482eb1a727ee2962407ce824e6f3cb5e22ceda2f27a0dd72072743","sha512":"5f0ef6b93bc8d1aef4f02a13f18aa3d35794aca3e99eb4ba8b1c99ea091e5c7f4789277562b2f4152c960486cccd09a407e0043093267f9d6d215f693519c124","ssdeep":"192:lUY0e3kfSH7h4Rli4Umjqq6+ndCng6TZoVN+nPIqAeK:K1ibq6+ngpT6+da","tlshash":"d6a2f166fe5060872432cf78e262ccd3eb5600d3c40657b9bf9ec1549b6a68c172df9a","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-04-05T17:31:33.110548Z","times_seen":184,"resource_available":false,"data":null}},"time_used":1154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1122,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/custom2.css?v=2","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.739Z","timestamp":1693039619739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/custom2.css?v=2 HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Oct 2022 08:12:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9028\r\ndate: Sat, 26 Aug 2023 08:47:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9028,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6169), with CRLF line terminators","md5":"182b715de3f603e8ba4afcbb23998151","sha1":"195778efe8fbb7292c2bb88fdcf1e74eef6f3653","sha256":"7b7bf629e95f70350aef2045f55c58e43871de5a1c66f01022e61ee47cefa497","sha512":"b4590f8c51abf1e68b342d0377945288478bbd3f1329a977f0ad93329e1933208f07c93fdedd75e0fe01c165194f904ffe1ef4859ec3185cbdf35815376292a7","ssdeep":"384:BriVf/3gwztA7swJvtx/r4jRmdjRmBjRuBQVsPQxgOV/di86Dy:x8/3gwzOjv3PW1Vdi8n","tlshash":"9913a865ea15154a7137d6a6abe207c8ef2c0043eb02067dfba572208fbe4985573fcd","first_seen":"2023-04-07T18:47:56Z","last_seen":"2024-08-21T08:04:43.882619Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/uploads/custom-logo.png","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.741Z","timestamp":1693039619741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /uploads/custom-logo.png HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Sep 2023 08:47:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Aug 2023 00:33:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1695\r\ndate: Sat, 26 Aug 2023 08:47:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 261 x 80, 8-bit/color RGB, non-interlaced\\012- data","md5":"3e53d26a827b96ee64d9acd4e9f6ca8c","sha1":"dce6ba3cd6bb744cbf18af7845d6b2b6656d93d2","sha256":"7528a0ef939cd8a7234300f5f244b8603a65f252beaa4fb4d69c564ba70c01e0","sha512":"fea6640b5bf10a570c6088907634b68d7ba486ab7d3faefe351c6e1533209f02178bbd9c66942af9dda1ce6b4c4f2166d0a98d5e7fba42e0e6fc389d7b5263cb","ssdeep":"","tlshash":"3731dac912b46e8731ac593821e411012aade0853d43fb6d0599fb3db414eb2cf3b790","first_seen":"2023-05-22T20:34:04Z","last_seen":"2025-03-09T02:12:26.46519Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/uploads/thumbs/c8ecca60e-1.jpg","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.744Z","timestamp":1693039619744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /uploads/thumbs/c8ecca60e-1.jpg HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Sep 2023 08:47:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 11 Sep 2022 14:13:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27873\r\ndate: Sat, 26 Aug 2023 08:47:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27873,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 480x270, components 3\\012- data","md5":"92e0c0c25bfd89d5da9ff8b7fc07f985","sha1":"88edf13e5912fe7dd6c523e3f8a679fc141c3b0b","sha256":"8252db99ddf07e06bea3b3a83ce8150504d3cdd645290fec9ced2e1f2a01d344","sha512":"a0862f5e763917ae101bb63ee36467767eec7b925ac5f01531954d3ede750cfa9844d4dec2b3d1dc2ef8b8bab45eda73a036e8adf193c1cca9fab4891caf5a38","ssdeep":"","tlshash":"","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1143,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/uploads/thumbs/1c5f5cd8c-1.jpg","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.742Z","timestamp":1693039619742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /uploads/thumbs/1c5f5cd8c-1.jpg HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Sep 2023 08:47:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 11 Sep 2022 14:13:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25602\r\ndate: Sat, 26 Aug 2023 08:47:09 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25602,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 480x270, components 3\\012- data","md5":"d6fe75563d6d50fad08ad0045e564190","sha1":"96b6a42eecb6906883560fe388067237bb7f6408","sha256":"947adcf1cd98ad11d4d9335662d446ab54c69afa3d6fcc39e74d227e500ddcca","sha512":"cf86731cbafd6cf81f8b8b41b6362e7e4a61250e2d9860425677ffeb17820912efb891a946b32a999d47179d2a36576ba53c1fb980eb0677bbb2f72acd447561","ssdeep":"","tlshash":"","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:47:01.000773967Z","timestamp":1693039621000,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:09 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"f29e890a0278a507846c95d06b0f5164","sha1":"e7b565ff812043605965d418efaf82ce52d10c32","sha256":"9511accc424c81209b5982c2dc40de8ba53fd7fff32bee2ebf4a6c3dae434463","sha512":"6b1421fb419f2f0127a4695c04295cb3fce6430bcbc8f0f2ce5ab3eb6112f5bfcc8ba14032dc8cca4c3b7913471909be9df7f1d59719d5cc46f07edefaeedd16","ssdeep":"","tlshash":"23f0b3061e7e0280ae1082cc0febd1287a94f1cc163c63e13fb893c18c0e76aa084b33","first_seen":"2023-08-26T00:32:14Z","last_seen":"2023-08-27T06:27:59Z","times_seen":1163,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:00.983Z","timestamp":1693039620983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 30 Dec 2022 00:00:00 GMT","end":"Sat, 30 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A","sha256":"A9:0D:CB:FA:8B:27:40:D5:69:3F:93:AD:77:1E:A7:F8:FA:9A:FE:2E:75:63:04:E9:12:F7:63:DD:B0:C2:87:F5"}}},"request":{"raw":"GET /font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netdna.bootstrapcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 26 Aug 2023 08:47:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64464\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: \"4b5a84aaf1c9485e060c503a0ff8cadb\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 06/09/2022 10:24:04\r\ncdn-proxyver: 1.02\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 756\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requestid: 5a835ca8fa8da1933418d65764ad9788\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 284942\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 7fcacef70f13b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64464, version 4.262\\012- data","md5":"4b5a84aaf1c9485e060c503a0ff8cadb","sha1":"574ea2698c03ae9477db2ea3baf460ee32f1a7ea","sha256":"3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019","sha512":"05196036c41398616c077925fc4bf252e81f11b6ebef8745047d75cb2c8b80441b8c3593f4d5b2617089e9f3d8d957f9edcdf8e43993661a277be8f4b6a32111","ssdeep":"1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q","tlshash":"a753f162a0233101d19918bb7d39ffe22b01c1cee34659c7dda62c5338e5d5472abe2e","first_seen":"2023-04-05T03:42:19Z","last_seen":"2026-04-08T07:25:14.906815Z","times_seen":19641,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":13,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.738Z","timestamp":1693039619738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 30 Dec 2022 00:00:00 GMT","end":"Sat, 