{"report_id":"81f6e2a9-342b-4fdc-b798-aae9f1ea3137","version":6,"status":"done","tags":[],"date":"2025-08-19T07:40:20Z","url":{"schema":"http","addr":"hardchan.pw","fqdn":"hardchan.pw","domain":"hardchan.pw","tld":"pw"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"title":"PrivateBin"},"submit":{"url":{"schema":"http","addr":"hardchan.pw","fqdn":"hardchan.pw","domain":"hardchan.pw","tld":"pw"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-23T07:40:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"secret.timeweb.ru","ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2006-04-10","domain_rank":0,"first_seen":"2025-08-11T11:27:11.57586Z","last_seen":"2025-08-11T11:27:11.57586Z","alert_count":0,"request_count":23,"received_data":855876,"sent_data":9559,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Showdown:2.1.0","description":"A Markdown to HTML converter written in Javascript.","website":"https://showdownjs.com/","common_platform_enumeration":"","icon":"Showdown.png","categories":["JavaScript libraries"]}]},{"fqdn":"kutt.it","ip":{"addr":"104.21.43.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-15","domain_rank":227740,"first_seen":"2018-03-03T05:24:08Z","last_seen":"2025-08-17T19:55:11.440887Z","alert_count":0,"request_count":1,"received_data":20417,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hardchan.pw","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-12-06","domain_rank":2792912,"first_seen":"2018-12-24T02:11:05Z","last_seen":"2025-08-11T11:27:12.056145Z","alert_count":0,"request_count":1,"received_data":19789,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"secret.timeweb.ru/js/showdown-2.1.0.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5372104fbf105c57a65eebf3f1cd330","sha1":"c9dfe5b6f7dd08ef84167529b60eae66d326931a","sha256":"b385ba6106708b005db83309a1484995df6fb5fcefe628ceacc8f14138c358bf","sha512":"5985d98244d1d2efd8f525480389d34ce8a1d245cc11df11455e8c2c574be9853cca6851e76f0d2e5610b759e52506d8cf8116f99b12d1fc756b086240999ed5","ssdeep":"768:0ozWCs9hNpYJ9KDXfWNV2AKNwbFcMZfk0HmWE7K7vD2urUdOvQCYFCCYQclAUD3S:5iCsUcynTALsvDlAUDE8Mz+GhfD5","tlshash":"55732c683441ad5e169533ead8ce0ca4f23b8b6456858fb0ded1ca6e347e88d7127fc4","size":75167,"data":"","first_seen":"2023-07-16T09:01:29Z","last_seen":"2026-05-26T08:47:56.318183Z","times_seen":673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/legacy.js?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bdd06a79c8b49af6454790c5aed5e73","sha1":"e4cad0b9ae4591c4913bc58da8b52092cc93a83d","sha256":"fa36ecda65f3e5cefda2394fe627361581e56dfc6f85f1d5af83e0bf5249cc5e","sha512":"2d8a2cfaa5c7211a857f964f36986fb53074720cc7522ceedb0c1c3b0730cff548a51bfd96970180f633e2eaba8f1d083700808fa15b9e5e47a0a88bb9f4b68e","ssdeep":"192:9yEX0+j8kAjljXjV6WhFB8lk4tCArTdNSt9bIdkAuP4GX:fkPhDQk42J","tlshash":"bf02469928f72236a763207e574f6385f631821f52489d103a8e03706fd4b2a87f6edd","size":8608,"data":"","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.310942Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/jquery-3.7.1.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-26T10:21:01.659083Z","times_seen":161298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/privatebin.js?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"782d1d36f1c1453f14c77632bf9c4ff7","sha1":"b629a815250bbada7311a104aed623a8e4a0d218","sha256":"909763faf6b2ae8f35b98675aca8fd941882b507b345db2a93f362f77510a95c","sha512":"5a9e3d151627ba9fd56bcb6574fa6fa3f0b567819f7b65d924ce7fc1751e989a839a44b8421d509efeb2527e02b0dabb4a27505af47812f60b32b13413d3b0bd","ssdeep":"1536:pVSz367gc5JPrKdC6OHswtle4iZ2dx4gRnrUGydAceqK6khshBoxwt06JYTXD1R6:y67gc5JPN6OMwtJ5Ehkt6x","tlshash":"f804835938f3206001a76079678f7144f635a11b3284ad407e8e87b4af96f298bf7bdd","size":182401,"data":"","first_seen":"2024-07-19T21:04:37Z","last_seen":"2026-05-10T01:51:37.397169Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/kjua-0.9.0.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c7a3c059f70a1e263fea834f6b3aff2","sha1":"fe58ae9bfaa926148405a4e5b30d7ef8aa5263c7","sha256":"53d3b023092e049484c4e39ce6f50d1b8dd10074795e66da06e1140792a91d9a","sha512":"0959fb69ffaf4cc05df518e84b840ce5fa4b1443ad042a01d333ed6aa2030bbb05e05f2a8144911504292321031acafacab8dbb8e2f375fdb4b641c79a96aac1","ssdeep":"384:HoMFAd3OIE/RbsuMGu3E6y+4rPAAdTRCbigArW2LOdIbXDR8OA5HHqsglTcURYd/:pICdj4mrWIOdIbXDR54WT6B4QMwG208L","tlshash":"73d2c685f2c5b1a547666ce1082f604bf179a9223c1e8154eb36c4d2bcb8bd9943ff78","size":28429,"data":"","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.316543Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/base-x-4.0.0.