{"report_id":"83da6016-5034-4f73-9e65-9d9d191b924b","version":6,"status":"done","tags":[],"date":"2025-12-21T10:56:23Z","url":{"schema":"http","addr":"heddlokod.blogspot.hu/","fqdn":"heddlokod.blogspot.hu","domain":"heddlokod.blogspot.hu","tld":"blogspot.hu"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"captcha.krab1cc.sbs/","fqdn":"captcha.krab1cc.sbs","domain":"krab1cc.sbs","tld":"sbs"},"title":"Captcha","dom":{"size":19854,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15481)","md5":"36cbc5500fd0258c280c0329b59ae399","sha1":"3c8da65c826c5aaa7708cb35202894863d807ee7","sha256":"eeea81d9e8be6dabd19c86eb5e43c2fa5fb140472d6199dda979197346e8b275","sha512":"b26749299352b018ae6a705081377ecec5a42bc29ace8f241b2dd2f304b5342af51eb07b009c343940641eebc2d2532e278063551d13a6fe5ac725db26836f06","ssdeep":"384:CKXneaHp5siikrT9eEhCfl0kNrbGuyNsx9EWQ8g/FS8Fx:j6i7FeE0fl0kdquUwq/FS8Fx","tlshash":"98929eb565970d51ac004ca8b79a5755989d8033e305edb8b74d96c48fc7ee04873bce","dom_hash":"domhashcbc529359988c16f482d27a98f7609bb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"heddlokod.blogspot.hu/","fqdn":"heddlokod.blogspot.hu","domain":"heddlokod.blogspot.hu","tld":"blogspot.hu"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T10:56:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"jmp1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"captcha.krab1cc.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":2,"received_data":68922,"sent_data":1121,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jmp1.ru","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-01-17","domain_rank":3539458,"first_seen":"2017-02-02T19:16:08Z","last_seen":"2025-12-17T05:05:18.993075Z","alert_count":5,"request_count":5,"received_data":46613,"sent_data":2459,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"captcha.krab1cc.sbs","ip":{"addr":"185.246.130.64","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2025-12-18T12:48:39.807446Z","last_seen":"2025-12-18T12:48:39.807446Z","alert_count":3,"request_count":3,"received_data":26589,"sent_data":1496,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"apis.google.com","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1075,"first_seen":"2013-05-06T20:20:21Z","last_seen":"2025-12-14T22:54:19.957731Z","alert_count":0,"request_count":1,"received_data":64969,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2025-12-15T02:21:28.934312Z","alert_count":0,"request_count":2,"received_data":37200,"sent_data":921,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-14T22:17:06.291076Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"heddlokod.blogspot.hu","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2006-08-02","domain_rank":0,"first_seen":"2025-12-21T10:56:23.489497Z","last_seen":"2025-12-21T10:56:23.489497Z","alert_count":0,"request_count":1,"received_data":29183,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"i.yapx.ru","ip":{"addr":"65.21.143.8","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2015-03-31","domain_rank":4457957,"first_seen":"2015-06-11T14:04:11Z","last_seen":"2025-12-21T05:30:30.584306Z","alert_count":0,"request_count":1,"received_data":411,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"heddlokod.blogspot.com","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2025-11-17T08:43:22.911396Z","last_seen":"2025-12-21T07:45:07.479848Z","alert_count":0,"request_count":2,"received_data":36377,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"heddlokod.blogspot.com/","fqdn":"heddlokod.blogspot.com","domain":"heddlokod.