30 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A","sha256":"A9:0D:CB:FA:8B:27:40:D5:69:3F:93:AD:77:1E:A7:F8:FA:9A:FE:2E:75:63:04:E9:12:F7:63:DD:B0:C2:87:F5"}}},"request":{"raw":"GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 12/13/2021 21:25:06\r\ncdn-proxyver: 1.02\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 632\r\ncdn-status: 200\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-requestid: ce46644f14621522f2593a9762829805\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 6944980\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 7fcaceef68f91c06-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37265,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26548)","md5":"0831cba6a670e405168b84aa20798347","sha1":"05ea25bc9b3ac48993e1fee322d3bc94b49a6e22","sha256":"936ffccdc35bc55221e669d0e76034af76ba8c080c1b1149144dbbd3b5311829","sha512":"655f4a6b01b62de824c29de7025c4b21516e7536ae5ae0690b5d2e11a7cc1d82f449aaebcf903b1bbf645e1e7ee7ec28c50e47339e7d5d7d94663309dfa5a996","ssdeep":"384:/i5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:klr+Klk3YlKfwYUf8l8yQ/7","tlshash":"5ec240e8e54c01d66731c48bff85b36862b6f73dd5804da9f01f690c29d22a522c5fba","first_seen":"2023-04-05T03:42:18Z","last_seen":"2026-04-08T07:25:14.954679Z","times_seen":16263,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":40,"dns":33,"connect":1,"send":0,"wait":10,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:47:01.101795182Z","timestamp":1693039621101,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 26 Aug 2023 08:47:10 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"f29e890a0278a507846c95d06b0f5164","sha1":"e7b565ff812043605965d418efaf82ce52d10c32","sha256":"9511accc424c81209b5982c2dc40de8ba53fd7fff32bee2ebf4a6c3dae434463","sha512":"6b1421fb419f2f0127a4695c04295cb3fce6430bcbc8f0f2ce5ab3eb6112f5bfcc8ba14032dc8cca4c3b7913471909be9df7f1d59719d5cc46f07edefaeedd16","ssdeep":"","tlshash":"23f0b3061e7e0280ae1082cc0febd1287a94f1cc163c63e13fb893c18c0e76aa084b33","first_seen":"2023-08-26T00:32:14Z","last_seen":"2023-08-27T06:27:59Z","times_seen":1163,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:01.086Z","timestamp":1693039621086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtmark.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Jul 2023 06:29:27 GMT","end":"Mon, 23 Oct 2023 06:29:26 GMT"},"fingerprint":{"sha1":"B4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1","sha256":"C0:04:18:0C:9F:FA:D0:1F:6E:D6:5A:46:96:95:82:00:82:E6:E2:22:82:14:D0:4D:A8:78:37:EA:29:D6:4B:CC"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\naccess-control-allow-origin: https://we12.mycima.cc\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=fe90afdda491480eb6cf08fc8bdc3762; expires=Sun, 25 Aug 2024 08:47:10 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text","md5":"42e65d92000c188d74673c69c8acb583","sha1":"47026d6e50781492bd3d35c415c630bf1e90ac75","sha256":"a561706ff61dcd19598d93e9ad6e5da0db059490f434d24477a9119978a2653c","sha512":"3ec843ecbf69f2fb924617977e663e4309f3b10e60961b5c45abc3f8d0128c9c94ef95b80749d3bca5bc7e7aa83f3b2f8848ecc8cdba0a1263d70473bb3048d5","ssdeep":"","tlshash":"18a002914b280bcc524c4f16599eea1101569385981c724d56f8916132c628c64aa606","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":125,"dns":17,"connect":33,"send":0,"wait":33,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.sectigo.com/","fqdn":"ocsp.sectigo.com","domain":"sectigo.com","tld":"com"},"ip":{"addr":"104.18.15.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-26T08:47:01.671521118Z","timestamp":1693039621671,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.sectigo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Aug 2023 08:47:10 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 471\r\nConnection: keep-alive\r\nLast-Modified: Thu, 24 Aug 2023 03:11:53 GMT\r\nExpires: Thu, 31 Aug 2023 03:11:52 GMT\r\nEtag: \"b4a10bbed4f1922b7a57eab209a7cad465a7101a\"\r\nCache-Control: max-age=412337,s-maxage=1800,public,no-transform,must-revalidate\r\nX-CCACDN-Proxy-ID: mcdpinlb2\r\nX-Frame-Options: SAMEORIGIN\r\nCF-Cache-Status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 7fcacefaeef20afa-OSL\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"5c55023424999091689ff77007dfcc24","sha1":"b4a10bbed4f1922b7a57eab209a7cad465a7101a","sha256":"de300b3021059adee68fb234a31f299548ac5a87eeaf4a876de1cee9f6b086cd","sha512":"fa3a66780b59c471bab7282b695aeeee63a8cbf6c45a4de3822a8383dcaa9e692787aa8feea4f77321e551656078644a9a9cef92f6fdba9a75b817b7b7c41b99","ssdeep":"","tlshash":"41f0d4141bf95bd25d55ce0d56b09e165861f55e299107b3043401d81a76e6fc42c530","first_seen":"2023-08-24T13:48:11Z","last_seen":"2023-08-27T15:09:56Z","times_seen":52,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goomaphy.com/500/6219621?excludes=\u0026oaid=fe90afdda491480eb6cf08fc8bdc3762\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026tzofs=0\u0026js_build=3\u0026sw_version=v1.290.0","fqdn":"goomaphy.com","domain":"goomaphy.com","tld":"com"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:01.541Z","timestamp":1693039621541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"goomaphy.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Aug 2023 05:21:05 GMT","end":"Thu, 23 Nov 2023 05:21:04 GMT"},"fingerprint":{"sha1":"C3:74:51:BB:A3:86:76:B1:BF:E9:5F:7B:8B:6D:B9:FA:A5:A9:BF:88","sha256":"6F:0B:7A:8E:1D:AF:D2:00:BC:1C:06:C3:94:42:F3:EC:41:79:78:B2:A3:85:59:85:1B:F8:7C:93:7A:F8:0B:96"}}},"request":{"raw":"OPTIONS /500/6219621?excludes=\u0026oaid=fe90afdda491480eb6cf08fc8bdc3762\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026tzofs=0\u0026js_build=3\u0026sw_version=v1.290.0 HTTP/1.1\r\nHost: goomaphy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://we12.mycima.cc/\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://we12.mycima.cc\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T07:38:16.649537Z","times_seen":13494560,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":108,"dns":1,"connect":33,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.254","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:01.535Z","timestamp":1693039621535,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Jan 2023 00:00:00 GMT","end":"Sun, 14 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"A4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9","sha256":"1E:28:77:C9:52:58:8A:A0:51:FE:84:59:28:A0:0C:60:EB:46:B0:7C:5D:3C:F4:AB:A3:77:94:DA:9E:46:9C:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1373\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.10\r\nDate: Sat, 26 Aug 2023 08:48:13 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://we12.mycima.cc\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-08T05:48:10.633091Z","times_seen":56069,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":140,"dns":14,"connect":32,"send":0,"wait":36,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offerimage.com/www/images/1355aa125a385056845e0ee1d5384e9a.jpeg","fqdn":"offerimage.com","domain":"offerimage.com","tld":"com"},"ip":{"addr":"104.22.33.