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c889b812165d2d9d78be8e714501a6","sha1":"618ccdcbe859da85359991dd432af082d89e1e1a","sha256":"c10efaf984288e6261125b954cfa22eb42dab032c70aa4c7184b6c983a3c5917","sha512":"9cd3e0e48182c30aef799f1c03fc8c1abe478914b93ecd87facd09fe62933e308f594805186c3b3399ea7673c3dd5b11c02572b1487763c3968de48a1a411025","ssdeep":"96:i1KhRS7iegx4ifikLQj1DI6iCYbHRSxWilXiiQ5xRLQ4:i1KhR5egxV6+QpDsDzRSx3lyiQ5X/","tlshash":"e681418d6ee511907c437969492ea00473b82207862edf18f91ff2107fb056507eaedf","size":4152,"data":"","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.314252Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"b44f6f74b244d2da82975c63a95d9b11","sha1":"8d85cb0ed963c08001cbee9b07af85ce47484fb4","sha256":"eb3e3dcbc03908fdd57fbad9d733b8407d9d149f40ff08f3357926f885cf47d6","sha512":"75083593e8ce7748281cf71dc477298bc6d7d6ebf199e850f80aacdfd45ddf47dd24b4e61b0c0e2338d2acb0fe97c6332d5eb53f5f971b34a23892ef6e5c340c","ssdeep":"","tlshash":"d56000003300033c0c003000c000000f000000000fc0000300cc303000c033f03c0cc0","size":14,"data":"","first_seen":"2023-03-07T12:09:40Z","last_seen":"2026-05-26T09:27:27.616713Z","times_seen":4565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/purify-3.1.3.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a47d62f2144566e23303c26e576a60c","sha1":"0fb4650d1390fdffb1236475bf2a6c4e0b16f4b1","sha256":"fd996be2ad83f6b186d058dac57afb0d629ab20ca8f6bfd9ae3b18d5bf373ae6","sha512":"b7f14a1bfb9c4153164d6568b92300052131d6bfae4b2008f5e343ab4284afd98f864831a49ced1c8fc4ef6248a6fffe5703ecfd0e21bacc63d784c4f4fb3fc2","ssdeep":"384:Q9G37Fd21GJoPsv8slMDkuYMecTJSdRf5nhHfk3dJaF5puOwbFjuPpe+VYDfJG3E:5BdmjUv8AMD9YMecVkRf5nhHfk3dJaFE","tlshash":"51a2385e6d5079722fee01d524bb550d62bc141f300c88a0e2deecb554baad9a07bf2f","size":22012,"data":"","first_seen":"2024-07-03T07:41:42Z","last_seen":"2026-05-10T01:51:37.395183Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/prettify.js?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbf9bdbec7ff7548dab75ac3b87e7b61","sha1":"a688c64ac91d10d69ebf26341e0f9d5813804732","sha256":"bea109073be4b8374289b716e3e627641b84a0dbc307eb3ce89e81f05cfa20e4","sha512":"a6e3b43a0cbef88a00d8f6fd2234b15759f8fa4424297600114b55cdf66941ea720cfc9793c8689226034bbc9b328818972c8423030ba59a9584290045058b32","ssdeep":"384:kAjqq7seO7ouVvvrBJL3HpEkjJ65wzByrAS/0/efhYkKsGJsssfh1:vjqq76ooL3HJ7kr8/efhYkKsGJsssfh1","tlshash":"05623b9d6a953f18666521b44daf3013a4fd191bae0cb4b4e395dd3076b0e8a007fedc","size":15081,"data":"","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.307286Z","times_seen":791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"eval","is_inline":false,"md5":"b44f6f74b244d2da82975c63a95d9b11","sha1":"8d85cb0ed963c08001cbee9b07af85ce47484fb4","sha256":"eb3e3dcbc03908fdd57fbad9d733b8407d9d149f40ff08f3357926f885cf47d6","sha512":"75083593e8ce7748281cf71dc477298bc6d7d6ebf199e850f80aacdfd45ddf47dd24b4e61b0c0e2338d2acb0fe97c6332d5eb53f5f971b34a23892ef6e5c340c","ssdeep":"","tlshash":"d56000003300033c0c003000c000000f000000000fc0000300cc303000c033f03c0cc0","size":14,"data":"","first_seen":"2023-03-07T12:09:40Z","last_seen":"2026-05-26T09:27:27.616713Z","times_seen":4565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/zlib-1.3.1.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d894481ef3c9779d9c8b955fb0682e7","sha1":"a3234d9c0ec4613d4ec2e48c2046887176a53d85","sha256":"b10cec5bc5a44a51f85d90f2aa2385f086ddb10b550da1b652a55f479833ed92","sha512":"67dd28a69571fe69f40c6da4f5a8ab8c5550ba58842e55cb793dd24623ba30b89449b846940abe505c2661b1b88bd9b05bcedd906f1f8093daa46c2752aeceb2","ssdeep":"96:yKwI51/f1dboTGbbQVTziPt52FL+Pt5EynwWwwUT:1wIFFoTG41zi152FL+159ndwpT","tlshash":"58b1fc1e1bfb4252d383f49e8ba744425139e90b390add0c794d86e04f96074dbeabf9","size":5186,"data":"","first_seen":"2024-06-05T20:15:08Z","last_seen":"2026-05-10T01:51:37.387902Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/bootstrap-3.4.1.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39680,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T10:38:54.776175Z","times_seen":27813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/rawinflate-0.3.