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffb12e83dcc0f47432a5f235b4e92b05","sha1":"e8406c71d53cbc1ef21d9165e2e698cdf2a3a24b","sha256":"4d1e9b676c24505515f1632918c3bca14f7950f32c2b09b76722b9a8b65f20e6","sha512":"8009d492d00c9bc4642811f8606113cd91798a1ef1ea77e2b54294359fc31ca40573ed1ab330e09b0fee82e7670ccc03dcde4c81809cb28a536e753b1d9af269","ssdeep":"","tlshash":"3ca002d7ce46049592bbcc12a756917440e2ca87e7c98845e4010525a1b166d2902fa9","size":64,"data":"","first_seen":"2025-09-23T11:13:03.057193Z","last_seen":"2026-04-04T03:26:57.520677Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmp1.ru/25818/mcwap_ads/source/campaign-ads","fqdn":"jmp1.ru","domain":"jmp1.ru","tld":"ru"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f8a108ce65a1576b87bffeeab526c95","sha1":"d5581d6a3d6780600faa1d7dcd1d93e9f1a6ed87","sha256":"584a96479fe0abeda8a2d8faf2dd0824a3730d02dadc26651e44143482a904e0","sha512":"2557979d5b025ffdad628c8f0cf519d2b0149dbd23b9cce29f554cf7de48786bcae3cbd645b05f85cbc681405c1be4766302772df1a4663648e5b907dc3c4085","ssdeep":"","tlshash":"b611b97971360c75446b3039d8e9f38c3d715cdbf8482660682c0d551cd0a16539aede","size":1073,"data":"","first_seen":"2025-12-18T12:48:44.477617Z","last_seen":"2025-12-21T19:05:45.476007Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"jmp1.ru/PARSE/DATA/IMAGES/96118341911_ssylka-na-sajt-kraken-onion.jpg","fqdn":"jmp1.ru","domain":"jmp1.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jmp1.ru/25818/mcwap_ads/source/campaign-ads","date":"2025-12-21T10:56:01.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmp1.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 03:39:35 GMT","end":"Sun, 22 Feb 2026 03:39:34 GMT"},"fingerprint":{"sha1":"CB:EA:5D:D7:95:AF:28:45:F2:15:C8:F3:66:87:A2:97:D1:2B:23:4A","sha256":"27:CA:2E:2F:F4:D8:21:E3:8B:C5:65:9D:C3:11:C6:27:38:46:01:82:71:72:6E:06:65:2A:FF:92:D2:2E:A8:F8"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/96118341911_ssylka-na-sajt-kraken-onion.jpg HTTP/1.1\r\nHost: jmp1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmp1.ru/25818/mcwap_ads/source/campaign-ads\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":347,"dns":1,"connect":8,"send":0,"wait":0,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"jmp1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jmp1.ru/templates/KRAKEN_CAP/img/logo.webp","fqdn":"jmp1.ru","domain":"jmp1.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jmp1.ru/25818/mcwap_ads/source/campaign-ads","date":"2025-12-21T10:56:01.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmp1.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 03:39:35 GMT","end":"Sun, 22 Feb 2026 03:39:34 GMT"},"fingerprint":{"sha1":"CB:EA:5D:D7:95:AF:28:45:F2:15:C8:F3:66:87:A2:97:D1:2B:23:4A","sha256":"27:CA:2E:2F:F4:D8:21:E3:8B:C5:65:9D:C3:11:C6:27:38:46:01:82:71:72:6E:06:65:2A:FF:92:D2:2E:A8:F8"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/img/logo.webp HTTP/1.1\r\nHost: jmp1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmp1.ru/25818/mcwap_ads/source/campaign-ads\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":694,"timings":{"blocked":344,"dns":0,"connect":8,"send":0,"wait":0,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"jmp1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://captcha.krab1cc.sbs/","date":"2025-12-21T10:56:02.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.krab1cc.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 21 Dec 2025 10:56:02 GMT\r\ndate: Sun, 21 Dec 2025 10:56:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1be305145d51ecbeb52ba67f2208dea9","sha1":"6f97fc00e9d6771004cb17d53c7ff7d62011e78e","sha256":"5fb68a19bfedc1331144c73515b5cc021af26ac8605c62e73a31771a0e19ee62","sha512":"b3a73238231bbeeaf01907f0e3a78d4221d24b50de71345c66a6d6a4ff6afb5fd8d88b242a57ba35d37f0466edc6d3a19c7e02dfd4563d2ee565ca2cc06182c6","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGx:8KYXuM1+4","tlshash":"dd227792002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:25:11.707221Z","last_seen":"2026-04-05T01:08:26.842134Z","times_seen":3364,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":93,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmp1.ru/templates/KRAKEN_CAP/styles/style.css","fqdn":"jmp1.ru","domain":"jmp1.ru","tld":"ru"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jmp1.ru/25818/mcwap_ads/source/campaign-ads","date":"2025-12-21T10:56:01.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmp1.