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:06.852Z","timestamp":1693039626852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 07 May 2023 00:00:00 GMT","end":"Mon, 06 May 2024 23:59:59 GMT"},"fingerprint":{"sha1":"DB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0","sha256":"34:C5:1C:5B:A8:54:FD:04:12:B5:7D:F2:1C:E0:EA:99:16:9A:0A:83:AD:56:FC:59:BC:A3:27:5E:81:D7:0B:23"}}},"request":{"raw":"GET /www/images/1355aa125a385056845e0ee1d5384e9a.jpeg HTTP/1.1\r\nHost: offerimage.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13093\r\ncache-control: max-age=86400\r\ncf-bgj: h2pri\r\netag: \"6388849b-3325\"\r\nexpires: Sat, 26 Aug 2023 10:40:56 GMT\r\nlast-modified: Thu, 01 Dec 2022 10:40:27 GMT\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 79574\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 7fcacefc2fc90a3c-ARN\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\\012- data","md5":"1355aa125a385056845e0ee1d5384e9a","sha1":"cfa5fd1b2dd6b299c0aecdf19fec3532ce4392ea","sha256":"248797fff982ee400ab78ff6831182372f9ef8a6916364192ca0f30556577733","sha512":"57cdee332612d55274f11b1878c875640fe3fd6c09b30edf60e5ef69f4505b47b09ec1e1f2cb29288ae81bb1cb3a3b5cf6308ef474a3cb6274c1f014c75c4096","ssdeep":"192:32R/+dr9OFpoOxUOAwRtvlQCUR5y7ejlktbzNIzkoNWoRwYijjd1KL:q2dBaxUOAw7vxiw7ekdDo9ijGL","tlshash":"9e42b0aec2235509e0805efd4d1c4965e682ba12f5bfd90558e2e7cb2d22dc1cb64f0e","first_seen":"2023-04-11T00:28:14Z","last_seen":"2023-11-08T08:03:43Z","times_seen":406,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/uploads/thumbs/f5f7c84e7-1.jpg","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.746Z","timestamp":1693039619746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /uploads/thumbs/f5f7c84e7-1.jpg HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Sep 2023 08:47:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 11 Sep 2022 14:13:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27266\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 480x274, components 3\\012- data","md5":"5a777939a75faf6790b2914e3b932c7f","sha1":"546f86dc2f39e7152e6060ae6290fe98b1231fe2","sha256":"9cf839537d8e46cff4a15c18c40183f0c08a2ccc1a9d2dfd2f9d40b76ea81a31","sha512":"daf495bfda2513ee6285332ebd2c6ae71034daafbafcf5186017578c052734143ff70cfe35d04f641b55399cd851c04d0489d43e751e538f3e274eb792be63dc","ssdeep":"","tlshash":"","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2113,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/theme.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.758Z","timestamp":1693039619758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/js/theme.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Apr 2019 08:11:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13546\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13546,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (5357), with CRLF line terminators","md5":"d8176b4cb2798d51558fe707c55d7fbb","sha1":"2d49a0b8afb91121d20469c210566fb8d21e82d6","sha256":"497a2c9b733f23e5ec7ba08698be68a7cc7c121213e78be6a9db5ceb3943b8c9","sha512":"35bdf908dd7eeb6cbd0c3d6f746e3ef87b992bb188e16f4ccc4966c26c774086f866dd603978d9dbdc65fe3488c4bdd3346c78daad3b39da835f8d34a1514811","ssdeep":"768:sdsHXBe1s4RPwBTlttO81x93OD4JdbNC6vALeqny+C3s1pR7T8I5HDwLYPLAWyCt:sdS4D4JdbNzvweqny+CQpmeHMYPLNxn","tlshash":"4313ea883182b12787f761f5a05f620bb172a9a5a04da43df579d4d1bef4e881123ff8","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.070917Z","times_seen":285,"resource_available":true,"data":null}},"time_used":2162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2131,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.plugins.a.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.759Z","timestamp":1693039619759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/js/jquery.plugins.a.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Mar 2019 09:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3303\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3303,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5325), with CRLF line terminators","md5":"d30d39ea7362e56afcdb14c1919e36b6","sha1":"3d8ad768ea89003210bea45e8aacd038bae1ecf1","sha256":"a01674489d3ae093a5909246b27d46e09a6f49bc6834094f5febfa056910e0e5","sha512":"e150975ba628ff73f1a84d94d9ee2f1473d881e0631731b0ea779d6b92e31708d4cd35ef22d421f590466a04ddb960f77c7f91fd3eecdf29a6c31e7f03c2a6af","ssdeep":"192:MUj/PvqWHEFDhiCQVNypl63vhjy3TNycRK:MU7H9cQXaD63U3TxK","tlshash":"0f2274687142732106ef60a6d1bf96df5231b3395b0b80d090d0fadee93a47547e3d99","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.098093Z","times_seen":297,"resource_available":true,"data":null}},"time_used":2163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/js/jquery.typewatch.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.761Z","timestamp":1693039619761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /js/jquery.typewatch.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 May 2019 13:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 767\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":767,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1440)","md5":"6915a93382a7b35f40987fd648b43f9d","sha1":"b78c77cc774594df414a7b1fb99c28083d85bb80","sha256":"1836dba8922ca00f9ac170122f314b2cd7bbb2eba09c73d8bce215597bd9cd2b","sha512":"e88f5e62ae04a867b1b5ba979e2b653cab8348167c37cf897856d13558114dca318ac33b2c07d611ad3559014c57e60b847823421a46649a47f5328720eceac4","ssdeep":"","tlshash":"cf31254c7212f29947f267f7ea761eef372ae36869001180316491d0e434a6f53e7bd4","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-04-05T19:34:48.925276Z","times_seen":390,"resource_available":true,"data":null}},"time_used":2173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/js/bootstrap-notify.min.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.762Z","timestamp":1693039619762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /js/bootstrap-notify.min.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 May 2019 13:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2489\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2489,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (595)","md5":"5ba070af9d1b1a2782851940de30879f","sha1":"d33390fc88bf68bd23eb182d7dbc77f5227081b2","sha256":"a13a07b242c80b57e0cbbacc6cfedb538d4d331ff1f9dff370519ec57407e450","sha512":"3d793cb731b6a060ea4b68dd622b76ee0db7f1ca5536fd4b4831b6f586c8f4f6634fcfc64d7dd93e85298225e9a4aba6d9d44ca3d8fabc2dfd365a02df60abe0","ssdeep":"96:gLeUHuB8i2j1IJTG8x8lMRXEbNF1iVXdJwcuUB4SIdXhgIR5thvoPrrOLKYZ1:OjHuei2ZIJTUlYXcNi1zwib8","tlshash":"0e02548eb11aa259464bd6b3905e0300a537b614a51bf53c3e3ac4eaf9b4dfc22177f1","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:48.911864Z","times_seen":497,"resource_available":true,"data":null}},"time_used":2173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/js/melody.dev.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.764Z","timestamp":1693039619764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /js/melody.dev.