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dba0c4d1f49b1fd3740bdcdd8664b164","sha1":"a06756a1dd0bba119d304607a47e9208803a330b","sha256":"d637256269d76c50938c811266303d6ce752eb825782792c6e39a99027e66dcd","sha512":"83cb9e9468095bd03f675b41e88cf169bfbea23e64743ec1e2a0bb0c7c19901e8318c5cacb3c7bbf99af6a9d875ee788d88227d3c625458339ea3c16766dae71","ssdeep":"384:P7X2ZDobsVv4uIi6QhLhGYiy7OT6Q1cdcpc6XIHHapjxD0y1vx:P7mSb4v4unrCGqT6ccDHix","tlshash":"c992b54a5770269e7146e498cf8f840d573c98135a98d835bd1c76be3f82468c2ecbaf","size":19782,"data":"","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.310406Z","times_seen":632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"secret.timeweb.ru/js/bootstrap-3.4.1.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/bootstrap-3.4.1.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-9b00\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39680,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39553)","md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-26T10:38:54.776175Z","times_seen":27813,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/img/icon.svg","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /img/icon.svg HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:40:00 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 943\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nConnection: keep-alive\r\nETag: \"6696dd87-3af\"\r\nExpires: Fri, 19 Sep 2025 07:40:00 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":943,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64f1dfe4b6660bf054b858921ebc5431","sha1":"a777ddf13928611c935a42c9a0a19661597b7fac","sha256":"f7a080b5330aa7f0ffbb3d52a09a94d24104c16572fe384cfd41a41221b89e31","sha512":"1b0f5ad1f4ddeaa291e726a091d8422f8bfb52b526e687803cdfbdc1d5caca905dfbc8511cd4d2413189159a97708c78bb49747dd9108d0b612177a678cca4fe","ssdeep":"","tlshash":"6c11441ef3dc806cf519cb28d6f2a8b8811fa14f908042cee5a14db681305c57229bd9","first_seen":"2023-05-05T14:19:55Z","last_seen":"2026-05-26T08:47:56.312142Z","times_seen":770,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/css/common.css","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /css/common.css HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.timeweb.ru/css/bootstrap/privatebin.css?1.7.4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-5b3\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (380)","md5":"1ff29a1fa202fb9a21deeb9f656a7983","sha1":"c000d32fb748e5ac05ebadb4ed2e689020856d18","sha256":"12fd5e3d2501b47ed5d0fcef2f1a7a585631e7b5026de6d1cf404a98492ac15f","sha512":"d9e56cfab8755e01eb6b93784433e40b0909b9011da5f49e64a44d81467208a611f387d215217298ea4eba83b2d4a63df3aa508b0613cedc7548b6d1ccbae520","ssdeep":"","tlshash":"7f317431f691640d760b93b28eb5e710542fa409af0f0f79f53a7170e3090611073ea4","first_seen":"2024-12-08T05:50:38.011229Z","last_seen":"2026-05-10T01:51:37.381836Z","times_seen":36,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/zlib-1.3.1.wasm","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/zlib-1.3.1.wasm HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:40:00 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 58827\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nConnection: keep-alive\r\nETag: \"6696dd87-e5cb\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58827,"size_decoded":0,"mime_type":"application/octet-stream","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"dbc52f1eb84c0fa60740f2d676a71fb9","sha1":"afb9573c38fbd8ab839caf09f7d1c5b2412ae782","sha256":"4c8e8b5890e68ffe3d39a3d29793782a41ff9cadbc0478b0d96371dbc82d47e3","sha512":"271fa71d706446f38a0b37e05758fbc8eef132c2619be2936c3deee4d5a721b3a2e46f07496365d0b5064883a262bceb5256191167c641fa28adfda638c4d08a","ssdeep":"1536:yaFHY0EtMNVrIcQlx5ICLpNPWb3qXyUIO9:tFHsincVzXpNs3qC69","tlshash":"4f43fa02b01959fbb46484210394c7b967e394c5b39979f2d79c3aba1cbbb833195bf0","first_seen":"2024-06-05T20:15:09Z","last_seen":"2026-05-23T18:20:05.518538Z","times_seen":475,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":41,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/img/favicon-16x16.png","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:40:00.