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 03:39:35 GMT","end":"Sun, 22 Feb 2026 03:39:34 GMT"},"fingerprint":{"sha1":"CB:EA:5D:D7:95:AF:28:45:F2:15:C8:F3:66:87:A2:97:D1:2B:23:4A","sha256":"27:CA:2E:2F:F4:D8:21:E3:8B:C5:65:9D:C3:11:C6:27:38:46:01:82:71:72:6E:06:65:2A:FF:92:D2:2E:A8:F8"}}},"request":{"raw":"GET /templates/KRAKEN_CAP/styles/style.css HTTP/1.1\r\nHost: jmp1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmp1.ru/25818/mcwap_ads/source/campaign-ads\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Dec 2025 10:56:01 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nEtag: W/1982591531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7386,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"e64a2c9536d74438497f49d7546dd238","sha1":"72f60e5616ce747a758e77056b1e9f35d5caf1fb","sha256":"b5f2f5b8acc41af5d1e493354718795990ecd36bfa05e02471546976c4c71b7e","sha512":"6fbb19853c1eea122f4ed7bffa1fbb138179897b343006a20c328f18cad24803381d10d62103218977a67154fb4f8bd0c133718729230d7ff54e7d41f31d95b4","ssdeep":"192:hVvIgYSG+I1dzTMsD7eLJu5f7wJCs52obc1pfutK:v+fP","tlshash":"2ee1bc49a6052005a2b3a97cbbb20b14eb6544635b8b91f979ec9348cff907942a1fdc","first_seen":"2023-07-05T20:50:20Z","last_seen":"2026-03-19T12:19:34.881959Z","times_seen":746,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"jmp1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jmp1.ru/PARSE/DATA/IMAGES/44241849531_gidra-com.jpg","fqdn":"jmp1.ru","domain":"jmp1.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jmp1.ru/25818/mcwap_ads/source/campaign-ads","date":"2025-12-21T10:56:01.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmp1.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 03:39:35 GMT","end":"Sun, 22 Feb 2026 03:39:34 GMT"},"fingerprint":{"sha1":"CB:EA:5D:D7:95:AF:28:45:F2:15:C8:F3:66:87:A2:97:D1:2B:23:4A","sha256":"27:CA:2E:2F:F4:D8:21:E3:8B:C5:65:9D:C3:11:C6:27:38:46:01:82:71:72:6E:06:65:2A:FF:92:D2:2E:A8:F8"}}},"request":{"raw":"GET /PARSE/DATA/IMAGES/44241849531_gidra-com.jpg HTTP/1.1\r\nHost: jmp1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmp1.ru/25818/mcwap_ads/source/campaign-ads\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":346,"dns":1,"connect":13,"send":0,"wait":0,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"jmp1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.krab1cc.sbs/css/normalize.css","fqdn":"captcha.krab1cc.sbs","domain":"krab1cc.sbs","tld":"sbs"},"ip":{"addr":"185.246.130.64","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://captcha.krab1cc.sbs/","date":"2025-12-21T10:56:02.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"captcha.krab1cc.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 12:24:46 GMT","end":"Mon, 09 Mar 2026 12:24:45 GMT"},"fingerprint":{"sha1":"50:BA:C0:01:87:66:73:A4:0A:20:E0:B6:AD:00:12:33:51:6B:D0:F4","sha256":"E9:A0:0C:CC:54:4D:3E:B0:CB:CA:B9:10:C3:6B:51:A8:3A:7E:EF:96:34:AD:01:55:86:9D:96:45:7C:40:68:15"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: captcha.krab1cc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.krab1cc.sbs/\r\nCookie: route=6; server_id=csrv_17; user_id=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Dec 2025 10:56:02 GMT\r\nContent-Type: text/css\r\nContent-Length: 4461\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nSet-Cookie: mirror_sid=ef099331-8bf9-457b-9c98-997109e5b190; Path=/; HttpOnly; SameSite=Lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nlast-modified: Sun, 20 Jul 2025 08:20:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HiPorykKuB46%2FG8QpxyDGBId9MQ6kMPiu5JO3aalLVpLAv9EOu4NZQjnIYE74ccgzxOwDM8QCOr2apus9szLNNBwt4CUtyk2jzEsR4%3D\"}]}\r\nage: 1500\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9b16d9bebdcc0a37-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4461,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aab74d6ca10a0902b9fac0e304c4be13","sha1":"7cc28584e1cd4acf258f32322b198faa19e2c47c","sha256":"6b1e238b3810eef313f24f098db4d880175b3ed1168f0c9faaaff9b53089c2fa","sha512":"8908ebef958dec57ec62f0841a1631bfa992ce53e13a55fe00686f1c3ecabedfb662d50d5e567c69c03b0470de149c2bddeaa1a9f9903cfce4bdccfc5ffe1d27","ssdeep":"48:z2Gaml89fIcJq7e/BQLQ1nrnccRjXdmnm/IZvJzXsacPaQfk:KM89fI6z/tTnWHO1c","tlshash":"549151651b604f11522b4e38339beb1533188233895d38ececa199edcf8675bd6d17ca","first_seen":"2023-04-18T10:14:13Z","last_seen":"2026-04-04T20:50:22.812603Z","times_seen":1056,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"captcha.krab1cc.