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 May 2019 13:34:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4004\r\ndate: Sat, 26 Aug 2023 08:47:11 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4004,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"e238acf58475d3cdb95d614582134b24","sha1":"b13c1da1f5254cb14f4f187bd5174ed0feb08a23","sha256":"f3a4cbf3a8090b121a0d6d6dd8feda9f92831cdb5a070a7eb9ef58234c1f4eab","sha512":"7209c4cb8692e5a1fce4c6bad8081361c857d45b179b935a7291b0682c514409584e10b29bb56905dafd5d3dc8831d82c78cf9895c7b59ac2239552f6abf1f2b","ssdeep":"384:krC7SV8zve0Nfenff87NLRld9gTSOW6VUH:krC7+860lRLRGTdK","tlshash":"f5a25405f2ed1e6600b334360cafa4853a3c99b798048d59fd5d21e85f6cb7ca972f4a","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-04-05T19:34:48.911236Z","times_seen":495,"resource_available":true,"data":null}},"time_used":3111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3079,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/melody.dev.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.765Z","timestamp":1693039619765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/js/melody.dev.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Apr 2019 08:11:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2135\r\ndate: Sat, 26 Aug 2023 08:47:11 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2135,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"c3bde81760af5b3df4d0c56ba06a0fca","sha1":"ecf2f46def386ad8f62fad28edc36c8440f339cc","sha256":"c6f149f7dcbe38ff7b1391b1fab3462f06309f79df7bf9135ba1e75b13189af8","sha512":"7b8e060be27ba820f50b8905cabc32507f821d5dc8ca768cfcd26521ee90568fc5b4e43181f08b587eec7e6be5c201679a7cb1a8ce8fc3976a1159a4b423f95c","ssdeep":"192:t6GwoGJqJEO8dwHJbLDyKeonOOQMugBBtwCFztbRbJwlywfWbJwlywz:cglHJbHzTnOObzt9KA5KAw","tlshash":"d112433c667d33794c96377a245b804415afec17b20282707e1c7c88d7ede89e661e9a","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.052396Z","times_seen":270,"resource_available":true,"data":null}},"time_used":3110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jasny-bootstrap.min.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.766Z","timestamp":1693039619766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/js/jasny-bootstrap.min.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Apr 2016 07:26:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4986\r\ndate: Sat, 26 Aug 2023 08:47:11 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4986,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (343)","md5":"f6b6e524d29d54ada53e4172b9d91cf7","sha1":"427153c7a2d83d2ca800e397779f29b857801ad2","sha256":"e7ad856551c720cb7c6a24a8bf4a9d6b6b24c24f07109cde96366338e53a4ff8","sha512":"13c01f28dd38a2b10ce27bc4dc60d510b2067e408ba1c0a26b0eb7fd39dd4300265278d529925e56d40bdc06a32d024558ca10a20d1ced6c186cc9ac263cc36d","ssdeep":"384:rKLCtf00Rd7HyeSOjjWhuU4AHL6JLeUxVM1MJsisNV+bocACk3N7K1nj:rbR00DHyNOjKhuVAWLxA1MJsisNV+boo","tlshash":"4e92664579b0225903ffa17601db4749f336eb28984a411cb4789ad76e39d0a72bbf3c","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:48.902842Z","times_seen":585,"resource_available":true,"data":null}},"time_used":3110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.plugins.b.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.768Z","timestamp":1693039619768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/js/jquery.plugins.b.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Mar 2019 09:45:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3596\r\ndate: Sat, 26 Aug 2023 08:47:11 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3596,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (5838), with CRLF line terminators","md5":"443045e7fcb603ba92e473b0ec11d2b2","sha1":"8d9dd41c01b0f2738d6bd1a3984095570bbeb0df","sha256":"8084ff37c531acc28e0fa45ecb19d9a3c846a91f1b2e101801a9dada0cd31702","sha512":"995f65923b7ceb647c7b81b71d6e9c2f169e27a9b9c2e38476eeb4c7cd6931823a0825cfe344409f39096421d403ed0096eef957da48c6789052ccc120f089d0","ssdeep":"192:mraMEp1jlgIyVUUrIK+3J0q6MDTKUVn83Y:mr+SI+jmaGTxn/","tlshash":"d912e8a833427405517a952d102fed1ff3225915c48a4050a258e9adfff9cae3b63faa","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T17:31:33.14884Z","times_seen":296,"resource_available":true,"data":null}},"time_used":3110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.readmore.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.769Z","timestamp":1693039619769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/js/jquery.readmore.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Oct 2015 08:29:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1147\r\ndate: Sat, 26 Aug 2023 08:47:11 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1147,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (531), with CRLF line terminators","md5":"081fe3d90aad9b9f11e4b1c0569530df","sha1":"ff566498ce6f25f4a3b28c0e2bb92b6b86fea6ed","sha256":"98e825583e6fb4f7e8a65f9063fb7ea2d34aee8f9aa480dfee285ea27f4fca02","sha512":"cf242d2562e01ce001f00b847c0855d090f3c2883ede50cb65298cad502e2ae1fa6648a16eab883bdac88e2cdbe0366f4dcad0967bf3cf0e02ef979bf7f2b2f7","ssdeep":"","tlshash":"2a71cc69731bf641c4ab60e3301f434e5633e129865680407b76daedee7c8593863a7e","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-05T19:34:48.953809Z","times_seen":321,"resource_available":true,"data":null}},"time_used":3110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/js/jquery.cropit.js","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.771Z","timestamp":1693039619771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/js/jquery.cropit.js HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 25 Aug 2024 08:47:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Mar 2017 13:47:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6593\r\ndate: Sat, 26 Aug 2023 08:47:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6593,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27266)","md5":"cd82e0edbcecf087be901e8e7ed0d035","sha1":"2cedce9f87501152efa36eb1949d95c0ca4ff200","sha256":"b8a0d09df5a79e5e9494b3061eeff55883870c66714879886348c5095faa7840","sha512":"972ad1b4fe72296e7123bebe0c1e18aaf1fe1617ed41762b0e0b3afc9a7e58c0a4f9e5354094808d94bcebcd8f7c1d12b9c794ae17c47bc9cb3586ca9899193f","ssdeep":"384:b4Ku+vsSCLma/KSUOW5Gur0433Pfmoz8DKNzmavSbnCIjcIOHinWK0inVcaTJX5s:XWmaiSO5Gu/wemaybVtPJXm","tlshash":"4fc2b4193ba1367742a7f1a0760f800c1275e975e446e38cb638d8fa9af18148a77f76","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-04-05T19:34:49.004228Z","times_seen":609,"resource_available":true,"data":null}},"time_used":4107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4075,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/img/icon-play-32.png","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:00.927Z","timestamp":1693039620927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/img/icon-play-32.png HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/templates/3arbserv/css/echo.css\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Sep 2023 08:47:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Mar 2022 10:18:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2413\r\ndate: Sat, 26 Aug 2023 