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /img/favicon-16x16.png HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:40:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 469\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nConnection: keep-alive\r\nETag: \"6696dd87-1d5\"\r\nExpires: Fri, 19 Sep 2025 07:40:00 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"ab711e319fc8280dba1a8421080f3950","sha1":"1dd0196bff1799f5087a7a74f3a43e63e51c02fe","sha256":"25fc4a9d122b164a308c601cb1d1b52f5cf405658ca85fad0ca0c269d35bf824","sha512":"167f99efedc12d2fd81076c286a7c53607e17b100a8104f12314c4ce909f414378aaceecf4f40ffdce9aac759a3fd122fd992838b43c111272191e8158492879","ssdeep":"","tlshash":"14f054c733545c84e74c53bc03c348022681017368919842d4bbee62f65d911b2fcd23","first_seen":"2023-05-05T14:19:55Z","last_seen":"2026-05-26T08:47:56.313219Z","times_seen":754,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kutt.it/85Hku6","fqdn":"kutt.it","domain":"kutt.it","tld":"it"},"ip":{"addr":"104.21.43.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-19T07:39:58.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kutt.it","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 Aug 2025 20:46:01 GMT","end":"Fri, 14 Nov 2025 21:43:09 GMT"},"fingerprint":{"sha1":"6B:40:7D:0A:55:50:DB:D7:1D:2C:AF:41:D1:A6:89:D0:D7:E6:CA:AA","sha256":"9F:4D:06:5F:FD:E6:14:B9:CE:D1:08:92:48:F7:4D:EE:FF:1E:67:A5:9E:B0:4F:CC:5F:49:91:B0:2B:AD:3B:D8"}}},"request":{"raw":"GET /85Hku6 HTTP/1.1\r\nHost: kutt.it\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 19 Aug 2025 07:39:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ\r\nserver: cloudflare\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer, no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Accept\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=501\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZmMjAlDMPrsgCbYtcB%2BZ2Pwl%2FhWUi3KAcGr86inGTOwEI8efP9jrHylfOzwMfO1wo4Hw4VOj22e0nvq7K1xbA2QdvMNw18%3D\"}]}\r\ncf-ray: 9718000b29bb5bd9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19270,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T10:18:27.992594Z","times_seen":15721036,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":48,"dns":15,"connect":8,"send":0,"wait":519,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/base-x-4.0.0.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/base-x-4.0.0.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-1038\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4152,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"f0c889b812165d2d9d78be8e714501a6","sha1":"618ccdcbe859da85359991dd432af082d89e1e1a","sha256":"c10efaf984288e6261125b954cfa22eb42dab032c70aa4c7184b6c983a3c5917","sha512":"9cd3e0e48182c30aef799f1c03fc8c1abe478914b93ecd87facd09fe62933e308f594805186c3b3399ea7673c3dd5b11c02572b1487763c3968de48a1a411025","ssdeep":"96:i1KhRS7iegx4ifikLQj1DI6iCYbHRSxWilXiiQ5xRLQ4:i1KhR5egxV6+QpDsDzRSx3lyiQ5X/","tlshash":"e681418d6ee511907c437969492ea00473b82207862edf18f91ff2107fb056507eaedf","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.314252Z","times_seen":485,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/rawinflate-0.3.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/rawinflate-0.3.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-4d46\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19782,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"dba0c4d1f49b1fd3740bdcdd8664b164","sha1":"a06756a1dd0bba119d304607a47e9208803a330b","sha256":"d637256269d76c50938c811266303d6ce752eb825782792c6e39a99027e66dcd","sha512":"83cb9e9468095bd03f675b41e88cf169bfbea23e64743ec1e2a0bb0c7c19901e8318c5cacb3c7bbf99af6a9d875ee788d88227d3c625458339ea3c16766dae71","ssdeep":"384:P7X2ZDobsVv4uIi6QhLhGYiy7OT6Q1cdcpc6XIHHapjxD0y1vx:P7mSb4v4unrCGqT6ccDHix","tlshash":"c992b54a5770269e7146e498cf8f840d573c98135a98d835bd1c76be3f82468c2ecbaf","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.310406Z","times_seen":632,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/prettify.js?