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heddlokod.blogspot.hu/","fqdn":"heddlokod.blogspot.hu","domain":"heddlokod.blogspot.hu","tld":"blogspot.hu"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T10:55:59.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:29 GMT","end":"Wed, 25 Feb 2026 15:51:28 GMT"},"fingerprint":{"sha1":"F6:33:BE:EA:F5:79:1E:F2:00:FD:FC:DC:FB:95:50:65:31:FC:C5:86","sha256":"38:1B:78:0E:3E:4B:06:18:71:42:02:B5:DC:57:AF:71:F4:4F:F5:E3:71:C4:5F:A4:75:5E:AC:72:19:23:E3:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heddlokod.blogspot.hu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://heddlokod.blogspot.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 21 Dec 2025 10:55:59 GMT\r\nexpires: Sun, 21 Dec 2025 10:55:59 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 197\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":28689,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":170,"dns":33,"connect":21,"send":0,"wait":130,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.yapx.ru/DjG2.jpg","fqdn":"i.yapx.ru","domain":"yapx.ru","tld":"ru"},"ip":{"addr":"65.21.143.8","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heddlokod.blogspot.com/","date":"2025-12-21T10:56:00.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yapx.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Dec 2025 08:52:55 GMT","end":"Sat, 21 Mar 2026 08:52:54 GMT"},"fingerprint":{"sha1":"6E:F6:D2:A8:99:E0:F4:8C:92:01:76:B8:D5:D1:41:2F:7C:51:22:18","sha256":"D8:10:11:76:19:43:9C:FB:0D:E7:C4:A5:D4:47:65:4D:2E:0D:4C:2D:41:DE:13:5D:40:E5:A7:99:52:9E:AC:96"}}},"request":{"raw":"GET /DjG2.jpg HTTP/1.1\r\nHost: i.yapx.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heddlokod.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sun, 21 Dec 2025 10:56:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://i.yapx.cc/DjG2.jpg\r\nExpires: Tue, 20 Jan 2026 10:56:00 GMT\r\nCache-Control: max-age=2592000\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":118,"dns":23,"connect":14,"send":0,"wait":16,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heddlokod.blogspot.com/js/cookienotice.js","fqdn":"heddlokod.blogspot.com","domain":"heddlokod.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heddlokod.blogspot.com/","date":"2025-12-21T10:56:00.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:29 GMT","end":"Wed, 25 Feb 2026 15:51:28 GMT"},"fingerprint":{"sha1":"F6:33:BE:EA:F5:79:1E:F2:00:FD:FC:DC:FB:95:50:65:31:FC:C5:86","sha256":"38:1B:78:0E:3E:4B:06:18:71:42:02:B5:DC:57:AF:71:F4:4F:F5:E3:71:C4:5F:A4:75:5E:AC:72:19:23:E3:CC"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: heddlokod.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heddlokod.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Sun, 21 Dec 2025 10:56:00 GMT\r\nexpires: Sun, 28 Dec 2025 10:56:00 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sun, 21 Dec 2025 08:51:21 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-05T00:48:07.241918Z","times_seen":109365,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"captcha.krab1cc.sbs/favicon.ico","fqdn":"captcha.krab1cc.sbs","domain":"krab1cc.sbs","tld":"sbs"},"ip":{"addr":"185.246.130.64","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://captcha.krab1cc.sbs/","date":"2025-12-21T10:56:02.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"captcha.krab1cc.