08:47:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\\012- data","md5":"35bd95e97ff446debcc363482550378d","sha1":"91c8d90e0524e5346aa4f3ae0806893db5d95959","sha256":"eee224146191f9cc5fabac0a105fe5b9b34750f8afe16823dbb593259d8a1d75","sha512":"cb1e95ff009f563b6d436c90b3b10c9efd2d6be53fcd8938d8c027c4839e3c94cdb8994441ee44c1af35b06611912903ba7e66f258b58af8943e7fee632d8ad5","ssdeep":"","tlshash":"8041e84dfe422c30c288e5727de4a093a8375cc482c0a563bcdcc16398b04fbb92cad2","first_seen":"2023-05-09T02:55:10Z","last_seen":"2026-04-05T17:31:33.125404Z","times_seen":236,"resource_available":false,"data":null}},"time_used":2903,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2903,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/templates/3arbserv/css/fonts/Material-Icon-PHP-Melody.ttf?206bv4","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:00.943Z","timestamp":1693039620943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /templates/3arbserv/css/fonts/Material-Icon-PHP-Melody.ttf?206bv4 HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/templates/3arbserv/css/echo.css\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 02 Sep 2023 08:47:12 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Fri, 04 Dec 2015 13:53:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 50503\r\ndate: Sat, 26 Aug 2023 08:47:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50503,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, Material-Icon-PHP-Melody\\012- data","md5":"c66525c487d980ccda56d4668eccd47b","sha1":"e9b984773ce1a225a851ac1769875b57e2e4a3f9","sha256":"48ab864568194da965b383bf041943f4fbd6d13e5e7f60da9556c4667eb052f6","sha512":"af4684cf0c159b2a166b781d80b0d557c4dbee268f1c8b77be76aff304397305cf9f805724d78f317fd2c782026c1890939320237342a1594e69efc656ef7755","ssdeep":"1536:7gGdj76E2oK5LDS1K2bd9kG/Wn5z7Qk7ir7q627CeDY+d324xLTFg:Lj76E2r55UqnJs29xw4X","tlshash":"3bc3c580d765bc16ee0d5234d4dae31ad7fcb725eb56939a8dcaa80ccd1b4f2c98c150","first_seen":"2023-04-27T21:11:40Z","last_seen":"2026-03-25T16:51:17.189007Z","times_seen":142,"resource_available":false,"data":null}},"time_used":2921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2889,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/favicons/android-icon-192x192.png","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:03.868Z","timestamp":1693039623868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /favicons/android-icon-192x192.png HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1; prefetchAd_6205538=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Sep 2023 08:47:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 08 Mar 2022 13:43:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22310\r\ndate: Sat, 26 Aug 2023 08:47:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\\012- data","md5":"dcf7d645053c0bb7e0edd25960004324","sha1":"5951f5ffde7d819e499f69540b0d95cc39d0a8bd","sha256":"ce2f656adb31855d7886fbcf54add26d85fe22f49a1712cde1779bc905384700","sha512":"5efcf7a1990b99d91aa138dd3f9705178718cc56cefcfe3174ff94877d7ac938d0c16de3ea8cbfd67f03048b44ba96a4dfe72286949e2fb94f3c2a8de5b82a01","ssdeep":"384:XSmE2Pqr48wcPGh660ANCE8PR5gs+bGHmVz4LugXdy8HAs+7GZtOaEMT:CHLrPq6xAQE8PosqFV0LZkr7GZtOan","tlshash":"57a2e2d24beea9ab9075097b9435e604f80e049f7f640c941f4ee68fb53a94c561c03b","first_seen":"2023-05-02T11:02:06Z","last_seen":"2026-04-05T17:31:33.120178Z","times_seen":190,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"we12.mycima.cc/favicons/favicon-16x16.png","fqdn":"we12.mycima.cc","domain":"mycima.cc","tld":"cc"},"ip":{"addr":"146.19.24.15","port":443,"asn":201814,"as":"Meverywhere sp. z o.o.","country":"Poland","country_code":"PL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:03.871Z","timestamp":1693039623871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.we8.mycima.cc","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Aug 2023 00:56:46 GMT","end":"Tue, 21 Nov 2023 00:56:45 GMT"},"fingerprint":{"sha1":"DB:98:40:F0:71:F9:0A:CE:E8:C7:D4:08:3F:72:B2:EA:5C:4B:68:7D","sha256":"A6:83:C0:D7:72:77:BB:68:8F:01:28:95:95:09:A4:27:5C:9E:89:7F:E4:40:52:52:C7:01:01:94:8D:2C:57:9D"}}},"request":{"raw":"GET /favicons/favicon-16x16.png HTTP/1.1\r\nHost: we12.mycima.cc\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A\r\nCookie: PHPSESSID=d7925e37f5ffb315eb55e23ce1e4b3a1; prefetchAd_6205538=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 25 Sep 2023 08:47:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 08 Mar 2022 13:44:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1017\r\ndate: Sat, 26 Aug 2023 08:47:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\\012- data","md5":"2f9e3795889ec567bbb1124b6b1f73c8","sha1":"1587f8e10111dda099a9453850224807334ec44b","sha256":"c994effa2226581104a4963c1c0ced8b6009e06a8ac49b4cdb09ce1c84443a65","sha512":"f66166f1d05d9592e8ac696529dcee357e999be34d135e28a1131e61bb3723f8a58704976156fd66386ea4568476b2713dd1f9ab119a63b8ac234bf887850011","ssdeep":"","tlshash":"fe11d8f401808972ad13a23f482e8310a4db1bd817d5e080597675cdc1c63d93ae2ab3","first_seen":"2023-05-02T11:02:06Z","last_seen":"2026-04-05T17:31:33.130755Z","times_seen":191,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VSQY3XNP44\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:03.919Z","timestamp":1693039623919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:16:40 GMT","end":"Mon, 30 Oct 2023 12:16:39 GMT"},"fingerprint":{"sha1":"4E:35:EC:AC:A4:3A:09:F9:F3:9A:26:43:94:A7:BA:2C:01:54:DA:12","sha256":"0B:30:70:A1:2A:52:9D:ED:75:EF:17:F9:B0:7B:F0:58:23:CB:BE:A1:8B:BD:1A:37:B7:96:3C:CC:CC:57:E8:5F"}}},"request":{"raw":"GET /gtag/js?id=G-VSQY3XNP44\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 26 Aug 2023 08:47:12 GMT\r\nexpires: Sat, 26 Aug 2023 08:47:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 83434\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3034)","md5":"3af489b50c79064e3a2055fc9f25b79b","sha1":"0810df2d1857c133ccdaa5624eecc6d7ccb0d451","sha256":"0df6dbc26d0f9cae8f54f0816a4f40865e2991bf0c93cc6bd223b5cae589e70e","sha512":"c6b162e2e0937351356ad8fc4d081b3e47bbdf4b30dfdc9876acfb2d44b913fb834d819b5852f3cd86f72a4362d2cece69a6f5aaf57d8eae98539d8958b270c0","ssdeep":"6144:8DQbEmbyGlt59rA1RW2eUMRroyX78WPRS8Z1:8kYmbyGl+ZyX78WPRp","tlshash":"aa3408d973c3706682a6f479503f014be5bb6da2b44ccc98e189c9d01eb8a99417bf7c","first_seen":"2023-08-26T10:47:29Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goomaphy.com/impression/LPWpQ5ocdLekPfqRF6D1DjJv-L9rDkvls237RpGcI_KcF5zHE9bykBTaVARj1pytfCNvxCkGpisKuCl80Vf8E4ceLCe6sZKWBEruwr-cXy2YLsUVcNn6Sgv1T-gJ5VV2EWkgvSFZR0rXrtPF85BzYW4FFtY1bUI865y38c-nTuzbsZ2xdt4HtBP-Phlz6vuyHhQ-ZqGg99JA2GcWOsDwh7liMq1f3VhzTnAUKE50F4rK3xiO5sudPTUTnSrZZmw3INxoczKrZ160fB6uhHhC6ihDSRXn0WQYpJwm6jLo7K136xH83y9W0gj90F1_CGOmcXWIbUawcnqxUvxvzJmHSA9tXkKcDGenFavMAZs_SdQQHjBciMsMHphS2SotyQh86ItBBo_cyvKE96Zs0icWn7j1OGOhjVT2NUcc0JD5zk-Qb2rY2tTwZZQKqryyFPCFIWrRvn8exkzoAqNKDKjkZpqgvVD5DLtnTRaDe7WxEOeFL93PcoAKh6Kl7IxdHUZd3OnDb1bz1ikjoIW9_4IOUVNuz0q-7jN6W8q6Lmie6IAAVqoFTomF23cFjXWkc6QYgW3NkJVszbp08bpjSlYhwA==?_z=6219621\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026tzofs=0\u0026js_build=3\u0026sw_version=v1.290.0","fqdn":"goomaphy.com","domain":"goomaphy.com","tld":"com"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:06.410Z","timestamp":1693039626410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"goomaphy.