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/prettify.js?1.7.4 HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-3ae9\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15081,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (682)","md5":"fbf9bdbec7ff7548dab75ac3b87e7b61","sha1":"a688c64ac91d10d69ebf26341e0f9d5813804732","sha256":"bea109073be4b8374289b716e3e627641b84a0dbc307eb3ce89e81f05cfa20e4","sha512":"a6e3b43a0cbef88a00d8f6fd2234b15759f8fa4424297600114b55cdf66941ea720cfc9793c8689226034bbc9b328818972c8423030ba59a9584290045058b32","ssdeep":"384:kAjqq7seO7ouVvvrBJL3HpEkjJ65wzByrAS/0/efhYkKsGJsssfh1:vjqq76ooL3HJ7kr8/efhYkKsGJsssfh1","tlshash":"05623b9d6a953f18666521b44daf3013a4fd191bae0cb4b4e395dd3076b0e8a007fedc","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.307286Z","times_seen":791,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/showdown-2.1.0.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/showdown-2.1.0.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-1259f\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75167,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61326)","md5":"d5372104fbf105c57a65eebf3f1cd330","sha1":"c9dfe5b6f7dd08ef84167529b60eae66d326931a","sha256":"b385ba6106708b005db83309a1484995df6fb5fcefe628ceacc8f14138c358bf","sha512":"5985d98244d1d2efd8f525480389d34ce8a1d245cc11df11455e8c2c574be9853cca6851e76f0d2e5610b759e52506d8cf8116f99b12d1fc756b086240999ed5","ssdeep":"768:0ozWCs9hNpYJ9KDXfWNV2AKNwbFcMZfk0HmWE7K7vD2urUdOvQCYFCCYQclAUD3S:5iCsUcynTALsvDlAUDE8Mz+GhfD5","tlshash":"55732c683441ad5e169533ead8ce0ca4f23b8b6456858fb0ded1ca6e347e88d7127fc4","first_seen":"2023-07-16T09:01:29Z","last_seen":"2026-05-26T08:47:56.318183Z","times_seen":673,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/purify-3.1.3.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/purify-3.1.3.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-55fc\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22012,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (21823)","md5":"6a47d62f2144566e23303c26e576a60c","sha1":"0fb4650d1390fdffb1236475bf2a6c4e0b16f4b1","sha256":"fd996be2ad83f6b186d058dac57afb0d629ab20ca8f6bfd9ae3b18d5bf373ae6","sha512":"b7f14a1bfb9c4153164d6568b92300052131d6bfae4b2008f5e343ab4284afd98f864831a49ced1c8fc4ef6248a6fffe5703ecfd0e21bacc63d784c4f4fb3fc2","ssdeep":"384:Q9G37Fd21GJoPsv8slMDkuYMecTJSdRf5nhHfk3dJaF5puOwbFjuPpe+VYDfJG3E:5BdmjUv8AMD9YMecVkRf5nhHfk3dJaFE","tlshash":"51a2385e6d5079722fee01d524bb550d62bc141f300c88a0e2deecb554baad9a07bf2f","first_seen":"2024-07-03T07:41:42Z","last_seen":"2026-05-10T01:51:37.395183Z","times_seen":75,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/img/apple-touch-icon.png","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:40:00.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:40:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 3967\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nConnection: keep-alive\r\nETag: \"6696dd87-f7f\"\r\nExpires: Fri, 19 Sep 2025 07:40:00 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"ea9ce534846ee6ceb6b556a3cf5bf7f9","sha1":"dbaa9c523e521c9b638e54927988155ccb24f58e","sha256":"b5d93dc2145e05e4234908c4cce258203634aa9b9ab5d2325583315a3dfa9f61","sha512":"dfff2e7dd6cb548fb74b1b4744c6b0335506d1a51801273d97ff4bf3d0f97b54bfdd2e6d1d9f7a245a0d9e77980b1f8ce8944058798b20c02a8998b37741edae","ssdeep":"","tlshash":"94815dc4c2328de7a6f34b748d70f4e1c2946c7daa05fedea944509889b40379a61778","first_seen":"2023-05-05T14:19:55Z","last_seen":"2026-05-26T08:47:56.31527Z","times_seen":570,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/kjua-0.9.0.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/kjua-0.9.0.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-6f0d\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28429,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28344)","md5":"5c7a3c059f70a1e263fea834f6b3aff2","sha1":"fe58ae9bfaa926148405a4e5b30d7ef8aa5263c7","sha256":"53d3b023092e049484c4e39ce6f50d1b8dd10074795e66da06e1140792a91d9a","sha512":"0959fb69ffaf4cc05df518e84b840ce5fa4b1443ad042a01d333ed6aa2030bbb05e05f2a8144911504292321031acafacab8dbb8e2f375fdb4b641c79a96aac1","ssdeep":"384:HoMFAd3OIE/RbsuMGu3E6y+4rPAAdTRCbigArW2LOdIbXDR8OA5HHqsglTcURYd/:pICdj4mrWIOdIbXDR54WT6B4QMwG208L","tlshash":"73d2c685f2c5b1a547666ce1082f604bf179a9223c1e8154eb36c4d2bcb8bd9943ff78","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.316543Z","times_seen":567,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":52,"dns":1,"connect":47,"send":0,"wait":42,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/css/bootstrap/privatebin.css?