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 12:24:46 GMT","end":"Mon, 09 Mar 2026 12:24:45 GMT"},"fingerprint":{"sha1":"50:BA:C0:01:87:66:73:A4:0A:20:E0:B6:AD:00:12:33:51:6B:D0:F4","sha256":"E9:A0:0C:CC:54:4D:3E:B0:CB:CA:B9:10:C3:6B:51:A8:3A:7E:EF:96:34:AD:01:55:86:9D:96:45:7C:40:68:15"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: captcha.krab1cc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://captcha.krab1cc.sbs/\r\nCookie: route=6; server_id=csrv_17; user_id=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Dec 2025 10:56:02 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nSet-Cookie: mirror_sid=4cae20dd-b616-4332-9f8e-e25879e342ef; Path=/; HttpOnly; SameSite=Lax\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\nage: 6626\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 21 Dec 2025 09:05:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vzM5Z2RtWXAbrrYhMSc6AFgEeh%2F1XzdT5gSKXa1S6Ce2eIKGWY6H3FJL7o3BtzJjbvNZn5s8jfL%2BVVM7kBdgw7UTeXTGrOHnawt2bQ%3D\"}]}\r\ncf-ray: 9b16d9c09c6d0a44-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":44,"dns":0,"connect":8,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"captcha.krab1cc.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://captcha.krab1cc.sbs/","date":"2025-12-21T10:56:02.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://captcha.krab1cc.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 17:24:21 GMT\r\nexpires: Thu, 17 Dec 2026 17:24:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 322301\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-05T00:46:54.213934Z","times_seen":133577,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":115,"dns":1,"connect":27,"send":0,"wait":28,"receive":38,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://captcha.krab1cc.sbs/","date":"2025-12-21T10:56:02.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://captcha.krab1cc.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 18:00:30 GMT\r\nexpires: Thu, 17 Dec 2026 18:00:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 320132\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-04-04T23:48:46.562092Z","times_seen":7566,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":125,"dns":1,"connect":28,"send":0,"wait":53,"receive":6,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heddlokod.blogspot.com/","fqdn":"heddlokod.blogspot.com","domain":"heddlokod.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T10:55:59.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:51:29 GMT","end":"Wed, 25 Feb 2026 15:51:28 GMT"},"fingerprint":{"sha1":"F6:33:BE:EA:F5:79:1E:F2:00:FD:FC:DC:FB:95:50:65:31:FC:C5:86","sha256":"38:1B:78:0E:3E:4B:06:18:71:42:02:B5:DC:57:AF:71:F4:4F:F5:E3:71:C4:5F:A4:75:5E:AC:72:19:23:E3:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heddlokod.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Sun, 21 Dec 2025 10:55:59 GMT\r\ndate: Sun, 21 Dec 2025 10:55:59 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Thu, 03 Oct 2024 22:14:32 GMT\r\netag: W/\"35cddef52df414b8bdcb6c39827bb8f838db0f4b0b2ffc464b8c24c664ba1071\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 7707\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":28689,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5167)","md5":"2b7a04396c788b272fc955aab919ea06","sha1":"7a9cf61bd118e97fcc6fbfab6559d77e9f987a75","sha256":"451ee31cbfa981c1e1aa76886684b3d082ed6372b639626d892df8c4ee9be04e","sha512":"2a6e6663e71fd783d9060f047c8d5a1126abc1e93c5e14f79050dc50b58f2e797853cc2a5f25cb96403919cb8c347680b29fe73fff441cb67412f97ed0eca52b","ssdeep":"384:HGgLWo35xCHMsV1oHHXfPWdoO5VsjLIqcjWJtR63tLj6jcJDkIdllItxDBWMEpd:HZd3eyHHvPWdoSVQIqcjWrIdyQ68","tlshash":"cbd295b32c81543a1a03e5ddf432ab6ff559c651e503a465f9fc8b9ea7c2dd2882c708","first_seen":"2025-12-21T08:32:01.751381Z","last_seen":"2025-12-21T18:03:55.082562Z","times_seen":6,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":139,"dns":33,"connect":21,"send":0,"wait":217,"receive":16,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heddlokod.blogspot.com/","date":"2025-12-21T10:56:00.