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Aug 2023 05:21:05 GMT","end":"Thu, 23 Nov 2023 05:21:04 GMT"},"fingerprint":{"sha1":"C3:74:51:BB:A3:86:76:B1:BF:E9:5F:7B:8B:6D:B9:FA:A5:A9:BF:88","sha256":"6F:0B:7A:8E:1D:AF:D2:00:BC:1C:06:C3:94:42:F3:EC:41:79:78:B2:A3:85:59:85:1B:F8:7C:93:7A:F8:0B:96"}}},"request":{"raw":"GET /impression/LPWpQ5ocdLekPfqRF6D1DjJv-L9rDkvls237RpGcI_KcF5zHE9bykBTaVARj1pytfCNvxCkGpisKuCl80Vf8E4ceLCe6sZKWBEruwr-cXy2YLsUVcNn6Sgv1T-gJ5VV2EWkgvSFZR0rXrtPF85BzYW4FFtY1bUI865y38c-nTuzbsZ2xdt4HtBP-Phlz6vuyHhQ-ZqGg99JA2GcWOsDwh7liMq1f3VhzTnAUKE50F4rK3xiO5sudPTUTnSrZZmw3INxoczKrZ160fB6uhHhC6ihDSRXn0WQYpJwm6jLo7K136xH83y9W0gj90F1_CGOmcXWIbUawcnqxUvxvzJmHSA9tXkKcDGenFavMAZs_SdQQHjBciMsMHphS2SotyQh86ItBBo_cyvKE96Zs0icWn7j1OGOhjVT2NUcc0JD5zk-Qb2rY2tTwZZQKqryyFPCFIWrRvn8exkzoAqNKDKjkZpqgvVD5DLtnTRaDe7WxEOeFL93PcoAKh6Kl7IxdHUZd3OnDb1bz1ikjoIW9_4IOUVNuz0q-7jN6W8q6Lmie6IAAVqoFTomF23cFjXWkc6QYgW3NkJVszbp08bpjSlYhwA==?_z=6219621\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026tzofs=0\u0026js_build=3\u0026sw_version=v1.290.0 HTTP/1.1\r\nHost: goomaphy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nCookie: OAID=fe90afdda491480eb6cf08fc8bdc3762\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:15 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: e43551ab047e1da0aebb5151c891c15b\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-08T07:39:17.646241Z","times_seen":96738,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goomaphy.com/500/6219621?excludes=\u0026oaid=fe90afdda491480eb6cf08fc8bdc3762\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026tzofs=0\u0026js_build=3\u0026sw_version=v1.290.0","fqdn":"goomaphy.com","domain":"goomaphy.com","tld":"com"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:01.541Z","timestamp":1693039621541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"goomaphy.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Aug 2023 05:21:05 GMT","end":"Thu, 23 Nov 2023 05:21:04 GMT"},"fingerprint":{"sha1":"C3:74:51:BB:A3:86:76:B1:BF:E9:5F:7B:8B:6D:B9:FA:A5:A9:BF:88","sha256":"6F:0B:7A:8E:1D:AF:D2:00:BC:1C:06:C3:94:42:F3:EC:41:79:78:B2:A3:85:59:85:1B:F8:7C:93:7A:F8:0B:96"}}},"request":{"raw":"GET /500/6219621?excludes=\u0026oaid=fe90afdda491480eb6cf08fc8bdc3762\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026tzofs=0\u0026js_build=3\u0026sw_version=v1.290.0 HTTP/1.1\r\nHost: goomaphy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nCookie: OAID=a04f295fdd8945078d7cabcb4fdc3a08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: be33ca2c97e27d063ed8775ce352c13b\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://we12.mycima.cc\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\nset-cookie: OAID=fe90afdda491480eb6cf08fc8bdc3762; expires=Sun, 25 Aug 2024 08:47:10 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14139,"size_decoded":0,"mime_type":"text/plain","magic":"gzip compressed data, max speed, from Unix\\012- data","md5":"d8580308ecd8ff5f8682b5159e4e4f52","sha1":"1e3d74e9c14c3cf86b6c5f0b32007078796021ff","sha256":"ee54f7f33bc1a282b9fac35764c7a93ecec123227e0756ee2e1cfefc1ba98b84","sha512":"1ee5a88e31f8adb8e39cce5d1a0ba9b9a52e86e315320c1544851a4e94f09d00c29d1330adf0c14229b3499e641c47e7b481dbd47e5ca047e780a335deefc14c","ssdeep":"192:BWtkC8h3v2R/+dr9OFpoOxUOAwRtvlQCUR5y7ejlktbzNIzkoNWoRwYijjd1KL:IkCUC2dBaxUOAw7vxiw7ekdDo9ijGL","tlshash":"d552c09e81636505f0805ff94d184566e586ba12e9bedc0284e2e7cb3d22dc1db64e0e","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":108,"dns":1,"connect":33,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:06.889Z","timestamp":1693039626889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:21:56 GMT","end":"Mon, 30 Oct 2023 12:21:55 GMT"},"fingerprint":{"sha1":"1B:14:11:9F:49:14:C3:A3:7C:87:B0:E1:5B:18:75:10:3D:2A:B3:72","sha256":"85:D9:D0:AF:62:74:47:FB:41:24:44:EA:9F:33:C1:67:7F:02:79:85:45:10:2B:0E:F6:BF:B3:97:14:2D:B2:98"}}},"request":{"raw":"GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15860\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 25 Aug 2023 10:05:24 GMT\r\nexpires: Sat, 24 Aug 2024 10:05:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81711\r\nlast-modified: Wed, 11 May 2022 19:24:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\\012- data","md5":"e9f5aaf547f165386cd313b995dddd8e","sha1":"acdef5603c2387b0e5bffd744b679a24a8bc1968","sha256":"f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860","sha512":"2a71edb5490f286642a874d52a1969f54282bc43cb24e8d5a297e13b320321fb7b7af5524eac609cf5f95ee08d5e4ec5803e2a3c8d13c09f6cc38713c665d0ce","ssdeep":"384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N","tlshash":"1a62d0058ba5850bf5b907fb0e1ab7ee30664b523c8c42278348073970db47a6b2b1fd","first_seen":"2023-04-05T14:47:55Z","last_seen":"2026-04-08T07:27:23.760972Z","times_seen":89891,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eptougry.net/5/6205538","fqdn":"eptougry.net","domain":"eptougry.net","tld":"net"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.748Z","timestamp":1693039619748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eptougry.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Jul 2023 05:43:34 GMT","end":"Thu, 19 Oct 2023 05:43:33 GMT"},"fingerprint":{"sha1":"D4:F7:CE:29:89:0C:7B:18:44:70:32:EB:C0:B6:5B:D5:8B:47:FB:30","sha256":"98:EA:51:E7:B5:F6:33:CB:3A:E1:63:43:5E:45:FA:CC:B3:F0:2C:AD:B3:62:73:48:AC:1B:16:CB:DF:47:E5:0B"}}},"request":{"raw":"GET /5/6205538 HTTP/1.1\r\nHost: eptougry.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: c06fd1f593e1c063f27f95aea063fafe\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://propeller-tracking.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://me9qgidaa.com\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=b0eb26d569ea474494f7d280cbfa4dd0; expires=Sun, 25 Aug 2024 08:47:08 GMT; path=/; secure; SameSite=None\noaidts=1693039628; expires=Sun, 25 Aug 2024 08:47:08 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75048,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, max speed, from Unix\\012- data","md5":"ca4d43ca8157781f7e169f93189407e5","sha1":"3db7d9e49460c9620cb2caf822d6938cb701612f","sha256":"12537ccf47ad28d2162df31b024ea8b8b39e1121dea04fc75a3c9e5920e2e8dd","sha512":"e74e16683f42ccd8e9d424e1d38a135cf796562bca8403bfe041bbd76800a3c33230a8f9c8cc7bb0086ece15b9dd774281604f680807e0413d7a8210a14bd79a","ssdeep":"1536:0fcfa9vx8O4Jg0lJ+lSngcfZzcOkB4r5DiEsu1DsSIwiZLD/:ha4gEJ+lSzZQK5lKfD/","tlshash":"bd730286a994335ad0b073f043490ee1d4d991365a226cfc275ebc94ad2fd8e78c933b","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":265,"dns":51,"connect":32,"send":0,"wait":69,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:06.819Z","timestamp":1693039626819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:21:56 GMT","end":"Mon, 30 Oct 2023 12:21:55 GMT"},"fingerprint":{"sha1":"94:C0:54:E4:BA:6C:E0:93:C6:8F:D9:27:1C:74:6F:E8:CE:6E:E2:BA","sha256":"EA:1F:82:FA:16:DF:7E:DD:E8:00:89:87:4E:11:E8:AE:F2:0E:C9:65:03:84:71:3D:5C:C9:DC:F7:1A:97:A9:83"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 26 Aug 2023 08:47:15 GMT\r\ndate: Sat, 26 Aug 2023 08:47:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10615,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbdc7ee435c6a7f4277bfc7fedf28368","sha1":"8194a5d7e0108bed7abb001d8bf2b8985a5aa2ca","sha256":"91b113cbf5aedc9b93ceebe313863344b1ead775a618a7e9f31f9e98dbbdf227","sha512":"3a76c3cce0b9184b80ae6c5aa3b9da358e7ce5b939dab4a666327b91c04dbbeaa903278ad08852cdebedf48875fad222d6a28f52737571daee8bd5532a4fdb19","ssdeep":"192:D7NGz7Nf7NA7Nue7Nu7NJj7NkNa5N4NXNRqNWNIJNENFQNDN8NJXNtNGgN+rNU75:DBGzBfBABueBuBNBiafWdRQciCFe5KJD","tlshash":"622267a1481ba400ab831cd673cf7d35ed4f62152082c476ebfd68a8ade7e27536474e","first_seen":"2023-05-06T10:16:08Z","last_seen":"2024-08-21T09:43:59.085779Z","times_seen":813,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goomaphy.com/401/6219621","fqdn":"goomaphy.com","domain":"goomaphy.com","tld":"com"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:00.898Z","timestamp":1693039620898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"goomaphy.