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /css/bootstrap/privatebin.css?1.7.4 HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-9fb\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"20451bd7f0deb304b370c80e79534a78","sha1":"099c5e7a5524ada0a0a2ac4f5274f3f539f8cad6","sha256":"b1845cc32295b9867718fd132a65040c38a218aa5649e6bdd9917664a713649b","sha512":"502339a8b482be0600b9980c779f9d274e02834c9247fead031e33d6d577d90f40a092f4e3093b2eb587165dacb2248a246b6fa3fac7abd5e38d6bfb15fcaecd","ssdeep":"","tlshash":"895152221ba82d09561e90ebefcbe9139b1e0c164f5e9e5791a8232ce6c441104b3f5c","first_seen":"2025-05-26T09:54:15.235407Z","last_seen":"2026-05-10T01:51:37.392548Z","times_seen":30,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":50,"dns":0,"connect":42,"send":0,"wait":41,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/jquery-3.7.1.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/jquery-3.7.1.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-155ed\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-26T10:21:01.659083Z","times_seen":161298,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":53,"dns":1,"connect":40,"send":0,"wait":80,"receive":6,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/zlib-1.3.1.js","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/zlib-1.3.1.js HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-1442\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5186,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"3d894481ef3c9779d9c8b955fb0682e7","sha1":"a3234d9c0ec4613d4ec2e48c2046887176a53d85","sha256":"b10cec5bc5a44a51f85d90f2aa2385f086ddb10b550da1b652a55f479833ed92","sha512":"67dd28a69571fe69f40c6da4f5a8ab8c5550ba58842e55cb793dd24623ba30b89449b846940abe505c2661b1b88bd9b05bcedd906f1f8093daa46c2752aeceb2","ssdeep":"96:yKwI51/f1dboTGbbQVTziPt52FL+Pt5EynwWwwUT:1wIFFoTG41zi152FL+159ndwpT","tlshash":"58b1fc1e1bfb4252d383f49e8ba744425139e90b390add0c794d86e04f96074dbeabf9","first_seen":"2024-06-05T20:15:08Z","last_seen":"2026-05-10T01:51:37.387902Z","times_seen":134,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/?pasteid=2cbc479d60f04e4a","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:40:00.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /?pasteid=2cbc479d60f04e4a HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: JSONHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:40:00 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, no-transform, must-revalidate\r\nPragma: no-cache\r\nExpires: Tue, 19 Aug 2025 07:40:00 GMT\r\nLast-Modified: Tue, 19 Aug 2025 07:40:00 GMT\r\nVary: Accept-Encoding, Accept\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, PUT, DELETE\r\nAccess-Control-Allow-Headers: X-Requested-With, Content-Type\r\nX-Uncompressed-Content-Length: 106863\r\nAccess-Control-Expose-Headers: X-Uncompressed-Content-Length\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106863,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"33fcc8bdb58e97b168118b8e5d6f2855","sha1":"51a033bc72a68a23ac99a3a77ad7340867922f9f","sha256":"fa24a540f4702a8a40e14d8895d441f6e9e196beee27c4fcd8debc65ca0efcec","sha512":"460a7f3d804ffbc3fc9c8ba4578baed07e687dea5f934dd0a43cc31c52a8859220bcf0bf601d8e0d33cc7bb1d9d37deeaa8724779b8da4c60b8e2a603a193e42","ssdeep":"3072:+pWfmX5Gv7M1AFMzk8qPOwOer0rvkpXmzznbZk:eWf05uM1AOoyeYam7y","tlshash":"66a312a54f7de946d04535b29d3f4f63e8b3d6181acbd226cf0d11a2097a262b83127e","first_seen":"2025-08-19T07:40:22.717385Z","last_seen":"2025-08-19T07:40:22.717385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/css/bootstrap/bootstrap-theme-3.4.1.css","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /css/bootstrap/bootstrap-theme-3.4.1.css HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-5b40\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23360,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23192)","md5":"7b858e59035661b88fa3ead2fe177d1f","sha1":"52a7ccbc39c79e2f50e739e3224749e63d1217e2","sha256":"89b8aa72aa254df55becec99c4d47b64af24b6c3c4dc3712d53c884d8d62d069","sha512":"b667ac88cff1d46623fd87849b31c2bcf67ac9d4cd91b7b539baa8feb41731136fd6d0857ddadcf4b196bc838e7dfd2f8d9e6225cd91954142d4437a5798d039","ssdeep":"192:Y7dOxdOiujDIG2GncdO1dO5MsOb3lkZOMdOkdOG31QNGiuUiu5iuOVOvVOI:sQfuoGQEUMn3lsLP3byn","tlshash":"d5a2b0317041b45bbe13c8e6f0692a9e67088a87c516dfbfd8af75f9d7122c94126332","first_seen":"2023-07-16T09:01:29Z","last_seen":"2026-05-26T08:47:56.31374Z","times_seen":518,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":49,"dns":1,"connect":40,"send":0,"wait":40,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-19T07:39:59.