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apis.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:27 GMT","end":"Wed, 25 Feb 2026 15:57:26 GMT"},"fingerprint":{"sha1":"9D:87:A6:34:80:A6:6D:D2:FD:7F:96:8E:A7:75:88:C7:2E:76:91:00","sha256":"0C:7D:32:2B:56:B7:17:3C:20:8C:C2:19:8C:8F:EE:E6:10:1A:78:96:9D:30:69:1F:AD:89:F4:53:3D:12:55:68"}}},"request":{"raw":"GET /js/platform.js HTTP/1.1\r\nHost: apis.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heddlokod.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gapi-team\"\r\nreport-to: {\"group\":\"gapi-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gapi-team\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24134\r\ndate: Sun, 21 Dec 2025 10:56:00 GMT\r\nexpires: Sun, 21 Dec 2025 10:56:00 GMT\r\ncache-control: private, max-age=1800, stale-while-revalidate=1800\r\netag: \"e5c2dd815afd1d1c\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64109,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1863)","md5":"1595388409df24df1cea28642784863c","sha1":"e35e06cfdff59c66229adf0b254dbdcbe67c67f9","sha256":"1588214d703692e4f4402992a39a9affee6858771b93b0541afbdfacf7b88457","sha512":"bd709b934300e882da2997fa5ecfad056723acca3ab24b7a583c2bdc39c35ea39fde4107b88bfda47089d993fa5f0634267dace096271ba3f8376741f2cb2af7","ssdeep":"1536:wDGLvrNc+qGjGRadpYqelGVl6r82GefdL:rNc4nYqgr7Gi","tlshash":"3853ead976a6703283a3b1a5103f010ef17b6da9fc4c98a8b199d4e42d74e89017bf7d","first_seen":"2025-12-15T22:05:55.502965Z","last_seen":"2026-01-20T21:46:53.647653Z","times_seen":3739,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":116,"dns":1,"connect":22,"send":0,"wait":31,"receive":10,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/1350801215-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heddlokod.blogspot.com/","date":"2025-12-21T10:56:00.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:11 GMT","end":"Wed, 25 Feb 2026 15:49:10 GMT"},"fingerprint":{"sha1":"71:BA:91:B9:41:4A:6C:DD:F4:B4:05:6E:8A:17:D4:DF:27:BB:94:24","sha256":"01:D7:F2:49:50:B7:96:CF:13:B9:C0:6B:B9:7C:F5:CE:82:B1:28:20:A3:F4:AE:4C:C0:B4:8C:B4:6E:D7:B4:73"}}},"request":{"raw":"GET /static/v1/widgets/1350801215-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heddlokod.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":141,"dns":1,"connect":27,"send":0,"wait":17,"receive":4,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmp1.ru/25818/mcwap_ads/source/campaign-ads","fqdn":"jmp1.ru","domain":"jmp1.ru","tld":"ru"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T10:56:00.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmp1.ru","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Nov 2025 03:39:35 GMT","end":"Sun, 22 Feb 2026 03:39:34 GMT"},"fingerprint":{"sha1":"CB:EA:5D:D7:95:AF:28:45:F2:15:C8:F3:66:87:A2:97:D1:2B:23:4A","sha256":"27:CA:2E:2F:F4:D8:21:E3:8B:C5:65:9D:C3:11:C6:27:38:46:01:82:71:72:6E:06:65:2A:FF:92:D2:2E:A8:F8"}}},"request":{"raw":"GET /25818/mcwap_ads/source/campaign-ads HTTP/1.1\r\nHost: jmp1.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 21 Dec 2025 10:56:01 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReferer: \r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38871,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14740), with CRLF line terminators","md5":"69143bb7bd6f5e498be1a71267da1562","sha1":"42f6c750b5500c8d034321636b8f8d75e00f9835","sha256":"ef202c8efee0b4a89f0e8e60047b903f2dc51c5d26202fd65c2c9adf32f41149","sha512":"b10249afc48828289a217aaad73621ba5421d8f53c5d60fd4b7ee647434afd4f83cb983d95f5a02b6e358d2d18ff757b943cc3a16966e3a008febc89678d4f13","ssdeep":"768:9MHNOCPJx+4PGOcjRYuyqZ8f99iZNBWOYOb88jTjZrywzYa4hcZtv:9MHNOCPJx+4PG/jRYuyqZ8f99iZ3WTOx","tlshash":"7003b611a68a24eb0111f156dd087a09fdda84ff7f6a521235ac2dbf3bf2034c66a75c","first_seen":"2025-12-21T10:56:26.047399Z","last_seen":"2025-12-21T10:56:26.047399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":75,"dns":1,"connect":9,"send":0,"wait":542,"receive":2,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"jmp1.