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Aug 2023 05:21:05 GMT","end":"Thu, 23 Nov 2023 05:21:04 GMT"},"fingerprint":{"sha1":"C3:74:51:BB:A3:86:76:B1:BF:E9:5F:7B:8B:6D:B9:FA:A5:A9:BF:88","sha256":"6F:0B:7A:8E:1D:AF:D2:00:BC:1C:06:C3:94:42:F3:EC:41:79:78:B2:A3:85:59:85:1B:F8:7C:93:7A:F8:0B:96"}}},"request":{"raw":"GET /401/6219621 HTTP/1.1\r\nHost: goomaphy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: f4fe62e134c59afac1f0d86f65f74dc4\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\nset-cookie: OAID=a04f295fdd8945078d7cabcb4fdc3a08; expires=Sun, 25 Aug 2024 08:47:10 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90641,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b4750d506cbe4e6c38c0ca0b581ca8f7","sha1":"e17a4ee61581f0b8303df44c8e0eae03201e64fb","sha256":"d692fe2de1752a462efeac52f6430ff07f74b2bce4bc3c0bf06c7c2f867f21a7","sha512":"afcb05d753c72b4f7624de2c69d176ac289de986aac1f69021816f63da2ab7016cd00d629ecae7eb70c95c449f4a028a0ca6cb7007101f06c5eb26d0839e3bb9","ssdeep":"1536:Gsfsbp1rFlIByHkmJdhI3qay+4pw3DlM2Zos:GfXroqBbw3BhZos","tlshash":"da938285b5d570d52b5b54230aaf7136a23a7030ff0b8170a83ea6d97b3145ff2a6cd8","first_seen":"2023-08-26T10:47:29Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":193,"dns":54,"connect":32,"send":0,"wait":68,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.22.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:01.303Z","timestamp":1693039621303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 17:09:01 GMT","end":"Sun, 05 Nov 2023 17:09:00 GMT"},"fingerprint":{"sha1":"42:15:A6:1F:C2:2C:D5:FF:32:2C:B9:6C:84:A6:86:63:B0:45:C5:20","sha256":"72:5C:37:A4:DD:98:7B:32:E8:5E:B1:AC:22:24:A6:AD:05:32:03:AC:A8:3C:6B:EE:20:7B:6E:6F:30:BB:F2:CF"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 08:43:59 GMT\r\netag: W/\"646736cf-4447\"\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 690\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=XvlZdXArucipEzmxFhlYlb5ZvPLZOGuVhwyQkX6TH%2B2rTppQyZB92tF5WNSSrrb4bl0kvRe%2FCCRbPqgHUivW8anjXZk18d1yZ62qtPNqpqdaE%2ByDXRgPALlEEicHJw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 7fcacef93e93b527-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17479,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (17479), with no line terminators","md5":"dd2f9f2bb1e1c74b905556d0a7bc5545","sha1":"0c831c8c56da8167b9e2dfd1d3eb3288348da85d","sha256":"63f957dde1ae04a83eaff7e442e693725562c4aa1062bc072b7509640ec4f663","sha512":"0ec8da6696e5c139d48e67fa800cf152fb610ea91911314a4948bfff38c23b49c02c544aeaedf428d8bea2e1abf599b9221597fe6bb251ed76962e6209d38478","ssdeep":"384:6i753sKV8sWO5SM6gWahT8s6qCVUggmWZKKKD6KDnkC0GR5:rBOsWTSht8sUU1m4ODyGv","tlshash":"9d72c9c6711c7de65ea06033477f276dab6b9990f47f81b280a278a47a3054bf643dc2","first_seen":"2023-05-22T16:37:35Z","last_seen":"2023-09-06T23:37:01Z","times_seen":392,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":45,"dns":29,"connect":1,"send":0,"wait":37,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.735Z","timestamp":1693039619735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:21:56 GMT","end":"Mon, 30 Oct 2023 12:21:55 GMT"},"fingerprint":{"sha1":"94:C0:54:E4:BA:6C:E0:93:C6:8F:D9:27:1C:74:6F:E8:CE:6E:E2:BA","sha256":"EA:1F:82:FA:16:DF:7E:DD:E8:00:89:87:4E:11:E8:AE:F2:0E:C9:65:03:84:71:3D:5C:C9:DC:F7:1A:97:A9:83"}}},"request":{"raw":"GET /css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 26 Aug 2023 08:47:08 GMT\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/ro\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11978,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06596cfa2dee431129c328e050b9fb2a","sha1":"1a991c51ab2b2da5647e83f481e7d18d60a45b3b","sha256":"bf6fe0ffee1d57731da4d1cf3cfe88e1effa9b36c51a85018a91ed43b91c3de6","sha512":"2d8f0e19f3dabe9ff65c950bb65506dccf925175f6a9a7fa398174b67b49fdefd06c1f0ad245ddd9167831d8f940cb5a3ac9bdb22fffe3cccde16b986f323ff6","ssdeep":"192:cokykvpkFSG/QlIbHfA0Na5N4NXNRqNWNIJNENFQNDN8NJXNtNGgN+rNU7N8NHNC:co9oQ/npafWdRQciCFe5KJdjZmUBKtb+","tlshash":"1f329ca1082ba400ab830cd673ce7d35ed4f61153052c576ebfd68a8adebe27536474e","first_seen":"2023-05-09T02:55:10Z","last_seen":"2024-08-21T08:04:43.925004Z","times_seen":53,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":165,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:00.941Z","timestamp":1693039620941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:21:56 GMT","end":"Mon, 30 Oct 2023 12:21:55 GMT"},"fingerprint":{"sha1":"1B:14:11:9F:49:14:C3:A3:7C:87:B0:E1:5B:18:75:10:3D:2A:B3:72","sha256":"85:D9:D0:AF:62:74:47:FB:41:24:44:EA:9F:33:C1:67:7F:02:79:85:45:10:2B:0E:F6:BF:B3:97:14:2D:B2:98"}}},"request":{"raw":"GET /ea/droidarabickufi/v6/DroidKufi-Regular.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 22 Aug 2023 01:34:21 GMT\r\nexpires: Wed, 21 Aug 2024 01:34:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 Aug 2014 16:50:04 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nage: 371568\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31248, version 1.0\\012- data","md5":"436938da6ed799ca17110e719e4d2e51","sha1":"b7ef31b6085a9f0963dffe7939abca527724d389","sha256":"a7b09bb9c8e8e2fb189204e08ed94bd8096c118780b5e926847cf2748ca7c5c2","sha512":"7e4d6769197b05994e2ee2d8570e66d235a5322e8250179f97e501dc6bcd7c0d5f9f07e270670977812e9d72d652b736ef5c81c587d180ead66cd83aa4a10f99","ssdeep":"768:FJtbpWa4AHdCpfyRcVsjmk4h348ZOtsQivESLbxl:L6nAHdC86Vs6k4hVZvhl","tlshash":"b6e2e1539eb17dca103a71f14ed1be97c5c148729229a9741ca7b4f820ce49b72fb287","first_seen":"2023-04-11T00:32:28Z","last_seen":"2026-04-07T20:19:25.904344Z","times_seen":1397,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":78,"dns":1,"connect":7,"send":0,"wait":18,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:46:59.756Z","timestamp":1693039619756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 30 Dec 2022 00:00:00 GMT","end":"Sat, 30 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A","sha256":"A9:0D:CB:FA:8B:27:40:D5:69:3F:93:AD:77:1E:A7:F8:FA:9A:FE:2E:75:63:04:E9:12:F7:63:DD:B0:C2:87:F5"}}},"request":{"raw":"GET /bootstrap/3.2.0/js/bootstrap.min.js HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 26 Aug 2023 08:47:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nlast-modified: Mon, 25 Jan 2021 22:03:57 GMT\r\ncdn-cachedat: 11/03/2021 03:23:08\r\ncdn-proxyver: 1.0\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 722\r\ncdn-status: 200\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-requestid: 0b7e42ce5c8ad95295886cdcce8be1f4\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 18936024\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 