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /?2cbc479d60f04e4a HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, no-transform, must-revalidate\r\nPragma: no-cache\r\nExpires: Tue, 19 Aug 2025 07:39:59 GMT\r\nLast-Modified: Tue, 19 Aug 2025 07:39:59 GMT\r\nVary: Accept-Encoding, Accept\r\nContent-Security-Policy: default-src 'none'; base-uri 'self'; form-action 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval'; style-src 'self'; font-src 'self'; frame-ancestors 'none'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals allow-downloads\r\nCross-Origin-Resource-Policy: same-origin\r\nCross-Origin-Embedder-Policy: require-corp\r\nPermissions-Policy: browsing-topics=()\r\nReferrer-Policy: no-referrer\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: deny\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:3.4.1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Showdown:2.1.0","description":"A Markdown to HTML converter written in Javascript.","website":"https://showdownjs.com/","common_platform_enumeration":"","icon":"Showdown.png","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19270,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (374)","md5":"b9158dee8c85666167d2b50263a5f3de","sha1":"b4cc334adb7f3b89f46f24f085dc7623e323c584","sha256":"27101a6e1e1260afe8f2f821f485a69cb14e9f1d26d6b95d5aec67d2f47e8e58","sha512":"05761e34007aad87de1c749f985d32ab83ca3a06fbf98a41547afb8721eafb647b7ecab96fe18604d0384e56f2fbdc7a27cad7604161b2cb1e427ba6bbaa3751","ssdeep":"384:Vh4N81j5WimpQy0nscOE18jYLfp/tPOfVkKFKLSZ0VMAMVMBMtMZMFMnTMjC3Wmx:VvgQWKMhrJkrh","tlshash":"8b82418129dd1e3b031303cab098ea4874afcf39c5255896f6fb86a526f1c94b51f277","first_seen":"2025-08-19T07:40:22.719012Z","last_seen":"2025-08-19T07:40:22.719012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":188,"dns":30,"connect":40,"send":0,"wait":43,"receive":1,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/css/bootstrap/bootstrap-3.4.1.css","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /css/bootstrap/bootstrap-3.4.1.css HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-1da32\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"85e130099bb5a31b657c2ad725b32217","sha1":"210c7879f67f77b9aabba9040039cfb9cb55468a","sha256":"19652d307946010ab044297bdc9b4ebfeb1f07eb50d2cb4be5eb8bfea884cb0e","sha512":"2aacbe942d8c360ec93d26fa5306383060c65556dffd8c5e39dbda1adf9bf33b19ecc578d4381e3f8e4d531aa53ffa522eb63ebaef15c4c026fae9c5a2436a3b","ssdeep":"768:rfLGxw/Tc/hOWlJ+UtVIuiHlqAmQI4X8OAdXFxbv8KIf2BdU+JdOMx1iVvH1Fl:sw/YGGIuiHlqAmO8l1bNXdOqS","tlshash":"a0c3d7a0f21031ea7333c55a71d0fd872219a153e6664eb7f22f25d88f845ca16b3f1a","first_seen":"2023-07-29T22:58:14Z","last_seen":"2026-05-26T08:47:56.308945Z","times_seen":497,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/css/prettify/prettify.css?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /css/prettify/prettify.css?1.7.4 HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: text/css\r\nContent-Length: 655\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nConnection: keep-alive\r\nETag: \"6696dd87-28f\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (655), with no line terminators","md5":"01f71d0ca100f6f7f72d14c8ec17cea0","sha1":"dc032dcd1ee5fff6a03959a962cc7dda4410c822","sha256":"e3b0f209e58b0d412b1e37d9468ab6674dad3860077ad9a918a7462ca67d033d","sha512":"37b71420e93e5603545e990d4efa064e42ebc53e3a48f79c297adb58c41f0bba8dc1897eea1578bde3f23b295fa242496761c2091ff2691ae7240b31e50d4dd8","ssdeep":"","tlshash":"e8f04630c895c5e36a47e8ac519af343e86551eb791c2330793f73347c8818a322731d","first_seen":"2023-04-13T18:52:37Z","last_seen":"2026-05-26T08:47:56.306716Z","times_seen":1778,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":53,"dns":1,"connect":42,"send":0,"wait":39,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/legacy.js?