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"captcha.krab1cc.sbs/","fqdn":"captcha.krab1cc.sbs","domain":"krab1cc.sbs","tld":"sbs"},"ip":{"addr":"185.246.130.64","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T10:56:01.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"captcha.krab1cc.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 12:24:46 GMT","end":"Mon, 09 Mar 2026 12:24:45 GMT"},"fingerprint":{"sha1":"50:BA:C0:01:87:66:73:A4:0A:20:E0:B6:AD:00:12:33:51:6B:D0:F4","sha256":"E9:A0:0C:CC:54:4D:3E:B0:CB:CA:B9:10:C3:6B:51:A8:3A:7E:EF:96:34:AD:01:55:86:9D:96:45:7C:40:68:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: captcha.krab1cc.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmp1.ru/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 21 Dec 2025 10:56:01 GMT\r\nContent-Type: text/html;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nset-cookie: route=6; Expires=Mon, 22-Dec-2025 10:47:04 GMT; Path=/\nserver_id=csrv_17\nuser_id=\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, accept-encoding\r\ncontent-language: en-US\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MULPmxYL%2BMDcav1qjn%2BNfukWMyqEvJD6p9d0BxOAbFiiJNC08fvNq7fvj8%2FUTpoJ8zVtg4%2FF%2B2mb2BjwixrsAdfi3k7nW3zWLZzsTZs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b16d9bc1d502d5c-ARN\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19869,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15481)","md5":"8950a6a7dc17470e96049fac5224901d","sha1":"3489d53d3a558548974997eb6f63eddeeb7a088a","sha256":"8e75f19f1de73d681e74c701d7f78cfcebc7c2231af275a3be52008a5a62aa26","sha512":"2f7089490491de238370fb3d0fd8f8f3c20016a3385f42af8fa681d2a1da87c16822fe5e22b30ae357dd727e284e4d067994258daa34aafc704a1493e64cc1bc","ssdeep":"384:WKXneaHp5siikrT9eEhCfl0kNrbGuyNsx9EWQ8g/FS8Fx:f6i7FeE0fl0kdquUwq/FS8Fx","tlshash":"ae929eb565970d51ac004ca8b79a5755989d8033e305edb8b74da6c48fc7ee04833bce","first_seen":"2025-12-21T10:56:26.049786Z","last_seen":"2025-12-21T10:56:26.049786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":19,"dns":1,"connect":8,"send":0,"wait":336,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"captcha.krab1cc.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/4128112664-css_bundle_v2.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heddlokod.blogspot.com/","date":"2025-12-21T10:56:00.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:11 GMT","end":"Wed, 25 Feb 2026 15:49:10 GMT"},"fingerprint":{"sha1":"71:BA:91:B9:41:4A:6C:DD:F4:B4:05:6E:8A:17:D4:DF:27:BB:94:24","sha256":"01:D7:F2:49:50:B7:96:CF:13:B9:C0:6B:B9:7C:F5:CE:82:B1:28:20:A3:F4:AE:4C:C0:B4:8C:B4:6E:D7:B4:73"}}},"request":{"raw":"GET /static/v1/widgets/4128112664-css_bundle_v2.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heddlokod.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 7900\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Dec 2025 10:04:19 GMT\r\nexpires: Tue, 15 Dec 2026 10:04:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Dec 2025 01:49:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 521501\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36490,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36489)","md5":"66844e0a3681139d568bc448652a35b3","sha1":"1f98e48e7a03be6444a3568cc9137b8470e673d7","sha256":"614d30d4dc372edb61fa68ef73b5529fea70822a0626e9ea43e776207f68028a","sha512":"05a1ff7a6279895536e26fbdf3ae9023d11d4f26670528bd1b920e7e1023cd63e4965489f72c497a679c0dfd410d2fcc9ea260412820ea53658e95d471bdb4ef","ssdeep":"384:YN90OhFqDg3A2VysImDyPWquJMpx/SCYW0h8+Rl9yaZwuJ86YKSQCNL/J69nKg9f:YN90OhIsJnIm6IvW0trVJw1gngRLFr2","tlshash":"16f2c9719590342df127d726b893ba8d3224d563e3634eeee516b6b8cec5ada003331d","first_seen":"2025-09-12T00:20:33.061322Z","last_seen":"2026-01-12T23:05:08.582193Z","times_seen":10533,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":103,"dns":1,"connect":16,"send":0,"wait":16,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}