7fcaceef58f81c06-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (31650)","md5":"abda843684d022f3bc22bc83927fe05f","sha1":"26908395e7a9a4eab607d80aa50a81d65f3017cb","sha256":"24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f","sha512":"3f1b46e9ea0fb6be507605a2783af406c6b4f885dedaa4401bff204b0fe9056656717411021594e2512e98a4e398e3238267a7deafeba1b57e443decab0477ea","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc","tlshash":"43e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-08T07:01:29.863662Z","times_seen":7203,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":10,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eptougry.net/?rb=UKdxvEOoG3vXt8gRlUnF_b-sdKDgsj3-zjjCNyjRqM5WpS1yIG5xP6jGRKR9bw9JjNqnGZrHmCodAccbzKt8GyaEuhSBSR-4nw4_gDGv2IXqOVnI2rRTLbXD6s-IX-aGrphb-byGMlEevATnwp6UrCsn04xWh18xrHToOuY8i85oZVs5TUIlTIqOZmwPlr4ewB3TXU3A030WlyPRCuiu-70yvmGynst3\u0026request_ab2=150003\u0026zoneid=6205538\u0026js_build=iclick-v1.593.0\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wih=1024\u0026wiw=1280\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026wgl=\u0026js_build=iclick-v1.593.0\u0026bs=29ad8856-0b49-461b-9a68-2ea38163c046\u0026userId=fe90afdda491480eb6cf08fc8bdc3762\u0026m=link","fqdn":"eptougry.net","domain":"eptougry.net","tld":"net"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:01.587Z","timestamp":1693039621587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eptougry.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Jul 2023 05:43:34 GMT","end":"Thu, 19 Oct 2023 05:43:33 GMT"},"fingerprint":{"sha1":"D4:F7:CE:29:89:0C:7B:18:44:70:32:EB:C0:B6:5B:D5:8B:47:FB:30","sha256":"98:EA:51:E7:B5:F6:33:CB:3A:E1:63:43:5E:45:FA:CC:B3:F0:2C:AD:B3:62:73:48:AC:1B:16:CB:DF:47:E5:0B"}}},"request":{"raw":"GET /?rb=UKdxvEOoG3vXt8gRlUnF_b-sdKDgsj3-zjjCNyjRqM5WpS1yIG5xP6jGRKR9bw9JjNqnGZrHmCodAccbzKt8GyaEuhSBSR-4nw4_gDGv2IXqOVnI2rRTLbXD6s-IX-aGrphb-byGMlEevATnwp6UrCsn04xWh18xrHToOuY8i85oZVs5TUIlTIqOZmwPlr4ewB3TXU3A030WlyPRCuiu-70yvmGynst3\u0026request_ab2=150003\u0026zoneid=6205538\u0026js_build=iclick-v1.593.0\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wih=1024\u0026wiw=1280\u0026wfc=0\u0026pl=https%3A%2F%2Fwe12.mycima.cc%2Ftag.php%3Ft%3D%25D8%25A7%25D9%2581%25D9%2584%25D8%25A7%25D9%2585-%25D8%25AF%25D9%258A%25D8%25B2%25D9%2586%25D9%258A\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026wgl=\u0026js_build=iclick-v1.593.0\u0026bs=29ad8856-0b49-461b-9a68-2ea38163c046\u0026userId=fe90afdda491480eb6cf08fc8bdc3762\u0026m=link HTTP/1.1\r\nHost: eptougry.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://we12.mycima.cc/\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=fe90afdda491480eb6cf08fc8bdc3762; oaidts=1693039630; syncedCookie=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-type: application/json\r\nx-trace-id: 5ae1b7f25c19d2768da084f442449a6d\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://we12.mycima.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=fe90afdda491480eb6cf08fc8bdc3762; expires=Sun, 25 Aug 2024 08:47:10 GMT; path=/; secure; SameSite=None\noaidts=1693039630; expires=Sun, 25 Aug 2024 08:47:10 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Sat, 02 Sep 2023 08:47:10 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1807,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (1828), with no line terminators","md5":"7499fc0f57d3b33ee1037898d6679d3f","sha1":"6820cc9b378a73ee4c7db39564faa3b85222dc66","sha256":"652b9b0131e515406f2f2189b50ee7b4ffc1ac44d4d3762c27873e999b9175d8","sha512":"cf962fbc340b010f0e3b8eb7a0f4ce6dcadc59fe96fddc0836de08e4ba0c8382ff201e4d58e7f968b5b38a4f01ba140e293f0e190e78c17a1ce58220210468d8","ssdeep":"","tlshash":"f0310b6b82635c19a30a660d0c756f72d48b54594e9b422cc08fea07c1bf5306c5c741","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eptougry.net/5/6205538/?abt_opts=1\u0026js_build=iclick-v1.593.0\u0026userId=fe90afdda491480eb6cf08fc8bdc3762","fqdn":"eptougry.net","domain":"eptougry.net","tld":"net"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:01.378Z","timestamp":1693039621378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eptougry.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Jul 2023 05:43:34 GMT","end":"Thu, 19 Oct 2023 05:43:33 GMT"},"fingerprint":{"sha1":"D4:F7:CE:29:89:0C:7B:18:44:70:32:EB:C0:B6:5B:D5:8B:47:FB:30","sha256":"98:EA:51:E7:B5:F6:33:CB:3A:E1:63:43:5E:45:FA:CC:B3:F0:2C:AD:B3:62:73:48:AC:1B:16:CB:DF:47:E5:0B"}}},"request":{"raw":"GET /5/6205538/?abt_opts=1\u0026js_build=iclick-v1.593.0\u0026userId=fe90afdda491480eb6cf08fc8bdc3762 HTTP/1.1\r\nHost: eptougry.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://we12.mycima.cc/\r\nCookie: OAID=b0eb26d569ea474494f7d280cbfa4dd0; oaidts=1693039628\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 26 Aug 2023 08:47:10 GMT\r\ncontent-type: application/json\r\nx-trace-id: dbb9e097e72c83b242e82c63b4660f66\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://propeller-tracking.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://me9qgidaa.com\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://we12.mycima.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=fe90afdda491480eb6cf08fc8bdc3762; expires=Sun, 25 Aug 2024 08:47:10 GMT; path=/; secure; SameSite=None\noaidts=1693039630; expires=Sun, 25 Aug 2024 08:47:10 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Sat, 02 Sep 2023 08:47:10 GMT; path=/; secure; SameSite=None\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2760,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (3000), with no line terminators","md5":"49d7e2c35044db8ee0405c3484c59ba5","sha1":"bc739dbf4a3d289174231d52519b5a8fac3c98e8","sha256":"159ce80a9746137bce9eb4f40529fa78f824da9f0215a6f837f21084b10f78a0","sha512":"64b94f712a99854486c97e451d995d2888950d0ab72263645bdbad74cca716f9e3c644dfedbf37eee0447b940f03b26d33adb7ddd7bec8e463e25a674156ea38","ssdeep":"","tlshash":"cd512045e556ec5fe046846eef3d1d32539c286abaa27c56c6dc8c4d20ff031731ab0a","first_seen":"2023-08-26T10:47:30Z","last_seen":"2023-08-26T10:47:30Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://we12.mycima.cc/tag.php?t=%D8%A7%D9%81%D9%84%D8%A7%D9%85-%D8%AF%D9%8A%D8%B2%D9%86%D9%8A","date":"2023-08-26T08:47:06.892Z","timestamp":1693039626892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 07 Aug 2023 12:21:56 GMT","end":"Mon, 30 Oct 2023 12:21:55 GMT"},"fingerprint":{"sha1":"1B:14:11:9F:49:14:C3:A3:7C:87:B0:E1:5B:18:75:10:3D:2A:B3:72","sha256":"85:D9:D0:AF:62:74:47:FB:41:24:44:EA:9F:33:C1:67:7F:02:79:85:45:10:2B:0E:F6:BF:B3:97:14:2D:B2:98"}}},"request":{"raw":"GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://we12.mycima.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Aug 2023 04:50:55 GMT\r\nexpires: Fri, 23 Aug 2024 04:50:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 186980\r\nlast-modified: Wed, 11 May 2022 19:24:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\\012- data","md5":"15d9f621c3bd1599f0169dcf0bd5e63e","sha1":"7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52","sha256":"f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615","sha512":"d35a47162fc160cd5f806c3bb7feb50ec96fdfc81753660ead22ef33f89be6b1bfd63d1135f6b479d35c2e9d30f2360ffc8819efca672270e230635bcb206c82","ssdeep":"384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/","tlshash":"8162e00158a163ade9b2327ed10b1b91c40660a27d2504e8c6e4fc95fe3d7ed5487b76","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-04-08T07:27:23.735235Z","times_seen":158538,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}