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/legacy.js?1.7.4 HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-21a0\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8608,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6bdd06a79c8b49af6454790c5aed5e73","sha1":"e4cad0b9ae4591c4913bc58da8b52092cc93a83d","sha256":"fa36ecda65f3e5cefda2394fe627361581e56dfc6f85f1d5af83e0bf5249cc5e","sha512":"2d8a2cfaa5c7211a857f964f36986fb53074720cc7522ceedb0c1c3b0730cff548a51bfd96970180f633e2eaba8f1d083700808fa15b9e5e47a0a88bb9f4b68e","ssdeep":"192:9yEX0+j8kAjljXjV6WhFB8lk4tCArTdNSt9bIdkAuP4GX:fkPhDQk42J","tlshash":"bf02469928f72236a763207e574f6385f631821f52489d103a8e03706fd4b2a87f6edd","first_seen":"2023-03-10T08:10:20Z","last_seen":"2026-05-26T08:47:56.310942Z","times_seen":391,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/js/privatebin.js?1.7.4","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:39:59.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /js/privatebin.js?1.7.4 HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:39:59 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6696dd87-2c882\"\r\nExpires: Fri, 19 Sep 2025 07:39:59 GMT\r\nCache-Control: max-age=2678400\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182402,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"782d1d36f1c1453f14c77632bf9c4ff7","sha1":"b629a815250bbada7311a104aed623a8e4a0d218","sha256":"909763faf6b2ae8f35b98675aca8fd941882b507b345db2a93f362f77510a95c","sha512":"5a9e3d151627ba9fd56bcb6574fa6fa3f0b567819f7b65d924ce7fc1751e989a839a44b8421d509efeb2527e02b0dabb4a27505af47812f60b32b13413d3b0bd","ssdeep":"1536:pVSz367gc5JPrKdC6OHswtle4iZ2dx4gRnrUGydAceqK6khshBoxwt06JYTXD1R6:y67gc5JPN6OMwtJ5Ehkt6x","tlshash":"f804835938f3206001a76079678f7144f635a11b3284ad407e8e87b4af96f298bf7bdd","first_seen":"2024-07-19T21:04:37Z","last_seen":"2026-05-10T01:51:37.397169Z","times_seen":73,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":54,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.timeweb.ru/css/bootstrap/fonts/glyphicons-halflings-regular.woff2","fqdn":"secret.timeweb.ru","domain":"timeweb.ru","tld":"ru"},"ip":{"addr":"92.53.116.139","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret.timeweb.ru/?2cbc479d60f04e4a#CmvXrz9cvAJjzbQh5sCZqnvHcM7MWoNki6UXovN6q2dQ","date":"2025-08-19T07:40:00.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.timeweb.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 May 2025 09:16:17 GMT","end":"Wed, 01 Jul 2026 09:16:16 GMT"},"fingerprint":{"sha1":"5E:7B:54:82:06:0B:2C:FB:D8:01:98:DA:02:5E:AD:A6:A4:DB:ED:9D","sha256":"A9:23:76:53:F4:30:FD:FE:DF:A9:5A:5E:D2:61:D9:6F:FF:C4:61:F6:98:53:D3:95:87:4D:92:C9:0B:30:AD:86"}}},"request":{"raw":"GET /css/bootstrap/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: secret.timeweb.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.timeweb.ru/css/bootstrap/bootstrap-3.4.1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 19 Aug 2025 07:40:00 GMT\r\nContent-Type: application/font-woff2\r\nContent-Length: 18028\r\nLast-Modified: Tue, 16 Jul 2024 20:52:23 GMT\r\nConnection: keep-alive\r\nETag: \"6696dd87-466c\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18028,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-05-26T10:10:10.485963Z","times_seen":45201,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardchan.pw/","fqdn":"hardchan.pw","domain":"hardchan.pw","tld":"pw"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-19T07:39:58.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardchan.pw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 15:53:48 GMT","end":"Thu, 06 Nov 2025 16:52:32 GMT"},"fingerprint":{"sha1":"43:07:B3:B3:E3:2C:EB:A9:FB:91:E2:A2:FD:98:38:44:E9:5A:C6:12","sha256":"F5:68:DF:A1:B4:8C:0B:70:88:27:21:67:1E:CF:6B:68:FC:F2:B6:0F:A9:C8:C8:F9:BE:61:75:22:04:CF:C1:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hardchan.pw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 19 Aug 2025 07:39:58 GMT\r\nlocation: https://kutt.it/85Hku6\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6%2FT3M4pb%2FheiYNjd2eSphDTyIniWfNNHO5b74CeTalkb1trBMLWWFVn4L%2F%2Fw5lgg%2BsKO1f6pe8KftVn8zbCF6jcWdU29vJec6tw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9718000abc8bdabb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19270,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-26T10:18:27.992594Z","times_seen":15721036,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":12,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}